security-audit

AWS IAM Audit Agent

A project concept for scanning IAM risk signals and generating an audit-ready report.

Jun 02, 2026 active
AWSIAMsecurityautomation

The project goal is to convert repetitive IAM review work into a consistent audit workflow: collect evidence, classify findings, and produce a reviewer-friendly summary.

Scope

The first version focuses on:

  • IAM users and MFA status
  • Access key age and last-used data
  • Administrator-level permissions
  • CSV or Markdown output for review

Success criteria

The output should be useful in a security review without requiring the reviewer to run AWS CLI commands manually.