AWS Security Hub expanded its capabilities by detecting unused IAM permissions, roles, and credentials across an organization’s AWS accounts, presenting identity risks alongside other security findings in a unified console. This integration helps security teams identify and remediate excessive or stale access that could be exploited to compromise resources.
By evaluating actual access activity over 90 days, Security Hub connects unused permissions to resource exposure context and provides recommendations for least-privilege policies. The automated IAM Access Analyzer setup simplifies deployment across multiple accounts, improving visibility and management of identity attack surfaces at scale without additional cost for Essentials-tier users.
Source & further reading
AWS Security Hub now uncovers identity risks from unused access ↗Source published 2026-05-20. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.