Review
Recently I read an interesting article:
https://aws.amazon.com/blogs/security/how-to-prioritize-iam-access-analyzer-findings/
Well, I don’t expect it to be interesting for most of people.
But for people that are in charge of security reviews of company AWS accounts and review AWS Access Analyser - it makes life much simpler.
Basically it shows a way to mute repeated false postitives. For example when you use SSO all new SSO users will be shown in AWS Access Analyser - that probably not a good thing. Especially if you have a lot of those.
Then you can just go to Archive rules - and auto archive SSO users :)
More details are in the article.