Amazon Web Services → Microsoft Azure
Azure equivalent of IAM Access Analyzer
Microsoft maps IAM Access Analyzer to Microsoft Entra access reviews (part of Entra ID Governance).
About IAM Access Analyzer
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | Finds resources shared externally or internally, identifies unused roles, keys, and permissions, validates policies, runs custom policy checks, and generates least-privilege policies from CloudTrail activity. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| Find excessive, unused, or external access | Microsoft Entra ID Governance (access reviews) | Partial match |
Identity & access management(1)
Find excessive, unused, or external access Partial match
Microsoft maps IAM Access Analyzer to Microsoft Entra access reviews (part of Entra ID Governance). Access Analyzer is automated policy analysis, while access reviews are periodic human attestations. Entra Permissions Management, Microsoft's former multicloud permissions analyzer, retired November 1, 2025.
- Method. Access Analyzer uses automated reasoning to find external and internal access paths, flags unused roles, keys, and permissions, and validates policies. Access reviews ask owners or managers to confirm who still needs access.
- Automated analysis on Azure. The closest automated counterpart is the cloud infrastructure entitlement management (CIEM) capability in the Defender CSPM plan, which assesses identity and access permissions across Azure, AWS, and GCP.