Microsoft Azure → Amazon Web Services
AWS equivalent of Microsoft Entra ID Governance (access reviews)
The closest AWS equivalent of Microsoft Entra ID Governance (access reviews) is IAM Access Analyzer.
About Microsoft Entra ID Governance (access reviews)
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available Microsoft Entra Permissions Management, the former multicloud CIEM product, retired November 1, 2025. |
| What it is | Identity lifecycle workflows, entitlement management, and recurring access reviews of group memberships, app assignments, and role assignments. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (1)
| Capability | AWS equivalent | Match |
|---|---|---|
| Find excessive, unused, or external access | IAM Access Analyzer | Partial match |
Identity & access management(1)
Find excessive, unused, or external access Partial match
Microsoft maps IAM Access Analyzer to Microsoft Entra access reviews (part of Entra ID Governance). Access Analyzer is automated policy analysis, while access reviews are periodic human attestations. Entra Permissions Management, Microsoft's former multicloud permissions analyzer, retired November 1, 2025.
- Method. Access Analyzer uses automated reasoning to find external and internal access paths, flags unused roles, keys, and permissions, and validates policies. Access reviews ask owners or managers to confirm who still needs access.
- Automated analysis on Azure. The closest automated counterpart is the cloud infrastructure entitlement management (CIEM) capability in the Defender CSPM plan, which assesses identity and access permissions across Azure, AWS, and GCP.