AWS Identity and Access Management (IAM) access advisor now enables you to automate the analysis of your IAM permissions across all your accounts using IAM access advisor APIs with the AWS Command Line Interface (AWS CLI) or SDK . IAM access advisor helps you audit service access, remove unnecessary permissions, and set appropriate permissions providing the last timestamp when an IAM entity (e.g., user, role, or a group) accessed an AWS service.