Select a scanner below. The IAM permissions update to match your selection.
Buckets, lifecycle, public access, costs
FreeVolumes, snapshots, orphans, idle disks
BetaIdle instances, ghost detection, flow logs
BetaIdle databases, zero-connection detection
BetaIn the target account open IAM → Roles → Create role and choose Custom trust policy.
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Principal": { "AWS": "arn:aws:iam::…:root" },
"Action": "sts:AssumeRole",
"Condition": {
"StringEquals": { "sts:ExternalId": "sign in to get yours" }
}
}]
}
Add this as an inline policy on the role. S3 only — free tier.
Copy this from the role summary page in IAM.