AWS

What is AWS?

‍

Amazon Web Services (AWS) is a cloud computing platform that provides infrastructure services such as compute, storage, databases, networking, and security tools. Unlike SaaS tools, AWS does not have traditional per-user licenses. Instead, “access management” is based on IAM users, roles, and permissions that control who can use cloud resources.

Where AWS access management goes wrong without integration

‍

IAM users and roles grow uncontrollably
Teams often create new IAM users and roles for projects, but rarely clean them up afterward.

Inactive users still retain access to critical infrastructure
Former employees or contractors often keep IAM credentials or role access even after they leave.

Over-permissioned accounts increase risk
Users are frequently granted admin-level or broad permissions instead of least-privilege access.

No visibility into who has access to what
It becomes difficult to track which users, roles, or services have access to AWS resources across accounts.

Orphaned access keys remain active
Old API keys and access credentials often remain active long after they are needed.

Key license management features with Corma

‍

Centralized IAM visibility
Get a complete overview of all AWS users, roles, groups, and permission sets in one place.

Access activity tracking
Identify which IAM users and roles are actively used vs inactive.

Automated access cleanup
Flag or remove unused IAM users, roles, and access keys based on inactivity rules.

Least-privilege enforcement
Detect over-permissioned accounts and help reduce access scope where needed.

Orphaned credential detection
Identify unused or risky access keys and credentials that should be rotated or removed.

‍

Frequently Asked Questions

‍

Does AWS use licenses?

No. AWS does not use traditional licenses. Access is managed through IAM users, roles, and permissions.

Can Corma manage AWS IAM users?

Yes. Corma provides visibility and control over IAM users, roles, and access keys.

Can inactive AWS users be removed automatically?

Yes. You can define rules to detect and revoke inactive IAM users or credentials.

Does this improve AWS security?

Yes. It reduces over-permissioning, orphaned access, and unused credentials.

Can we see who has access to AWS resources?

Yes. Corma provides centralized visibility across all AWS accounts, users, and roles.

‍