access-review

1# Access Review
2 
3Implement periodic access review processes for AWS IAM, GitHub, Okta, and other identity providers, including automated reporting, certification workflows, and unused permission detection.
4 
5## When to Use
6 
7- Conducting quarterly or annual access reviews for compliance (SOC 2, HIPAA, PCI DSS, ISO 27001)
8- Identifying and removing stale accounts and unused credentials
9- Certifying that current access levels match job responsibilities
10- Detecting excessive privileges and dormant service accounts
11- Generating evidence for auditor requests on access governance
12 
13## Access Review Process
14 
15```yaml
16access_review_workflow:
17  1_scope:
18    actions:
19      - Define systems in scope for the review cycle
20      - Identify review owners (managers, system owners)
21      - Set review timeline and deadlines
22      - Generate access inventory from all identity sources
23    frequency:
24      privileged_access: Quarterly
25      standard_access: Semi-annually
26      service_accounts: Quarterly
27      api_keys: Monthly
28 
29  2_extract:
30    actions:
31      - Pull current access data from all systems
32      - Correlate identities across platforms (SSO mapping)
33      - Enrich with last login and activity data
34      - Flag accounts for review (inactive, over-privileged, orphaned)
35 
36  3_review:
37    actions:
38      - Assign review items to appropriate managers
39      - Manager certifies each user's access (approve/revoke/modify)
40      - Risk-based prioritization (privileged users reviewed first)
41…