access-review

1# Access Review
2 
3Implement periodic access review processes for AWS IAM, GitHub, Okta, and other identity providers, including automated reporting, certification workflows, and unused permission detection.
4 
5## Access Review Process
6 
7```yaml
8access_review_workflow:
9  1_scope:
10    actions:
11      - Define systems in scope for the review cycle
12      - Identify review owners (managers, system owners)
13      - Set review timeline and deadlines
14      - Generate access inventory from all identity sources
15    frequency:
16      privileged_access: Quarterly
17      standard_access: Semi-annually
18      service_accounts: Quarterly
19      api_keys: Monthly
20 
21  2_extract:
22    actions:
23      - Pull current access data from all systems
24      - Correlate identities across platforms (SSO mapping)
25      - Enrich with last login and activity data
26      - Flag accounts for review (inactive, over-privileged, orphaned)
27 
28  3_review:
29    actions:
30      - Assign review items to appropriate managers
31      - Manager certifies each user's access (approve/revoke/modify)
32      - Risk-based prioritization (privileged users reviewed first)
33      - Escalate non-responses after deadline
34    decisions:
35      approve: "Access is appropriate for current role"
36      modify: "Access needs adjustment (reduce/change scope)"
37      revoke: "Access is no longer needed"
38 
39  4_remediate:
40    actions:
41      - Revoke access flagged for removal
42      - Modify access as directed by reviewers
43…