AWS IAM Access Analyzer vs Wiz Container and Kubernetes Security
AWS IAM Access Analyzer
aws.amazon.com
Wiz Container and Kubernetes Security
wiz.ioSide by side
| Figure | AWS IAM Access Analyzer | Wiz Container and Kubernetes Security |
|---|---|---|
| Price from | $0.20/mo | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | — |
| Plans published | 9 | 1 |
| Spec score · Cloud Infrastructure Entitlement Management Software | 9.4 (#1) | 6.7 (#16) |
| Intended users | AWS describes the service as helping security teams review and refine access and compliance teams demonstrate access-control audit requirements. | The product page describes collaboration between developers and security teams to address issues across the container application lifecycle. |
| Purpose | IAM Access Analyzer helps set, verify, and refine permissions on the journey toward least privilege. | Wiz secures containers, Kubernetes, and cloud environments from build time through runtime. |
Plans
AWS IAM Access Analyzer
- Custom policy checksFree
- External access analysisFree
- External access analyzerFree
- IAM policy validationFree
- Policy generationFree
- Unused access analysis$0.20 a month
- Unused access analyzer$0.20 a month
- Internal access analysis$9 a month
- Internal access analyzer$9 a month
Wiz Container and Kubernetes Security
- Wiz Container and Kubernetes SecurityPriced on request
In their own words
AWS IAM Access Analyzer
AWS IAM Access Analyzer helps teams set, verify, and refine permissions toward least privilege. It examines external, internal, and unused access to AWS resources. External analysis monitors for new or changed permissions that allow public or cross-account access; internal findings identify users and roles with access to S3, DynamoDB, or RDS resources. Unused-access findings can identify unused roles, IAM user keys and passwords, services, and actions. The service can generate fine-grained IAM policies from activity captured in AWS CloudTrail logs, and policy validation supplies security warnings, errors, general warnings, and best-practice suggestions. Custom policy checks can be integrated into CI/CD pipelines before deployment. The analyzer also provides last-accessed information for services and actions from select AWS services and connects with AWS Security Hub CSPM and Amazon EventBridge for findings workflows. AWS says automated reasoning technology applies mathematical logic to assess permissions. Policy validation, policy generation, and external access analysis are provided at no additional charge. Other listed charges include $0.0020 per custom policy-check API call, $0.20 per IAM role or user per month for unused-access analysis, and $9.00 per resource monitored per Region per month for internal access analysis.
Wiz Container and Kubernetes Security
Wiz Container and Kubernetes Security has no write-up on Specifiction yet; its figures are above.