AWS IAM Access Analyzer Deleted
This rule detects when an AWS IAM Access Analyzer is deleted. Deleting an Access Analyzer can be a defense evasion technique, as it removes a critical security monitoring tool that helps identify unintended external access to resources. An adversary might delete it to obscure their activities or prevent detection of misconfigurations they introduce.
YARA-L
