Check policies for new access before deployment with IAM Access Analyzer

Before deploying changes to IAM policies, it's important to assess whether the new policy introduces additional permissions. While there may be instances where granting extra permissions is necessary, it's essential to make sure that you don't accidentally grant more access than intended, especially in production. IAM Access Analyzer has an API called CheckNoNewAccess that enables you to run custom policy checks to determine whether new access is allowed in an updated policy when compared to the existing policy. Gain hands-on experience using CheckNoNewAccess for both identity and resource policies.