Integrations · AWS

AWS access reviews without the spreadsheet chase

Acciew reads who has access in your AWS account, through users, groups and roles, and asks their manager.

Apply as a design partnerGet the free review template

Read-only. Also works with Keycloak and GitHub.

An example

Every access comes with its reason.

Sam holds the AdministratorAccess policy in production. Why? He is in the Platform group, and that group has the policy. His manager sees that and can say: he moved to Product, remove it.

Sam OkaforHolds the AdministratorAccess policy in production
AWS
Why he has it
  1. Sam is in the Platform group.
  2. The Platform group has the AdministratorAccess policy.
ApproveRejectChange
He moved to Product in June. Remove it.
Saved · your admins remove the access
Sample data.

How it works

Three steps to a finished review.

  1. 1

    Connect

    Your engineer gives Acciew read-only access. Nothing changes.

    KeycloakCorp loginRead-only
    Read in full · 214 accounts
    GitHubnorthwindRead-only
    Read in full · 186 members
    AWSProductionRead-only
    Read in full · 112 users and roles
    Sample data.
  2. 2

    Decide

    Each manager gets an email link: approve, reject or change.

    Your review · 3 of 12
    Sam · repository accessApproved
    Does Dana still need billing admin?Through the Finance Ops group
    ApproveRejectChange
    Moved to Support in August.
    Saved
    Alex · support toolsWaiting
    Sample data.
  3. 3

    Hand over

    Download one pack: the full list, every decision, the report.

    PersonSystemAccessDecision
    acciew · Evidence packPDF
    Q4 2026 user access review
    Finalized and confirmed · every access decided
    Sample data.

Access review coming up? Run it with us.

Design partners get the product early, help setting up their first review, and a say in what we build next.

Apply as a design partnerGet the free template

For your engineer · what Acciew needs from AWS

A role in AWS that can only look. With it, Acciew reads IAM users, groups and roles, the policies attached to each, and when each was last used. It does not read data in S3 or databases, or any secrets, and it changes nothing in AWS. It only reads.

Technical detailsEmail this page to your engineer