Profiles
Connect the AWS identities you actually want to inspect.
Add long-lived IAM credentials or short-lived Identity Center access, then jump directly into scanning.
Add IAM profile
Add SSO / Identity Center profile
Profiles
Click a profile to select it and open the Scan page.
Scan
Authenticate once, choose scope, and keep the next action obvious.
The selected profile drives authentication, target selection, progress, and result generation from one place.
No profile selected. Choose one on the Profiles page first.
Accounts & roles
Run scan
Tables
Review principals, roles, and policies with less visual noise.
Graph
Explore trust and policy relationships without losing context.
Permissions
Spot broad access quickly, then drill into what grants it.
Escalation
Trace likely privilege-escalation paths before an attacker does.
Guardrails