AWS recently added support for detecting unused access granted to IAM roles and users within their AWS IAM Access Analyzer tool. The new IAM Access Analyzer unused access findings can identify unused roles, unused IAM user access keys and passwords, and unused permissions within a defined usage window.

Source: InfoQ