Skip to main content

AI IAM

The AI IAM Analyzer provides identity and access visibility for AI assets, tracking model exposure, agent permissions, and access patterns across your AI infrastructure.

Required Blueprints: AWS



Sightlines

SightlineDescription
AI Model AccessInsights into AI model access controls and public exposure.
AI Agent AccessInsights into AI agent permissions and security posture.

Explorer Node Types

Use these node types in Explorer or KAI to query resources surfaced by this analyzer:

aws.bedrock.BedrockAgent, aws.bedrock.BedrockAgentRuntime, aws.bedrock.CustomModel, aws.sagemaker.Model, aws.sagemaker.NotebookInstance


  • AI SAST — Static analysis of AI/ML code and prompt security
  • AI DAST — Dynamic testing of AI models and agents
  • AWS IAM — IAM policies granting access to AI services