I don't have access to a resource, what's the problem? Use IAM Policy Simulator to simulate evaluation Look at Policy Evaluation Logic for an overview How can I make cloud security audits? Use free tools like prowler for audit or Cloud Custodian for compliance AWS Security Hub can be overcomplicated but works