A company runs all business applications in AWS and uses AWS Organizations to manage multiple accounts. A solutions architect needs to review all permissions granted to IAM users to determine which users have more permissions than required. Which solution meets this requirement with the LEAST administrative overhead?

IAM Access Analyzer is specifically designed to identify unintended access to your resources, including IAM roles and policies. It helps you review all permissions granted to IAM users and roles, making it ideal for identifying over-privileged users with the least administrative overhead. Network Access Analyzer focuses on network reachability, not IAM permissions. A CloudWatch alarm for resource creation/modification tracks activity, not the permissions themselves. Amazon Inspector is for vulnerability assessments of EC2 instances and other resources, not for analyzing IAM policy permissions directly.