Which AWS service or feature can detect resources that are shared externally from your account?

AWS IAM Access Analyzer helps identify resources in your organization and accounts, such as S3 buckets or IAM roles, that are shared with an external entity. It uses logic to analyze access policies and report findings for resources accessible from outside your AWS account. This helps you review and refine public and cross-account access. Amazon OpenSearch Service is a search and analytics engine. AWS Control Tower helps set up and govern a secure multi-account AWS environment. AWS Fargate is a serverless compute engine for containers. These services do not primarily focus on detecting external resource sharing.