Which AWS service or tool can detect and produce reports about IAM resources in one AWS account that are shared with another AWS account?

AWS Identity and Access Management (IAM) Access Analyzer is the correct service because it helps identify resources in your organization and accounts, such as S3 buckets or IAM roles, that are shared with an external entity. It generates findings that you can review to ensure your resource access is as intended. The IAM credential report lists all users in your account and the status of their credentials, but it doesn't analyze cross-account sharing. AWS IAM Identity Center (AWS Single Sign-On) centralizes access management for multiple AWS accounts and business applications, but it doesn't analyze existing resource sharing. Amazon Cognito user pools manage user directories for web and mobile apps, which is unrelated to analyzing cross-account resource sharing.