CloudGuard Safety controls access to services on environments by IAM users, and requires that these users have explicitly given permission from a CloudGuard account administrator to access these services. This hardens the AWS account console and restricts users from making that are not approved or accidental changes to account settings without the knowledge and authorization of an administrator. Users can continue to access the account to view settings without restrictions (based on their AWS permissions).
Identity and Access Management (IAM) - A web service that customers can use to manage users and user permissions within their organizations. Safety controls access to services on AWS