Status: IN
IAM Access Analyzer policy generation reviews all CloudTrail events including denied actions, so generated policies may include actions that were attempted but denied.
Source: entries/2026/03/11/IAM-latest-UserGuide-access-analyzer-policy-generationhtml.md