Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?

Explanations:

AWS Service Catalog is used for creating and managing catalogs of IT services, not for analyzing access.

AWS Systems Manager is primarily for operational data and automation of tasks, not for access analysis.

AWS IAM Access Analyzer helps identify resources, including S3 buckets and IAM roles, that are shared with external entities.

AWS Organizations is used for managing multiple AWS accounts, but does not specifically analyze access sharing.