Open-source tool VIGIL enforces AWS access recertification decisions automatically

VIGIL, an open-source AWS tool published under aws-samples, closes the gap between access review decisions and actual enforcement. It discovers resources by owner tag, asks owners to keep or revoke access, applies changes scoped to specific permissions, and records actions in a tamper-evident trail. The engine uses SQS for durable, idempotent enforcement and never over-revokes, raising tickets for unsafe changes.