No production access is required.
CloudWizard uses a secure, read-only IAM role to analyze your environment. No changes are made to your infrastructure.