Support Cloud Copilot's work making AWS a little safer. We build tools to collect, analyze, and understand AWS IAM.

We are working to build the Goolge Maps of AWS IAM.

We have several IAM tools on Github, most notably:

• iam-collect: That helps you collect every single IAM and resource policy that exists in all of your accounts.
• iam-lens: That allows you to use your real policies and simulate IAM permissions and ask questions like "who has access to this bucket?" or "who can assume this role?"

We have free versions of our tools available at https://iam.cloudcopilot.io/tools. You can

• Test how IAM will interpret a policy and optionally save or share your policy with others.
• Convert any IAM policy to Terraform, CloudFormation, or CDK code
• Expand (remove wildcards) or Shrink (safely add wildcards) to any given policy

Finally we have resources to help understand and use IAM such as this explanation of how every single IAM condition key is interpreted.