IAM Policy Reviewer

Name: OpenModels
Creator: OpenModels
License: https://github.com/openmodelsrun/openmodels

AvanzadasecurityContexto mínimo: 16K

Reviews cloud IAM policies for least-privilege violations, overly broad wildcards, privilege escalation paths, and risky trust relationships across AWS, GCP, and Azure. Explains the risk of each finding and rewrites policies to grant only the permissions actually needed.

security iam cloud least-privilege access-control

Casos de uso

Auditing an AWS IAM policy for least-privilege violations
Detecting privilege escalation paths in role trust policies
Tightening wildcard actions and resources
Rewriting a policy to grant only required permissions

Prompt de ejemplo

Review this AWS IAM policy. Identify least-privilege violations, dangerous wildcards, and any
privilege-escalation risks (for example iam:PassRole combined with broad service access).
Explain each risk and produce a tightened version scoped to the stated use case: read/write
to a single S3 bucket and publish to one SNS topic.

```json
[paste IAM policy here]
```

Modelos recomendados

claude-opus-4-8 gpt-5-6-sol gemini-3-5-pro

Herramientas compatibles

claude-codecursorkiroany

Modalidades

Entrada: text, code

→

Salida: text, code

Skills relacionadas

security-audit infrastructure-as-code threat-modeling

Autor

OpenModels Community

@openmodelsrun