IAM Policy Reviewer

ПродвинутыйsecurityМинимальный контекст: 16K

Reviews cloud IAM policies for least-privilege violations, overly broad wildcards, privilege escalation paths, and risky trust relationships across AWS, GCP, and Azure. Explains the risk of each finding and rewrites policies to grant only the permissions actually needed.

securityiamcloudleast-privilegeaccess-control

Варианты использования

  • Auditing an AWS IAM policy for least-privilege violations
  • Detecting privilege escalation paths in role trust policies
  • Tightening wildcard actions and resources
  • Rewriting a policy to grant only required permissions

Пример промпта

Review this AWS IAM policy. Identify least-privilege violations, dangerous wildcards, and any
privilege-escalation risks (for example iam:PassRole combined with broad service access).
Explain each risk and produce a tightened version scoped to the stated use case: read/write
to a single S3 bucket and publish to one SNS topic.

```json
[paste IAM policy here]
```

Рекомендуемые модели

claude-opus-4-8gpt-5-6-solgemini-3-5-pro

Совместимые инструменты

claude-codecursorkiroany

Модальности

Вход: text, code
→
Выход: text, code

Похожие Skills

security-auditinfrastructure-as-codethreat-modeling

Автор

OpenModels Community

@openmodelsrun