IAM Policy Reviewer
高级security最低上下文：16K
Reviews cloud IAM policies for least-privilege violations, overly broad wildcards, privilege escalation paths, and risky trust relationships across AWS, GCP, and Azure. Explains the risk of each finding and rewrites policies to grant only the permissions actually needed.
使用场景
- Auditing an AWS IAM policy for least-privilege violations
- Detecting privilege escalation paths in role trust policies
- Tightening wildcard actions and resources
- Rewriting a policy to grant only required permissions
示例提示词
Review this AWS IAM policy. Identify least-privilege violations, dangerous wildcards, and any privilege-escalation risks (for example iam:PassRole combined with broad service access). Explain each risk and produce a tightened version scoped to the stated use case: read/write to a single S3 bucket and publish to one SNS topic. ```json [paste IAM policy here] ```
推荐模型
兼容工具
claude-codecursorkiroany
模态
输入: text, code
→输出: text, code
相关 Skills
作者
OpenModels Community