Security

AWS IAM Policy Generator

Service, access level, and a resource ARN, turned into a valid IAM policy scoped to that resource - not a Resource: * shortcut that becomes a privilege-escalation path later.

Service

Access level

Resource ARN

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:ListBucket"
      ],
      "Resource": "arn:aws:s3:::my-bucket/*"
    }
  ]
}

This is one question. ArchSetu answers it for a whole repository.

Call graph, dead code, blast radius and a health score, in about a minute.

Analyse a repository

Related tools

All Security tools →

CORS Config Generator/ExplainerOrigins, methods, headers to generated CORS headers.Security Risk ScannerPaste a real GitHub repo - hardcoded secrets, unsafe dynamic execution, string-built SQL, insecure transport, and weak cryptography. Sign in required.JWT InspectorDecode a JWT header and payload, check expiry - decode-only, signing key never needed.Bcrypt Cost Factor CalculatorA measured benchmark on your hardware plus a target hash time to the right bcrypt cost factor.API Key Format IdentifierPaste a key prefix - which service it belongs to, based on documented prefix conventions.OAuth Redirect URI ValidatorCheck a redirect URI against the OAuth 2.0 Security BCP - HTTPS, exact-match, no wildcards.

Was this tool helpful?