AWS IAM Policy Generator

Service, access level, and a resource ARN, turned into a valid IAM policy scoped to that resource - not a Resource: * shortcut that becomes a privilege-escalation path later.

Service

Access level

Resource ARN

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:ListBucket"
      ],
      "Resource": "arn:aws:s3:::my-bucket/*"
    }
  ]
}

Was this tool helpful?

See this same kind of analysis applied to your whole repository

Call graphs, dead code, blast radius, and a health score. Results in 60 seconds, free.

Analyze a repository

Related tools

See all Security tools →

CORS Config Generator/Explainer

Origins, methods, headers to generated CORS headers.

JWT Inspector

Decode a JWT header and payload, check expiry - decode-only, signing key never needed.

Bcrypt Cost Factor Calculator

A measured benchmark on your hardware plus a target hash time to the right bcrypt cost factor.

API Key Format Identifier

Paste a key prefix - which service it belongs to, based on documented prefix conventions.

OAuth Redirect URI Validator

Check a redirect URI against the OAuth 2.0 Security BCP - HTTPS, exact-match, no wildcards.

Runs entirely in your browser. Nothing is stored. Free forever.