awslabs/iam-policy-autopilot

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

50
/ 100
Established

This tool helps AWS developers and product managers quickly create baseline security policies for their applications. You feed it your application's code (in Python, Go, TypeScript, JavaScript, or Java), and it generates an AWS Identity and Access Management (IAM) policy. This policy specifies the minimum permissions your application needs to function, which you can then refine for deployment.

306 stars.

Use this if you are developing an application on AWS and need to quickly generate a secure, least-privilege IAM policy based on your code's AWS service interactions.

Not ideal if you need to create resource-based policies (like S3 bucket policies), Service Control Policies (SCPs), or permission boundaries, as it focuses only on identity-based policies.

AWS-development cloud-security access-management policy-generation application-development
No Package No Dependents
Maintenance 10 / 25
Adoption 10 / 25
Maturity 13 / 25
Community 17 / 25

How are scores calculated?

Stars

306

Forks

35

Language

Rust

License

Apache-2.0

Last pushed

Mar 09, 2026

Commits (30d)

0

Get this data via API

curl "https://pt-edge.onrender.com/api/v1/quality/mcp/awslabs/iam-policy-autopilot"

Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.