Become an AWS IAM Policy Ninja

youtube.comvideo

“In my nearly 5 years at Amazon, I carve out a little time each day, each week to look through the forums, customer tickets to try to find out where people are having trouble.”

from

IAM

added

2026-10-10

likes

0

similar

1. ▲
   IAM is hard. It's really hard. web.archive.org

   site category #iam link ↗

   “Overly permissive AWS IAM policies that allowed s3:GetObject to * (all) resources”, led to $80 million fine for Capital One. The only reason why you can't overlook IAM as a business owner.

   
2. ▲
   IAM Floyd github.com

   tool category #cdk link ↗

   🆓 AWS IAM policy statement generator with fluent interface. Helps with creating type safe IAM policies and writing more restrictive/secure statements by offering conditions and ARN generation via IntelliSense. Available for Node.js, Python, .Net and Java.

   
3. ▲
   Identity and Access Management (IAM) aws.amazon.com

   site category #aws link ↗
4. ▲
   AirIAM github.com

   tool category #terraform link ↗

   AirIAM is a tool for AWS IAM to least privilege Terraform execution framework.

5. ▲
   Linting your AWS IAM policy documents for correctness and security issues github.com

   tool category #actions link ↗
   
6. ▲
   GCP's IAM syntax is better than AWS's web.archive.org

   site category #iam link ↗

   The minutiae of permission design in GCP improves the developer's experience.

IAM › Authorization > AWS policy tools: ““In my nearly 5 years at Amazon, I carve out a little time each day, each week to look through the forums, customer tickets to try to find out where people are having trouble.””