AWS IAM Policy Analyzer
AWS IAM Policy Analyzer
Paste an AWS IAM policy JSON and understand what it grants. Highlights wildcards, detects admin access, identifies overly-permissive statements, and explains each statement in plain English.
Paste an IAM policy JSON to analyze statements, detect wildcard permissions, and assess risk — entirely client-side.
AWS IAM Policy Analyzer
Paste an AWS IAM policy JSON and understand what it grants. Highlights wildcards, detects admin access, identifies overly-permissive statements, and explains each statement in plain English.
Common uses
- Check if a policy grants admin access via *:*
- Understand what a complex IAM policy actually allows
Frequently asked questions
Can I use AWS IAM Policy Analyzer to check if a policy grants admin access via *:*?
Yes. AWS IAM Policy Analyzer can check if a policy grants admin access via *:*, directly in your browser.
Can I use AWS IAM Policy Analyzer to understand what a complex IAM policy actually allows?
Yes. AWS IAM Policy Analyzer can understand what a complex IAM policy actually allows, directly in your browser.
Is my data uploaded to a server?
No. This tool runs entirely in your browser — your input is processed locally on your device and is never uploaded or stored on a server.