---

Website

Explore AWS Managed IAM Policies through a searchable web interface at iamtrail.com:

• Search and filter across 1,465+ managed policies
• Full version history with git diffs for every policy
• Syntax-highlighted JSON policy viewer
• New (v1) policy tracking to spot new AWS services
• Policy validation findings from AWS Access Analyzer
• Known AWS Account lookup - identify who owns an AWS account ID, powered by the fwdcloudsec/known_aws_accounts community dataset

---

Get Notified

Subscribe to policy changes:

• Email Digest (recommended): Subscribe on iamtrail.com - daily or weekly emails with inline diffs, per-policy filtering, no account required
• Bluesky (unified feed - IAM policies, endpoints, GuardDuty): @iamtrail.bsky.social
• RSS Feeds (all feeds):
  • All Changes - everything in one feed
  • IAM Policy Changes - policy updates, new policies, deprecations
  • Endpoint Changes - new regions, services, and expansions from botocore
  • GuardDuty Announcements - new findings, features, and region launches

See docs/notifications-and-social.md for SSM parameters, Bluesky queue, and GitHub Actions IAM.

Browse the Data

All policies are stored as JSON in this repository and updated automatically every hour on weekdays.

Path	Description
policies/	1,465+ current AWS Managed IAM Policies
findings/	Access Analyzer validation results
DEPRECATED.json	Historical record of 73+ deprecated policies

How It Works

An automated workflow runs every hour (Mon-Fri):

1. Fetch all AWS Managed IAM Policies via the AWS API
2. Detect new, updated, or deprecated policies
3. Validate each policy with AWS Access Analyzer
4. Commit changes to git (one commit per policy)
5. Notify via Bluesky, RSS, email digests, and an invite-only Discord webhook (SSM only, not linked on the site)

Credits

Inspired by Scott Piper's original aws_managed_policies repository. Thank you, Scott, for pioneering this.

License

GNU General Public License v3.0 - see LICENSE for details.

---