Is there a tool that tells you which IAM actions to allow if you give it an API operation?

• trailscraper

  6 762 8.9 Python

  A command-line tool to get valuable information out of AWS CloudTrail

I’ve used this project in the past to pull out policy information https://github.com/flosell/trailscraper (it’s a CLI, FYI)

• parliament

  7 986 2.2 Python

  AWS IAM linting library

  

I've been literally tweeting at aws for a long time now for a tool like this lol, haven't found anything. but you can play around with Parliament

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• cloudtracker

  3 863 0.0 Python

  CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.

  

There are a few tools around that do this. There is another to show you what permissions a role or user has used in the last x time period. https://github.com/duo-labs/cloudtracker

• actionhero

  1 164 5.2 Go

This should help! it'll work with anything that uses the SDK under the covers (cli,terraform,sam,etc) https://github.com/princespaghetti/actionhero

Suggest a related project