About

IAM Policy Map is a navigator for AWS managed policies. It shows the policies by domain and by service, labels each with a computed privilege tier and the reasons behind it, and links every policy back to the official AWS documentation.

It is for people who choose, review or audit IAM permissions: cloud engineers, security reviewers and platform teams. It aims to answer “which managed policy covers this, and how much does it grant?” faster than reading JSON.

What you can do

• Browse policies by domain or by service, with sub-groups for user access, operator and limited, service roles and service-linked roles.
• See each policy’s tier, High privilege flag and the actions that triggered them.
• Follow what changed in the change log.
• Download the underlying data from the Data page.

What it is not

• It is not AWS documentation and it is not affiliated with AWS. See Trademarks.
• Tiers are signals with stated reasons. They do not say a policy is safe, and they do not replace testing a policy in your own account.
• The AWS reference guide can trail live IAM, so the site can lag behind your account.

The rules are on the Methodology page. The code is MIT licensed and the data and editorial text are CC BY 4.0 (see Data).

Credits

Domain and interface icons come from Lucide, licensed under the ISC licence. Lucide icons that derive from Feather are licensed under the MIT licence, and both notices are kept. The icons are inlined into pages when the site is built; no icon library is sent to your browser. The full licence texts are in the Lucide licence.