Compare policies

Choose policies

The side-by-side comparison needs JavaScript. Without it, open each policy page from the domains or the services and read its permissions there; the suggested pairs below link straight to those pages.

How the comparison works

Pick up to three AWS managed policies. The summary at the top counts the actions they share, the actions only one grants and the actions granted with different restrictions, with each policy's tier and scope side by side. Below it, the actions are grouped by service and can be filtered by access level, plane (control or data), unique only, or name. A risk callout lists the actions only one policy grants that carry Permissions management access or triggered a High privilege reason, each with the rule that fired. The comparison runs in your browser from the same published data as the policy pages.

Share a comparison with a link such as /compare/?p=first,second, where each part is a policy page slug.

Suggested comparisons

No suggestions yet. Suggestions appear once policies with reviewed guidance name each other as related.