# IAM Policy Map > A navigator for AWS managed IAM policies: privilege tiers with stated reasons, domain and service views, and reviewed, cited policy guides. Generated by `pnpm export`. Version 0.0.0. AWS data snapshot 2026-11-13. Unofficial; not affiliated with Amazon Web Services. ## Counts - 1623 active managed policies, 457 services, 20 domains. - Guides: 152 with a reviewed guide on the site, 152 in the current set that llms-full.txt holds. ## Features - Map and lists of policies by domain and service: https://iampolicymap.com/ - Policy pages with permissions, privilege tier and reasons, version history and a downloadable policy.json: https://iampolicymap.com/policies/{slug}/ - Policy Builder: https://iampolicymap.com/builder/ - Compare policies: https://iampolicymap.com/compare/ - Method: https://iampolicymap.com/methodology/ - Data downloads: https://iampolicymap.com/data/ ## URL patterns - `/policies/{slug}/`: one policy. `/policies/{slug}/actions.json`: its granted actions. `/policies/{slug}/policy.json`: the policy document. - `/domains/{domain}/`: policies of one domain. `/services/{prefix}/`: one service. - `/data/exports-manifest.json`: every file below with its size and hash. ## Privilege tiers Tiers are computed by rules from the policy's permissions, never assigned by hand. Each policy page lists the reasons and the triggering actions. The labels are admin, operator, analyst, reader and none. High privilege is a separate flag. - Admin: in at least one service with 5 or more Write and Permissions-management actions, unrestricted grants cover at least 80% of them. - Analyst includes these query actions: `athena:StartQueryExecution`, `logs:StartQuery`, `logs:StartLiveTail`. - Full rules: https://iampolicymap.com/methodology/ ## Files - [/ai.txt](https://iampolicymap.com/ai.txt): crawler policy and licences - [/llms-full.txt](https://iampolicymap.com/llms-full.txt): reviewed guides, current set only - [/llms/ai-machine-learning.txt](https://iampolicymap.com/llms/ai-machine-learning.txt): AI & Machine Learning: every active policy in the domain - [/llms/analytics.txt](https://iampolicymap.com/llms/analytics.txt): Analytics: every active policy in the domain - [/llms/application-integration.txt](https://iampolicymap.com/llms/application-integration.txt): Application Integration: every active policy in the domain - [/llms/business-applications.txt](https://iampolicymap.com/llms/business-applications.txt): Business Applications: every active policy in the domain - [/llms/compute.txt](https://iampolicymap.com/llms/compute.txt): Compute: every active policy in the domain - [/llms/containers.txt](https://iampolicymap.com/llms/containers.txt): Containers: every active policy in the domain - [/llms/cost-billing.txt](https://iampolicymap.com/llms/cost-billing.txt): Cost & Billing: every active policy in the domain - [/llms/databases.txt](https://iampolicymap.com/llms/databases.txt): Databases: every active policy in the domain - [/llms/developer-tools.txt](https://iampolicymap.com/llms/developer-tools.txt): Developer Tools: every active policy in the domain - [/llms/end-user-computing.txt](https://iampolicymap.com/llms/end-user-computing.txt): End User Computing: every active policy in the domain - [/llms/iot-edge.txt](https://iampolicymap.com/llms/iot-edge.txt): IoT & Edge: every active policy in the domain - [/llms/job-functions.txt](https://iampolicymap.com/llms/job-functions.txt): Job functions: every active policy in the domain - [/llms/management-governance.txt](https://iampolicymap.com/llms/management-governance.txt): Management & Governance: every active policy in the domain - [/llms/migration-transfer.txt](https://iampolicymap.com/llms/migration-transfer.txt): Migration & Transfer: every active policy in the domain - [/llms/monitoring-observability.txt](https://iampolicymap.com/llms/monitoring-observability.txt): Monitoring & Observability: every active policy in the domain - [/llms/networking-content-delivery.txt](https://iampolicymap.com/llms/networking-content-delivery.txt): Networking & Content Delivery: every active policy in the domain - [/llms/privileged.txt](https://iampolicymap.com/llms/privileged.txt): Privileged: every active policy in the domain - [/llms/security-identity-compliance.txt](https://iampolicymap.com/llms/security-identity-compliance.txt): Security, Identity & Compliance: every active policy in the domain - [/llms/serverless.txt](https://iampolicymap.com/llms/serverless.txt): Serverless: every active policy in the domain - [/llms/storage.txt](https://iampolicymap.com/llms/storage.txt): Storage: every active policy in the domain - [/data/exports-manifest.json](https://iampolicymap.com/data/exports-manifest.json): sizes and hashes of these files - [/sitemap-index.xml](https://iampolicymap.com/sitemap-index.xml): the sitemap ## FAQs about this site **What is IAM Policy Map?** IAM Policy Map is a navigator for AWS managed policies. It shows the policies by domain and by service, labels each with a computed privilege tier and the reasons behind it, and links every policy back to the official AWS documentation. **Where does the data come from?** Public AWS documentation only, which is the service reference, the AWS Managed Policy Reference Guide, the IAM User Guide pages for job functions and deprecated policies, and service user guides where a service publishes update history. The site needs no AWS account and holds no AWS credentials. **How are privilege tiers computed?** AWS publishes no privilege labels or categories for managed policies, so the labels (Admin, Operator, Analyst, Reader, High privilege) and the domains are the project's own, computed by written rules kept in the project configuration. Access levels come from the service reference annotations. A tier is a signal with stated reasons, not a verdict, and no tier says a policy is safe. **How are the policy guides reviewed?** Guides state only what their cited sources support. Each is drafted, then fact-checked by a separate checker that records evidence for each unit of text, then released as reviewed under the site owner's standing approval. Only reviewed guides are published, and a guide cannot change or contradict a computed tier. **How current is the data?** The footer on every page gives the date of the data snapshot. AWS publishes the Managed Policy Reference Guide separately from IAM, so a policy changed in IAM can take hours to a day to appear and the site can be behind your account. Confirm anything important in the IAM console or the AWS documentation. **Is IAM Policy Map affiliated with AWS?** No. It is an unofficial community resource, not affiliated with, endorsed by or sponsored by Amazon Web Services. It does not use AWS logos, and the official AWS documentation is the authority. Test permissions in your own account before relying on them.