IAM Policy Minimizer & Least-Privilege Generator
The Problem
Cloud engineers regularly drop wide wildcard permissions during early development velocity blocks to bypass policy headaches. Trimming down those sprawling authorizations to production-ready policies by hand later is slow, complex, and highly prone to manual omissions.
The Solution
This system completely automates least-privilege creation. It analyzes localized Python code execution paths or operational execution logging inputs to automatically assemble tightly scoped, valid IAM JSON rules tracking exactly what API operations were performed.
System Capabilities
- Source Scanning Engine: Detects call-sites dynamically inside targeted source files.
- Audit Event Scraper: Converts live application logging traces directly into structured access maps.
- Granular Rule Engine: Converts discovered identities into restricted JSON structures instantly.
System Prerequisites
MacOS Infrastructure
Run `./scripts/setup_macos.sh` directly via shell.
Linux Distributions
Run `./scripts/setup_linux.sh` directly via shell.
Windows Infrastructure
Run `.\scripts\setup_windows.bat` through cmd window.
Operational Standards
Activate Runtime Environment
`source venv/bin/activate` or `.\venv\Scripts\activate.bat`
Scan Code Layout
`iam-minimizer –source ./src`
Process Execution Logs
`iam-minimizer –logs execution_traces.log –output policy.json`
$99.00Add to cart