Why it matters
Evaluates IAM policies for an action and resource: explicit deny, allow, wildcards, NotAction and common conditions.
Implements the documented evaluation logic for identity, resource and permission-boundary policies plus SCP layer: statement matching with glob wildcards, NotAction/NotResource, condition operators (String*, Arn*, IpAddress, Bool, Date, Numeric, ...IfExists, ForAnyValue/ForAllValues) against a supplied context. Lints overly broad statements. Everything runs in your browser; nothing you paste is sent unless you press Fetch.
How to use it
- Paste or type the input the tool asks for.
- Read the summary and the table or preview.
- Adjust the options if you need a different result.
- Copy or download the output. Nothing leaves this page.
FAQ
Is my input uploaded?
No. The work runs in your browser and nothing you type, paste or upload is sent anywhere.
Will this change my site for me?
No. It shows results and, where it writes rules or files, you copy them and apply them yourself.
Can I rely on this as official guidance?
It follows public documentation and well-known algorithms, and tells you where it is a subset or a simulation. Confirm critical changes in the official tool or a staging environment.
