aws-iam

Automate creation and validation of least-privilege AWS IAM policies.

2|Updated Jun 29, 2021
One-click install
npx skills add https://github.com/pypeaday/dotfiles --skill aws-iam
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-iam
Source: https://github.com/pypeaday/dotfiles/tree/main/opencode/.config/opencode/skill/aws-iam
Command: npx skills add https://github.com/pypeaday/dotfiles --skill aws-iam

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps cloud teams design and debug AWS IAM policies with least privilege, reducing excessive permissions and resolving access issues quickly.

Core Features & Use Cases

  • Policy drafting and validation to enforce least privilege across AWS services.
  • Policy simulation and testing to predict whether actions are allowed or denied without deploying.
  • Troubleshooting common Access Denied errors and validating cross-account access setups.

Quick Start

Generate a least-privilege IAM policy for s3:GetObject on arn:aws:s3:::my-bucket/* for a role named AppServiceRole. Then simulate the policy against a test user to verify access.

Frequently Asked Questions about aws-iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create least-privilege IAM policies for AWS services?

To create least-privilege IAM policies, define standard JSON policy syntax with specific AWS-supported actions, resources, and conditions to restrict permissions. This approach automates policy drafting while reducing excessive permissions across role configurations.

How can I troubleshoot AccessDenied errors in AWS IAM?

Troubleshoot AccessDenied errors in AWS by simulating the IAM policy against a test user to validate access rules. This predicts whether actions are allowed or denied without deploying, helping pinpoint cross-account access setup issues quickly.

What is policy simulation and how does it work for IAM roles?

Policy simulation evaluates IAM roles by predicting whether requested actions are allowed or denied without deploying changes. It validates least-privilege configurations by testing policy drafts against simulated AWS service interactions before actual implementation.

Can I validate cross-account access setups using IAM policy auditing?

Validate cross-account access setups by auditing IAM policies through simulated evaluation against test users. This checks standard JSON policy syntax and AWS-supported conditions to ensure secure, least-privilege access across accounts before deployment.

What's the best way to automate IAM policy drafting for AWS?

Automate IAM policy drafting by generating standard JSON policies with least-privilege actions, resources, and conditions tailored to AWS services. This ensures compliance during role configuration and reduces the risk of granting excessive permissions manually.