aws-iam

Automate creation and validation of least-privilege AWS IAM policies.

2|Updated Jun 29, 2021
One-click install
npx skills add https://github.com/pypeaday/dotfiles --skill aws-iam
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-iam
Source: https://github.com/pypeaday/dotfiles/tree/main/opencode/.config/opencode/skill/aws-iam
Command: npx skills add https://github.com/pypeaday/dotfiles --skill aws-iam

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps cloud teams design and debug AWS IAM policies with least privilege, reducing excessive permissions and resolving access issues quickly.

Core Features & Use Cases

  • Policy drafting and validation to enforce least privilege across AWS services.
  • Policy simulation and testing to predict whether actions are allowed or denied without deploying.
  • Troubleshooting common Access Denied errors and validating cross-account access setups.

Quick Start

Generate a least-privilege IAM policy for s3:GetObject on arn:aws:s3:::my-bucket/* for a role named AppServiceRole. Then simulate the policy against a test user to verify access.

Frequently Asked Questions about aws-iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create least-privilege IAM policies for AWS services?▼

To create least-privilege IAM policies, define standard JSON policy syntax with specific AWS-supported actions, resources, and conditions to restrict permissions. This approach automates policy drafting while reducing excessive permissions across role configurations.

How can I troubleshoot AccessDenied errors in AWS IAM?▼

Troubleshoot AccessDenied errors in AWS by simulating the IAM policy against a test user to validate access rules. This predicts whether actions are allowed or denied without deploying, helping pinpoint cross-account access setup issues quickly.

What is policy simulation and how does it work for IAM roles?▼

Policy simulation evaluates IAM roles by predicting whether requested actions are allowed or denied without deploying changes. It validates least-privilege configurations by testing policy drafts against simulated AWS service interactions before actual implementation.

Can I validate cross-account access setups using IAM policy auditing?▼

Validate cross-account access setups by auditing IAM policies through simulated evaluation against test users. This checks standard JSON policy syntax and AWS-supported conditions to ensure secure, least-privilege access across accounts before deployment.

What's the best way to automate IAM policy drafting for AWS?▼

Automate IAM policy drafting by generating standard JSON policies with least-privilege actions, resources, and conditions tailored to AWS services. This ensures compliance during role configuration and reduces the risk of granting excessive permissions manually.