AN AWS IAM SECURITY TOOLING REFERENCE

Summary from the TLDR InfoSec newsletter

This post presents a list of different tools for simplifying AWS IAM security. PMapper and Cloudsplaining can be used to identify privilege escalation vectors and least privilege violations. Parliament and aws-lint-iam-policies provide linters. IAMSpy provides an SMT solver to formally prove whether a given IAM identity has access to a given resource. Apeman can be used to visualize IAM relationships.