iam-policy-autopilot

Name: iam-policy-autopilot Review
Item: iam-policy-autopilot
Rating: 3.2
Author: Aaron Matthews

Skill Development Usable

Works inClaude Code

Usable Scanned — metadata only

Reduces time and security risk in IAM policy creation by generating least-privilege baselines from code analysis, eliminating manual policy drafting and comm…

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

Generate baseline AWS IAM policies from application code automatically
Analyze code to identify required AWS permissions before deployment
Create least-privilege IAM policies faster during development cycles

395 starsApache-2.0 (commercial OK)FreeQuick setup

Usable rating — This tool is functional but has notable gaps. Review the evaluation notes below before deploying.

Why it matters

Reduces time and security risk in IAM policy creation by generating least-privilege baselines from code analysis, eliminating manual policy drafting and common misconfigurations.

Best for

AWS platform teams and DevSecOps engineers building or reviewing application IAM policies.

Works in

Claude Code Claude Cowork Claude Chat

Source

https://github.com/awslabs/iam-policy-autopilot

By awslabs

How to Get It

Option 1: Claude Desktop App (Code Mode)Click the + button next to the prompt box → Plugins → Add plugin. Search and click Install. Skills work in Claude Code only.

Option 2: Paste into Claude CodeCopy the command below and paste it into your conversation. Claude will install it.

Command

uvx iam-policy-autopilot  # recommended (needs uv); or: pip install iam-policy-autopilot

Tip: Paste this into a Claude Code conversation. Verify command matches your Claude Code version.

First thing to try

After installing, paste this into Claude:

Help me generate baseline AWS IAM policies from application code automatically

Prerequisitesuv (recommended) or pip; AWS credentials configured (required for applying policy fixes and AccessDenied debugging)CostFree

Trust Signals Auto-scanned

Stars395Contributors19Last updated2026-08-17LicenseApache-2.0 (OK for commercial use)Known CVEsNone foundSources: GitHub Advisory Database + OSV.dev · Scanned 2026-08-18 · scanner v1

Community Pulse Growing

Discussed on Reddit

Breaking into IAM — Reddit · 39 pts
Autopilot Hybrid Join - TimeToLive — Reddit · 9 pts
IAM Policy Autopilot Explained: What It Is, IAM Governance Benefits, How It Work — Reddit · 1 pts

3 mentions across 1 sources

Reviewer notes

Auto-scanned review. These are observations, not a security certification.

Scored from trust signals (evidence-eval-v1): 366 GitHub stars; contributors unknown; last commit 1d ago; license Apache-2.0.

Things to check

Scanned, not hands-on tested — this entry was auto-scanned from public metadata (GitHub metrics, license, security flags). No reviewer has run it, and no tool-specific limitations have been documented yet.

How to evaluate tools before deploying →

Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.

Evaluation Scores

Evaluation

Ease of Use

3/5

Versatility

4/5

Reliability

3/5

Security

3/5

Overall score3.25 / 5.00 UsableEvaluatedMay 2026

Scored from trust signals (evidence-eval-v1): 366 GitHub stars; contributors unknown; last commit 1d ago; license Apache-2.0.

← Back to the Claude Observatory