iam-policy-autopilot

Overview

IAM Policy Autopilot is a Rust-based MCP server and CLI tool that analyzes application code to generate identity-based AWS IAM policies. It supports multiple programming languages including Python, Go, TypeScript, JavaScript, and Java. The tool accelerates development by providing reliable, up-to-date baseline policies that reduce access troubleshooting time. It integrates with AI coding assistants through the Model Context Protocol, enabling automatic policy generation during development workflows.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• generate-policies

  Generate IAM policies from source code analysis

  Try:Generate IAM policies for my Python applicationTry:Analyze my Go code for AWS SDK calls and create baseline policies
• fix-access-denied

  Fix AccessDenied errors by analyzing and optionally applying policy adjustments

  Try:Fix my AccessDenied error when accessing S3Try:Analyze and resolve permission issues in my application

Note: Inferred from CLI usage section which mentions commands but doesn't explicitly list MCP tool names

Comparable tools

Installation

pip install iam-policy-autopilot

{
  "mcpServers": {
    "iam-policy-autopilot": {
      "command": "iam-policy-autopilot",
      "args": ["mcp-server"],
      "env": {
        "AWS_PROFILE": "your-profile-name",
        "AWS_REGION": "us-east-1"
      }
    }
  }
}

FAQ

Which programming languages does IAM Policy Autopilot support?

It supports Python, Go, TypeScript, JavaScript, and Java applications using AWS SDKs.

How can I improve policy accuracy?

Use the --service-hints option to specify only the AWS services your application actually uses.

Compare iam-policy-autopilot with