iam-policy-autopilot
byawslabs· 4 MCP servers
An open source Model Context Protocol (MCP) server and command-line tool that helps your AI coding assistants quickly create baseline IAM policies that you can refine as your application evolves, so you can build faster. IAM Policy Autopilot analyzes your application code locally
How to install iam-policy-autopilot?
awslabs/iam-policy-autopilot
$git clone https://github.com/awslabs/iam-policy-autopilotInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Install iam-policy-autopilot by running `git clone https://github.com/awslabs/iam-policy-autopilot`, then use it for the current task and follow its documentation at https://github.com/awslabs/iam-policy-autopilot.
README.md
| 1 | [](https://github.com/awslabs/iam-policy-autopilot/blob/main/LICENSE) |
| 2 | [](https://github.com/awslabs/iam-policy-autopilot/actions/workflows/build_and_publish.yml) [](https://pypi.org/project/iam-policy-autopilot/) |
| 3 | |
| 4 | # IAM Policy Autopilot |
| 5 | |
| 6 | An open source Model Context Protocol (MCP) server and command-line tool that helps your AI coding assistants quickly create baseline IAM policies that you can refine as your application evolves, so you can build faster. IAM Policy Autopilot analyzes your application code locally to generate identity-based policies for application roles, enabling faster IAM policy creation and reducing access troubleshooting time. IAM Policy Autopilot supports policy generation for applications built in Python, Go, TypeScript, JavaScript, and Java — see [Supported Languages and SDKs for policy generation](#supported-languages-and-sdks-for-policy-generation). |
| 7 | |
| 8 | We want to hear from you. Ask questions or share ideas in [Discussions](https://github.com/awslabs/iam-policy-autopilot/discussions), report bugs through [Issues](https://github.com/awslabs/iam-policy-autopilot/issues), or contribute directly with a [Pull Request](https://github.com/awslabs/iam-policy-autopilot/pulls). |
| 9 | |
| 10 | |
| 11 | ## Table of Contents |
| 12 | |
| 13 | - [Who is IAM Policy Autopilot for?](#who-is-iam-policy-autopilot-for) |
| 14 | - [How is IAM Policy Autopilot helpful?](#how-is-iam-policy-autopilot-helpful) |
| 15 | - [Best Practices and Considerations](#best-practices-and-considerations) |
| 16 | - [Getting Started](#getting-started) |
| 17 | - [Network Requirements](#network-requirements) |
| 18 | - [CLI Usage](#cli-usage) |
| 19 | - [Supported Languages and SDKs for policy generation](#supported-languages-and-sdks-for-policy-generation) |
| 20 | - [Build Instructions](#build-instructions) |
| 21 | - [Workspace Structure](#workspace-structure) |
| 22 | - [Development](#development) |
| 23 | - [Security](#security) |
| 24 | - [License](#license) |
| 25 | |
| 26 | ## Who is IAM Policy Autopilot for? |
| 27 | |
| 28 | IAM Policy Autopilot is for builders on AWS using AI coding assistants, including developers, product managers, technical experimenters, and business leaders. |
| 29 | |
| 30 | ## How is IAM Policy Autopilot helpful? |
| 31 | |
| 32 | IAM Policy Autopilot is: |
| 33 | |
| 34 | ### Fast |
| 35 | |
| 36 | IAM Policy Autopilot accelerates development by generating baseline identity-based IAM policies. Your AI coding assistant can call IAM Policy Autopilot to analyze AWS SDK calls within your application. IAM Policy Autopilot then automatically creates the baseline IAM permissions for your application roles. |
| 37 | |
| 38 | ### Reliable |
| 39 | |
| 40 | IAM Policy Autopilot's deterministic code analysis helps create reliable and valid IAM policies that reduce policy troubleshooting. By using valid policies created with the MCP server, you reduce time spent on policy-related debugging and accelerate application deployment by avoiding permission-related delays. |
| 41 | |
| 42 | ### Up-to-date |
| 43 | |
| 44 | IAM Policy Autopilot stays up to date with the latest AWS services and features so that builders and coding assistants have access to the latest AWS IAM permissions knowledge. It helps keep your application role's permissions current with AWS's evolving capabilities. |
| 45 | |
| 46 | ## Best Practices and Considerations |
| 47 | |
| 48 | ### Review and refine policies generated by IAM Policy Autopilot |
| 49 | |
| 50 | IAM Policy Autopilot generates baseline policies to provide a starting point that you can refine as your application matures. Review the generated policies to ensure they align with your security requirements before deploying them. Use the `--explain` feature with action patterns (e.g., `--explain 's3:*'`) to understand which operations led to an action being included in the generated policies. |
| 51 | |
| 52 | ### Understand the IAM Policy Autopilot scope |
| 53 | |
| 54 | IAM Policy Autopilot produces IAM identity-based policies, but doesn't sup |
Related
6 picksType
- mcp-scannerA tool to scan MCP servers and tools for security findingsJul 2026
- hol-guardOpen-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, and package installs.Jul 2026
- agent-scanAgent supply chain security scanner.Jul 2026
- falcon-mcpConnects AI agents with CrowdStrike Falcon for security analysis and automation.Jul 2026
- pythonPlug-and-play auth for Python MCP servers.Aug 2025
- auth0-mcp-serverAuth0 MCP Server: Manage Auth0 applications, APIs, actions, logs, and forms using natural languageJul 2026
