iam-policy-autopilot
installs/mo · pypistarsforks
How to install iam-policy-autopilot?
awslabs/iam-policy-autopilot
$git clone https://github.com/awslabs/iam-policy-autopilotAn open source Model Context Protocol (MCP) server and command-line tool that helps your AI coding assistants quickly create baseline IAM policies that you can refine as your application evolves, so you can build faster. IAM Policy Autopilot analyzes your application code locally
README.md
| 1 | [](https://github.com/awslabs/iam-policy-autopilot/blob/main/LICENSE) |
| 2 | [](https://github.com/awslabs/iam-policy-autopilot/actions/workflows/build_and_publish.yml) [](https://pypi.org/project/iam-policy-autopilot/) |
| 3 | |
| 4 | # IAM Policy Autopilot |
| 5 | |
| 6 | An open source Model Context Protocol (MCP) server and command-line tool that helps your AI coding assistants quickly create baseline IAM policies that you can refine as your application evolves, so you can build faster. IAM Policy Autopilot analyzes your application code locally to generate identity-based policies for application roles, enabling faster IAM policy creation and reducing access troubleshooting time. IAM Policy Autopilot supports policy generation for applications built in Python, Go, TypeScript, JavaScript, and Java — see [Supported Languages and SDKs for policy generation](#supported-languages-and-sdks-for-policy-generation). |
| 7 | |
| 8 | We want to hear from you. Ask questions or share ideas in [Discussions](https://github.com/awslabs/iam-policy-autopilot/discussions), report bugs through [Issues](https://github.com/awslabs/iam-policy-autopilot/issues), or contribute directly with a [Pull Request](https://github.com/awslabs/iam-policy-autopilot/pulls). |
| 9 | |
| 10 | |
| 11 | ## Table of Contents |
| 12 | |
| 13 | - [Who is IAM Policy Autopilot for?](#who-is-iam-policy-autopilot-for) |
| 14 | - [How is IAM Policy Autopilot helpful?](#how-is-iam-policy-autopilot-helpful) |
| 15 | - [Best Practices and Considerations](#best-practices-and-considerations) |
| 16 | - [Getting Started](#getting-started) |
| 17 | - [Network Requirements](#network-requirements) |
| 18 | - [CLI Usage](#cli-usage) |
| 19 | - [Supported Languages and SDKs for policy generation](#supported-languages-and-sdks-for-policy-generation) |
| 20 | - [Build Instructions](#build-instructions) |
| 21 | - [Workspace Structure](#workspace-structure) |
| 22 | - [Development](#development) |
| 23 | - [Security](#security) |
| 24 | - [License](#license) |
| 25 | |
| 26 | ## Who is IAM Policy Autopilot for? |
| 27 | |
| 28 | IAM Policy Autopilot is for builders on AWS using AI coding assistants, including developers, product managers, technical experimenters, and business leaders. |
| 29 | |
| 30 | ## How is IAM Policy Autopilot helpful? |
| 31 | |
| 32 | IAM Policy Autopilot is: |
| 33 | |
| 34 | ### Fast |
| 35 | |
| 36 | IAM Policy Autopilot accelerates development by generating baseline identity-based IAM policies. Your AI coding assistant can call IAM Policy Autopilot to analyze AWS SDK calls within your application. IAM Policy Autopilot then automatically creates the baseline IAM permissions for your application roles. |
| 37 | |
| 38 | ### Reliable |
| 39 | |
| 40 | IAM Policy Autopilot's deterministic code analysis helps create reliable and valid IAM policies that reduce policy troubleshooting. By using valid policies created with the MCP server, you reduce time spent on policy-related debugging and accelerate application deployment by avoiding permission-related delays. |
| 41 | |
| 42 | ### Up-to-date |
| 43 | |
| 44 | IAM Policy Autopilot stays up to date with the latest AWS services and features so that builders and coding assistants have access to the latest AWS IAM permissions knowledge. It helps keep your application role's permissions current with AWS's evolving capabilities. |
| 45 | |
| 46 | ## Best Practices and Considerations |
| 47 | |
| 48 | ### Review and refine policies generated by IAM Policy Autopilot |
| 49 | |
| 50 | IAM Policy Autopilot generates baseline policies to provide a starting point that you can refine as your application matures. Review the generated policies to ensure they align with your security requirements before deploying them. Use the `--explain` feature with action patterns (e.g., `--explain 's3:*'`) to understand which operations led to an action being included in the generated policies. |
| 51 | |
| 52 | ### Understand the IAM Policy Autopilot scope |
| 53 | |
| 54 | IAM Policy Autopilot produces IAM identity-based policies, but doesn't sup |
People who liked this also viewed
6 picksType
- mcp-scannerScan MCP servers for potential threats & security findings.MCP ServersJul 2026
- hol-guardOpen-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.MCP ServersJul 2026
- agent-scanSecurity scanner for AI agents, MCP servers and agent skills.MCP ServersJul 2026
- falcon-mcpConnect AI agents to CrowdStrike Falcon for automated security analysis and threat huntingMCP ServersJul 2026
- python🔐 Plug-and-play auth for Python MCP servers.MCP ServersAug 2025
- auth0-mcp-serverConnect LLMs and AI agents to Auth0 Management APIs via an MCP server. Use natural-language commands to create apps, deploy Actions, and query logs—runs locally and supports interactive tenant authentication for secure Auth0 administration from AI tools/CLIs.MCP ServersJul 2026
