See what an IAM policy really allows.
Paste any AWS IAM policy — identity or trust — and get an instant visual breakdown of every statement, plus flags for the most common risky patterns.
This page makes no network requests with your data — parsing happens locally. Still, never paste policies containing secrets in comments or names.
Risk findings
This flags common risky patterns only. Effective permissions depend on all attached policies, boundaries, SCPs and resource policies.
Need a real AWS security audit?How it works
Paste
Copy a policy from the IAM console (Permissions or Trust relationships tab) and paste it above.
Parsed locally
Plain JavaScript in your browser splits the policy into statements, actions, resources, principals and conditions.
Read the flags
Wildcards, admin-equivalent grants and open trust policies are highlighted with plain-language explanations.
Your policy never leaves this page.
This is a static site served from a CDN. There is no backend, no analytics on your input, no storage. You can verify in your browser's network tab: after the page loads, no requests are made.