AWS IAM Policy Visualizer

Paste an AWS IAM JSON policy to render it into a human-readable security matrix.

Allow Statement
Action
s3:GetObjects3:ListBucket
Resource
arn:aws:s3:::my-company-bucketarn:aws:s3:::my-company-bucket/*
Deny Statement
Action
*
Resource
*
Conditions
{
  "Bool": {
    "aws:SecureTransport": "false"
  }
}

Decoding AWS IAM JSON Policies

AWS Identity and Access Management (IAM) policies are written in JSON. While computers parse JSON perfectly, large IAM policies with multiple statements, wildcards, and complex nested conditions are notoriously difficult for humans to read safely.

The Components of an IAM Policy

  • Effect: Either Allow or Deny. Explicit Deny statements always override explicit Allows.
  • Action: The specific API actions permitted (e.g., s3:GetObject, dynamodb:*).
  • Resource: The Amazon Resource Name (ARN) of the specific AWS objects this policy applies to.
  • Condition (Optional): The exact circumstances under which the policy grants or denies permission (e.g., requiring MFA, enforcing SSL, or restricting IP addresses).

Security Warning

This tool is 100% client-side. When you paste your IAM policies, no data is ever transmitted to a server. Your security configurations and account IDs remain securely in your local browser memory.