aws-iam-managed-policies

Automatically populated (every morning at 6AM UTC) repository of AWS IAM Managed Policies, which also updates a npm package containing the full history of AWS IAM Managed Policies.

Data

The raw IAM Managed Policies data can be found in the data/json directory. It is categorized by Managed Policy name and version id.

Installation

You can install the npm package like this:

1npm i --save aws-iam-managed-policies

API Docs

The API docs can be found at https://tobilg.github.io/aws-iam-managed-policies.

Usage examples

1const { 
2  getPolicyCount,
3  listPolicies,
4  getPolicyByName,
5  getLatestPolicyDocument,
6  getPolicyDocumentByVersion,
7  getPolicyDiffByVersions
8} = require('aws-iam-managed-policies');

Get the number of Managed Policies

1console.log(getPolicyCount());
2/*
31117
4*/

Get the first 10 policy names

1console.log(listPolicies().filter((p, i) => i <= 9));
2/*
3[
4  "APIGatewayServiceRolePolicy",
5  "AWSAccountActivityAccess",
6  "AWSAccountManagementFullAccess",
7  "AWSAccountManagementReadOnlyAccess",
8  "AWSAccountUsageReportAccess",
9  "AWSAgentlessDiscoveryService",
10  "AWSAppFabricFullAccess",
11  "AWSAppFabricReadOnlyAccess",
12  "AWSAppFabricServiceRolePolicy",
13  "AWSAppMeshEnvoyAccess"
14]
15*/

Get policy by name 'AdministratorAccess'

1console.log(getPolicyByName('AdministratorAccess'));
2/*
3{
4  "arn": "arn:aws:iam::aws:policy/AdministratorAccess",
5  "latestVersionId": "v1",
6  "versionsCount": 1,
7  "versions": {
8    "v1": {
9      "createdDate": "2015-02-06T18:39:46.000Z",
10      "document": {
11        "Version": "2012-10-17",
12        "Statement": [
13          {
14            "Effect": "Allow",
15            "Action": "*",
16            "Resource": "*"
17          }
18        ]
19      }
20    }
21  },
22  "createdDate": "2015-02-06T18:39:46.000Z",
23  "lastUpdatedDate": "2015-02-06T18:39:46.000Z"
24}
25*/

Get latest policy document for policy 'AdministratorAccess'

1console.log(getLatestPolicyDocument('AdministratorAccess'));
2/*
3{
4  "Version": "2012-10-17",
5  "Statement": [
6    {
7      "Effect": "Allow",
8      "Action": "*",
9      "Resource": "*"
10    }
11  ]
12}
13*/

Get version '5' policy document for policy 'ViewOnlyAccess'

1console.log(getPolicyDocumentByVersion('ViewOnlyAccess', 5));
2/*
3{
4  "Version": "2012-10-17",
5  "Statement": [
6    {
7      "Action": [
8        "acm:ListCertificates",
9        "athena:List*",
10        "aws-marketplace:ViewSubscriptions",
11        "autoscaling:Describe*",
12        "batch:ListJobs",
13        "clouddirectory:ListAppliedSchemaArns",
14        "clouddirectory:ListDevelopmentSchemaArns",
15        "clouddirectory:ListDirectories",
16        "clouddirectory:ListPublishedSchemaArns",
17        "cloudformation:List*",
18        "cloudformation:DescribeStacks",
19        "cloudfront:List*",
20        "cloudhsm:ListAvailableZones",
21        "cloudhsm:ListLunaClients",
22        "cloudhsm:ListHapgs",
23        "cloudhsm:ListHsms",
24        "cloudsearch:List*",
25        "cloudsearch:DescribeDomains",
26        "cloudtrail:DescribeTrails",
27        "cloudtrail:LookupEvents",
28        "cloudwatch:List*",
29        "cloudwatch:GetMetricData",
30        "codebuild:ListBuilds*",
31        "codebuild:ListProjects",
32        "codecommit:List*",
33        "codedeploy:List*",
34        "codedeploy:Get*",
35        "codepipeline:ListPipelines",
36        "codestar:List*",
37        "codestar:Verify*",
38        "cognito-idp:List*",
39        "cognito-identity:ListIdentities",
40        "cognito-identity:ListIdentityPools",
41        "cognito-sync:ListDatasets",
42        "connect:List*",
43        "config:List*",
44        "config:Describe*",
45        "datapipeline:ListPipelines",
46        "datapipeline:DescribePipelines",
47        "datapipeline:GetAccountLimits",
48        "devicefarm:List*",
49        "directconnect:Describe*",
50        "discovery:List*",
51        "dms:List*",
52        "ds:DescribeDirectories",
53        "dynamodb:ListTables",
54        "ec2:DescribeAccountAttributes",
55        "ec2:DescribeAddresses",
56        "ec2:DescribeAvailabilityZones",
57        "ec2:DescribeBundleTasks",
58        "ec2:DescribeClassicLinkInstances",
59        "ec2:DescribeConversionTasks",
60        "ec2:DescribeCustomerGateways",
61        "ec2:DescribeDhcpOptions",
62        "ec2:DescribeExportTasks",
63        "ec2:DescribeFlowLogs",
64        "ec2:DescribeHost*",
65        "ec2:DescribeIdentityIdFormat",
66        "ec2:DescribeIdFormat",
67        "ec2:DescribeImage*",
68        "ec2:DescribeImport*",
69        "ec2:DescribeInstance*",
70        "ec2:DescribeInternetGateways",
71        "ec2:DescribeKeyPairs",
72        "ec2:DescribeMovingAddresses",
73        "ec2:DescribeNatGateways",
74        "ec2:DescribeNetwork*",
75        "ec2:DescribePlacementGroups",
76        "ec2:DescribePrefixLists",
77        "ec2:DescribeRegions",
78        "ec2:DescribeReserved*",
79        "ec2:DescribeRouteTables",
80        "ec2:DescribeSecurityGroups",
81        "ec2:DescribeSnapshot*",
82        "ec2:DescribeSpot*",
83        "ec2:DescribeSubnets",
84        "ec2:DescribeVolume*",
85        "ec2:DescribeVpc*",
86        "ec2:DescribeVpnGateways",
87        "ecr:DescribeRepositories",
88        "ecr:ListImages",
89        "ecs:List*",
90        "ecs:Describe*",
91        "elasticache:Describe*",
92        "elasticbeanstalk:DescribeApplicationVersions",
93        "elasticbeanstalk:DescribeApplications",
94        "elasticbeanstalk:DescribeEnvironments",
95        "elasticbeanstalk:ListAvailableSolutionStacks",
96        "elasticloadbalancing:DescribeListeners",
97        "elasticloadbalancing:DescribeLoadBalancers",
98        "elasticloadbalancing:DescribeTargetGroups",
99        "elasticloadbalancing:DescribeTargetHealth",
100        "elasticfilesystem:DescribeFileSystems",
101        "elasticmapreduce:List*",
102        "elastictranscoder:List*",
103        "es:DescribeElasticsearchDomain",
104        "es:DescribeElasticsearchDomains",
105        "es:ListDomainNames",
106        "events:ListRuleNamesByTarget",
107        "events:ListRules",
108        "events:ListTargetsByRule",
109        "firehose:List*",
110        "firehose:DescribeDeliveryStream",
111        "gamelift:List*",
112        "glacier:List*",
113        "iam:List*",
114        "iam:GetAccountSummary",
115        "iam:GetLoginProfile",
116        "importexport:ListJobs",
117        "inspector:List*",
118        "iot:List*",
119        "kinesis:ListStreams",
120        "kinesisanalytics:ListApplications",
121        "kms:ListKeys",
122        "lambda:List*",
123        "lex:GetBotAliases",
124        "lex:GetBotChannelAssociations",
125        "lex:GetBots",
126        "lex:GetBotVersions",
127        "lex:GetIntents",
128        "lex:GetIntentVersions",
129        "lex:GetSlotTypes",
130        "lex:GetSlotTypeVersions",
131        "lex:GetUtterancesView",
132        "lightsail:GetBlueprints",
133        "lightsail:GetBundles",
134        "lightsail:GetInstances",
135        "lightsail:GetInstanceSnapshots",
136        "lightsail:GetKeyPair",
137        "lightsail:GetRegions",
138        "lightsail:GetStaticIps",
139        "lightsail:IsVpcPeered",
140        "logs:Describe*",
141        "machinelearning:Describe*",
142        "mobilehub:ListAvailableFeatures",
143        "mobilehub:ListAvailableRegions",
144        "mobilehub:ListProjects",
145        "opsworks:Describe*",
146        "opsworks-cm:Describe*",
147        "organizations:List*",
148        "mobiletargeting:GetApplicationSettings",
149        "mobiletargeting:GetCampaigns",
150        "mobiletargeting:GetImportJobs",
151        "mobiletargeting:GetSegments",
152        "polly:Describe*",
153        "polly:List*",
154        "rds:Describe*",
155        "redshift:DescribeClusters",
156        "redshift:DescribeEvents",
157        "redshift:ViewQueriesInConsole",
158        "route53:List*",
159        "route53:Get*",
160        "route53domains:List*",
161        "s3:ListAllMyBuckets",
162        "s3:ListBucket",
163        "sagemaker:Describe*",
164        "sagemaker:List*",
165        "sdb:List*",
166        "servicecatalog:List*",
167        "ses:List*",
168        "shield:List*",
169        "states:ListActivities",
170        "states:ListStateMachines",
171        "sns:List*",
172        "sqs:ListQueues",
173        "ssm:ListAssociations",
174        "ssm:ListDocuments",
175        "storagegateway:ListGateways",
176        "storagegateway:ListLocalDisks",
177        "storagegateway:ListVolumeRecoveryPoints",
178        "storagegateway:ListVolumes",
179        "swf:List*",
180        "trustedadvisor:Describe*",
181        "waf:List*",
182        "waf-regional:List*",
183        "workdocs:DescribeAvailableDirectories",
184        "workdocs:DescribeInstances",
185        "workmail:Describe*",
186        "workspaces:Describe*"
187      ],
188      "Effect": "Allow",
189      "Resource": "*"
190    }
191  ]
192}
193*/

Get a version comparison of versions '5' and '17' policy document for policy 'ViewOnlyAccess'

1console.log(getPolicyDiffByVersions('ViewOnlyAccess', 5, 17));
2/*
3{
4  "added": {
5    "Statement": {
6      "0": {
7        "Action": {
8          "179": "mediaconnect:ListReservations",
9          "180": "mobiletargeting:GetApplicationSettings",
10          "181": "mobiletargeting:GetCampaigns",
11          "182": "mobiletargeting:GetImportJobs",
12          "183": "mobiletargeting:GetSegments",
13          "184": "opsworks-cm:Describe*",
14          "185": "opsworks:Describe*",
15          "186": "organizations:List*",
16          "187": "outposts:GetOutpost",
17          "188": "outposts:GetOutpostInstanceTypes",
18          "189": "outposts:ListOutposts",
19          "190": "outposts:ListSites",
20          "191": "outposts:ListTagsForResource",
21          "192": "polly:Describe*",
22          "193": "polly:List*",
23          "194": "rds:Describe*",
24          "195": "redshift:DescribeClusters",
25          "196": "redshift:DescribeEvents",
26          "197": "redshift:ViewQueriesInConsole",
27          "198": "resource-explorer-2:GetDefaultView",
28          "199": "resource-explorer-2:GetIndex",
29          "200": "resource-explorer-2:ListIndexes",
30          "201": "resource-explorer-2:ListSupportedResourceTypes",
31          "202": "resource-explorer-2:ListTagsForResource",
32          "203": "resource-explorer-2:ListViews",
33          "204": "route53:Get*",
34          "205": "route53:List*",
35          "206": "route53domains:List*",
36          "207": "route53resolver:Get*",
37          "208": "route53resolver:List*",
38          "209": "s3:ListAllMyBuckets",
39          "210": "s3:ListBucket",
40          "211": "sagemaker:Describe*",
41          "212": "sagemaker:List*",
42          "213": "sdb:List*",
43          "214": "servicecatalog:List*",
44          "215": "ses:List*",
45          "216": "shield:List*",
46          "217": "sns:List*",
47          "218": "sqs:ListQueues",
48          "219": "ssm:ListAssociations",
49          "220": "ssm:ListDocuments",
50          "221": "states:ListActivities",
51          "222": "states:ListStateMachines",
52          "223": "storagegateway:ListGateways",
53          "224": "storagegateway:ListLocalDisks",
54          "225": "storagegateway:ListVolumeRecoveryPoints",
55          "226": "storagegateway:ListVolumes",
56          "227": "swf:List*",
57          "228": "trustedadvisor:Describe*",
58          "229": "waf-regional:List*",
59          "230": "waf:List*",
60          "231": "wafv2:List*",
61          "232": "workdocs:DescribeAvailableDirectories",
62          "233": "workdocs:DescribeInstances",
63          "234": "workmail:Describe*",
64          "235": "workspaces:Describe*"
65        }
66      }
67    }
68  },
69  "deleted": {},
70  "updated": {
71    "Statement": {
72      "0": {
73        "Action": {
74          "2": "autoscaling:Describe*",
75          "3": "aws-marketplace:ViewSubscriptions",
76          "9": "cloudformation:DescribeStacks",
77          "10": "cloudformation:List*",
78          "13": "cloudhsm:ListHapgs",
79          "14": "cloudhsm:ListHsms",
80          "15": "cloudhsm:ListLunaClients",
81          "16": "cloudsearch:DescribeDomains",
82          "17": "cloudsearch:List*",
83          "20": "cloudwatch:Get*",
84          "21": "cloudwatch:List*",
85          "25": "codedeploy:Get*",
86          "26": "codedeploy:List*",
87          "29": "cognito-identity:ListIdentities",
88          "30": "cognito-identity:ListIdentityPools",
89          "31": "cognito-idp:List*",
90          "32": "cognito-sync:ListDatasets",
91          "33": "config:Describe*",
92          "34": "config:List*",
93          "35": "connect:List*",
94          "36": "comprehend:Describe*",
95          "37": "comprehend:List*",
96          "40": "datapipeline:ListPipelines",
97          "41": "dax:DescribeClusters",
98          "42": "dax:DescribeDefaultParameters",
99          "43": "dax:DescribeEvents",
100          "44": "dax:DescribeParameterGroups",
101          "45": "dax:DescribeParameters",
102          "46": "dax:DescribeSubnetGroups",
103          "47": "dax:ListTags",
104          "48": "devicefarm:List*",
105          "49": "directconnect:Describe*",
106          "50": "discovery:List*",
107          "51": "dms:List*",
108          "52": "ds:DescribeDirectories",
109          "53": "dynamodb:DescribeBackup",
110          "54": "dynamodb:DescribeContinuousBackups",
111          "55": "dynamodb:DescribeGlobalTable",
112          "56": "dynamodb:DescribeGlobalTableSettings",
113          "57": "dynamodb:DescribeLimits",
114          "58": "dynamodb:DescribeReservedCapacity",
115          "59": "dynamodb:DescribeReservedCapacityOfferings",
116          "60": "dynamodb:DescribeStream",
117          "61": "dynamodb:DescribeTable",
118          "62": "dynamodb:DescribeTimeToLive",
119          "63": "dynamodb:ListBackups",
120          "64": "dynamodb:ListGlobalTables",
121          "65": "dynamodb:ListStreams",
122          "66": "dynamodb:ListTables",
123          "67": "dynamodb:ListTagsOfResource",
124          "68": "ec2:DescribeAccountAttributes",
125          "69": "ec2:DescribeAddresses",
126          "70": "ec2:DescribeAvailabilityZones",
127          "71": "ec2:DescribeBundleTasks",
128          "72": "ec2:DescribeCarrierGateways",
129          "73": "ec2:DescribeClassicLinkInstances",
130          "74": "ec2:DescribeConversionTasks",
131          "75": "ec2:DescribeCustomerGateways",
132          "76": "ec2:DescribeDhcpOptions",
133          "77": "ec2:DescribeExportTasks",
134          "78": "ec2:DescribeFlowLogs",
135          "79": "ec2:DescribeHost*",
136          "80": "ec2:DescribeIdFormat",
137          "81": "ec2:DescribeIdentityIdFormat",
138          "82": "ec2:DescribeImage*",
139          "83": "ec2:DescribeImport*",
140          "84": "ec2:DescribeInstance*",
141          "85": "ec2:DescribeInternetGateways",
142          "86": "ec2:DescribeKeyPairs",
143          "87": "ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations",
144          "88": "ec2:DescribeLocalGatewayRouteTableVpcAssociations",
145          "89": "ec2:DescribeLocalGatewayRouteTables",
146          "90": "ec2:DescribeLocalGatewayVirtualInterfaceGroups",
147          "91": "ec2:DescribeLocalGatewayVirtualInterfaces",
148          "92": "ec2:DescribeLocalGateways",
149          "93": "ec2:DescribeMovingAddresses",
150          "94": "ec2:DescribeNatGateways",
151          "95": "ec2:DescribeNetwork*",
152          "96": "ec2:DescribePlacementGroups",
153          "97": "ec2:DescribePrefixLists",
154          "98": "ec2:DescribeRegions",
155          "99": "ec2:DescribeReserved*",
156          "100": "ec2:DescribeRouteTables",
157          "101": "ec2:DescribeSecurityGroupRules",
158          "102": "ec2:DescribeSecurityGroups",
159          "103": "ec2:DescribeSnapshot*",
160          "104": "ec2:DescribeSpot*",
161          "105": "ec2:DescribeSubnets",
162          "106": "ec2:DescribeTags",
163          "107": "ec2:DescribeVolume*",
164          "108": "ec2:DescribeVpc*",
165          "109": "ec2:DescribeVpnGateways",
166          "110": "ec2:SearchLocalGatewayRoutes",
167          "111": "ecr:DescribeRepositories",
168          "112": "ecr:ListImages",
169          "113": "ecs:Describe*",
170          "114": "ecs:List*",
171          "115": "elastic-inference:DescribeAccelerators",
172          "116": "elastic-inference:DescribeAcceleratorTypes",
173          "117": "elastic-inference:DescribeAcceleratorOfferings",
174          "118": "elastic-inference:ListTagsForResource",
175          "119": "elasticache:Describe*",
176          "120": "elasticbeanstalk:DescribeApplicationVersions",
177          "121": "elasticbeanstalk:DescribeApplications",
178          "122": "elasticbeanstalk:DescribeEnvironments",
179          "123": "elasticbeanstalk:ListAvailableSolutionStacks",
180          "124": "elasticfilesystem:DescribeFileSystems",
181          "125": "elasticloadbalancing:DescribeInstanceHealth",
182          "126": "elasticloadbalancing:DescribeListeners",
183          "127": "elasticloadbalancing:DescribeLoadBalancers",
184          "128": "elasticloadbalancing:DescribeTargetGroups",
185          "129": "elasticloadbalancing:DescribeTargetHealth",
186          "130": "elasticmapreduce:List*",
187          "131": "elastictranscoder:List*",
188          "132": "es:DescribeElasticsearchDomain",
189          "133": "es:DescribeElasticsearchDomains",
190          "134": "es:ListDomainNames",
191          "135": "events:ListRuleNamesByTarget",
192          "136": "events:ListRules",
193          "137": "events:ListTargetsByRule",
194          "138": "firehose:DescribeDeliveryStream",
195          "139": "firehose:List*",
196          "140": "fsx:DescribeFileSystems",
197          "141": "gamelift:List*",
198          "142": "glacier:List*",
199          "143": "greengrass:List*",
200          "144": "iam:GetAccountSummary",
201          "145": "iam:GetLoginProfile",
202          "146": "iam:List*",
203          "147": "importexport:ListJobs",
204          "148": "inspector:List*",
205          "149": "iot:List*",
206          "150": "kinesis:ListStreams",
207          "151": "kinesisanalytics:ListApplications",
208          "152": "kms:ListKeys",
209          "153": "lambda:List*",
210          "154": "lex:GetBotAliases",
211          "155": "lex:GetBotChannelAssociations",
212          "156": "lex:GetBotVersions",
213          "157": "lex:GetBots",
214          "158": "lex:GetIntentVersions",
215          "159": "lex:GetIntents",
216          "160": "lex:GetSlotTypeVersions",
217          "161": "lex:GetSlotTypes",
218          "162": "lex:GetUtterancesView",
219          "163": "lightsail:GetBlueprints",
220          "164": "lightsail:GetBundles",
221          "165": "lightsail:GetInstanceSnapshots",
222          "166": "lightsail:GetInstances",
223          "167": "lightsail:GetKeyPair",
224          "168": "lightsail:GetRegions",
225          "169": "lightsail:GetStaticIps",
226          "170": "lightsail:IsVpcPeered",
227          "171": "logs:Describe*",
228          "172": "lookoutvision:ListModelPackagingJobs",
229          "173": "lookoutvision:ListModels",
230          "174": "lookoutvision:ListProjects",
231          "175": "machinelearning:Describe*",
232          "176": "mediaconnect:ListEntitlements",
233          "177": "mediaconnect:ListFlows",
234          "178": "mediaconnect:ListOfferings"
235        }
236      }
237    }
238  }
239}
240*/