AI Blocks › Keep your code secure
AWS access policy reviewer
Give it your IAM policies. Get risky permissions found and tighter versions that grant only what is needed.
AWS access policy reviewer is a free AI skill for the job "Keep your code secure". Give the instructions to an AI assistant that supports the required files and tools, then review its output.
Free · No account · CC BY 4.0 licence · Made by sickn33 · Level: advanced
Made by sickn33. See the original on GitHub; we copied it as it is, with its licence.
What it does
Your AWS permission policies checked for risks and rewritten to allow only what each user or service needs. Paste IAM policies or point the AI at an account, and it flags wildcard permissions, users without multi-factor login, old access keys, unused roles and risky trust settings. For each finding, you get a tighter version. It includes ready-made patterns: access to a single S3 bucket, policies that require MFA, access limited by time and access limited by IP address. It ends with a hardening checklist and shows how to automate the checks. Reviewing a live account needs the AWS command line and read access to IAM.
You give it
- IAM policies as JSON, or account access
- What each user or role must do
- Compliance rules you follow (optional)
You get
- A list of risky permissions
- Least-privilege replacement policies
- MFA and key rotation checks
- A hardening checklist
Use it when
- A policy has Action star and Resource star and nobody remembers why.
- You are tidying an AWS account before a security review.
- A developer needs access to one bucket and nothing else.
- You want to enforce MFA for everyone who logs in.
How to use it
- Add it to your AI once: download it and add the folder to Claude, ChatGPT or Codex as a skill.
- Ask for the job in your own words. Your AI opens the skill when it fits.
- It works best when your AI can read your project files.