AWS IAM ARN Tools

ARN Builder

Build an AWS ARN field by field — partition, service, region, account, resource

Bulk ARN Parser

Paste a list of AWS ARNs, one per line, and get a searchable table of partition,

ARN Comparison Tool

Paste two AWS ARNs and see a field-by-field diff of partition, service, region,

Cross-Account ARN Generator

Paste an AWS ARN and a target 12-digit account id and get back the same ARN with

ARN Parser

Paste an AWS ARN and instantly see its partition, service, region, account id, r

ARN to Resource Type Identifier

Paste an AWS ARN and get a plain-English resource type label (IAM Role, Lambda F

ARN Validator

Validate an AWS ARN's format: partition, account id digit-count, region shape an

Wildcard ARN Pattern Builder

Build a wildcard AWS ARN pattern from partition/service/region/account/resource

Cross-Account Access Policy Generator

Build the identity-based IAM policy that grants your user or role access to a re

Deny Policy Generator

Build an explicit IAM Deny statement, including the NotAction/NotResource "deny

DynamoDB ARN Generator

Build a correct DynamoDB table or global/local secondary index ARN from region,

EC2 Instance ARN Generator

Build a correct EC2 instance ARN from region, account id and instance id — arn:a

Federated Identity Policy Generator

Build a SAML or OIDC federated identity trust policy with correctly derived cond

IAM Access Key Rotation Calculator

Calculate an AWS access key's age from its creation date and see when it is due

IAM Action Glossary

Searchable glossary of ~70 common AWS IAM actions across 12 services (S3, EC2, I

IAM Action-to-Service Mapper

Paste one or more IAM action strings (e.g. s3:GetObject) and identify which AWS

IAM ARN Format Reference

Searchable cheat sheet of AWS ARN formats for ~30 common services and resource t

Assume Role CLI Command Generator

Generate the exact AWS CLI v2 aws sts assume-role command from a role ARN, sessi

Assume Role Policy Generator

Build the identity-side IAM statement granting a user or role permission to call

AWS CDK IAM Construct Generator

Generate a real CDK TypeScript Construct class from IAM policy JSON: an iam.Role

CloudFormation IAM Template Generator

Generate a complete CloudFormation template with a Parameters section, an AWS::I

IAM Condition Key Validator

Paste an IAM policy and check every Condition-block key against a curated list o

Cross-Service Role Generator

Scaffold a complete AWS IAM service role in one step: trust policy plus a starti

IAM Effective Permissions Calculator

Combine up to three IAM policy documents as if attached to one role or user. See

External ID Generator

Generate a cryptographically random External ID for third-party cross-account IA

IAM Global Condition Key Reference

Searchable reference of AWS IAM global condition keys (aws:* and sts:*) usable i

Least-Privilege IAM Policy Generator

Generate a minimal starting IAM policy scaffold for S3, Lambda, DynamoDB, EC2, S

AWS Managed Policy Lookup

Searchable table of ~25 common AWS managed IAM policies with their exact ARN and

IAM Overly Permissive Policy Checker

Paste an IAM policy JSON document and find every Allow statement combining Actio

IAM Per-Service Condition Key Reference

Curated reference of service-specific AWS IAM condition keys (s3:x-amz-acl, ec2:

IAM Permission Boundary Generator

Build an AWS IAM permission boundary policy: start from a common Allow-a-service

IAM Policy Attachment Limit Checker

Check how many managed policies are attached to an IAM role or user against the

Policy Document Base64 Encoder/Decoder

Encode an IAM policy document (or any text) to Base64, or decode Base64 back to

IAM Policy Beautifier

Beautify a minified or messy IAM policy JSON document into clean, readable, cons

IAM Policy Character Count Calculator

Live, no-button character counter for IAM policy JSON. See instant progress bars

IAM Policy Comparison Tool

Compare two IAM policy documents statement by statement. See exactly which state

IAM Policy Conflict Detector

Detect Allow vs Deny statements across multiple IAM policies whose Action and Re

IAM Policy Statement Duplicate Detector

Paste an IAM policy JSON document and find exact duplicate statements, reported

IAM Policy Example Library

Copy-paste IAM policy JSON templates for common access patterns: S3 read-only/fu

IAM Policy JSON Generator

Build AWS IAM policy JSON visually: add one or more statements (Sid, Effect, Act

IAM Policy JSON Syntax Validator

Validate an IAM policy document in two passes: JSON syntax (with line/column err

IAM Policy Minifier

Minify an IAM policy JSON document to a single compact line, ready for a CLI fla

IAM Policy Permission Explainer

Turn an IAM policy JSON document into plain-English sentences, one per statement

IAM Policy Simulator (logic-based)

Paste an IAM policy document, build a test request (action, resource, context),

IAM Policy Size Checker

Check an IAM policy JSON document against all four AWS size quotas at once: mana

IAM Policy Statement Summary

Get a stats dashboard for an IAM policy: statement/Allow/Deny counts, wildcard f

IAM Policy Structure Validator

Paste an IAM policy JSON document and check its structural shape: Version, non-e

IAM Policy to CDK Converter

Convert IAM policy JSON into an AWS CDK TypeScript snippet using iam.PolicyDocum

IAM Policy to CloudFormation Converter

Convert IAM policy JSON into a CloudFormation AWS::IAM::Policy YAML resource, wi

IAM Policy to Terraform HCL Converter

Convert IAM policy JSON into a Terraform aws_iam_policy resource block using the

IAM Policy Variable Syntax Checker

Paste an IAM policy or snippet and find every ${...} policy variable token, chec

IAM Policy Wildcard Usage Analyzer

Paste an IAM policy JSON document and find every wildcard in Action, NotAction,

IAM Policy YAML to JSON Converter

Convert a YAML-formatted IAM policy block (as embedded in CloudFormation templat

IAM Privilege Escalation Risk Detector

Paste an IAM policy and check it against a curated catalog of published privileg

Public S3 Bucket Policy Detector

Paste an S3 bucket policy or other resource policy and detect Allow statements t

IAM Quota & Limits Reference

Searchable reference table of commonly-cited AWS IAM default quotas — roles/user

Role Session Name Validator

Validate a proposed AWS STS RoleSessionName against AWS's documented 2-64 charac

IAM Role Trust Relationship Generator

Build an AWS IAM role trust policy for any principal type: AWS account, specific

IAM Role/User ARN Generator

Build a correct IAM role or user ARN from an account id, role/user toggle, optio

AWS SAM Template IAM Policy Generator

Generate the Policies: section of a SAM AWS::Serverless::Function resource: pick

IAM SCP Root Restriction Generator

Generate an AWS Organizations SCP that denies high-risk actions (IAM changes, ac

IAM Sensitive Action Flagger

Paste an IAM policy and flag individually high-impact actions — destructive, cre

Serverless Framework IAM Role Generator

Convert IAM policy JSON into a serverless.yml IAM role block, in both the modern

AWS Service Prefix Lookup

Searchable reference mapping ~45 common AWS IAM service prefixes (s3, ec2, lambd

Terraform IAM Policy Resource Generator

Generate a complete Terraform aws_iam_policy resource from IAM policy JSON, with

IAM Trust Policy Generator

Build an AWS IAM trust policy for role assumption: choose an AWS account, specif

IAM Unused Permissions Finder

Paste an IAM policy and a list of actions you know are used, and find granted ac

IAM Unused Statement Detector

Paste an IAM policy and find statements that are structurally inert — missing an

IP-Restricted Policy Generator

Build an IAM statement restricted by source IP using aws:SourceIp, with an allow

KMS Key ARN Generator

Build a correct AWS KMS key ARN by key ID or by alias, with automatic handling o

Lambda ARN Generator

Build a correct AWS Lambda function ARN from region, account id, function name,

MFA-Required Policy Condition Generator

Build an IAM statement requiring MFA via aws:MultiFactorAuthPresent, with an opt

Resource-Based Policy Generator

Build a Lambda, SNS or SQS resource-based policy: service or cross-account princ

S3 ARN Generator

Build a correct S3 ARN from a bucket name and optional object key — arn:aws:s3::

S3 Bucket Policy Generator

Build an AWS S3 bucket policy: pick a principal (public, account, or role/user A

Service Control Policy (SCP) Generator

Build an AWS Organizations Service Control Policy from three realistic Deny-only

SNS/SQS ARN Generator

Build a correct SNS topic ARN or SQS queue ARN from region, account id and name.

Tag-Based Access Policy Generator (ABAC)

Build an attribute-based access control (ABAC) IAM statement using aws:ResourceT

Time-Based Access Policy Generator

Build an IAM statement restricted to a date/time window using aws:CurrentTime wi