IAM Policy to Terraform HCL Converter

Migrating an existing IAM policy into Terraform usually means wrapping it in an aws_iam_policy resource and choosing how to represent the policy document. IAM Policy to Terraform HCL Converter paste your policy JSON and produces an aws_iam_policy resource block that embeds the document using Terraform's jsonencode(...) function — the standard, idiomatic way most real-world Terraform codebases embed a raw IAM policy, since jsonencode() accepts a JSON-compatible literal directly and keeps the policy easy to read and diff.

The output is a starting point, not a finished module: the resource name and the policy's name argument are clearly labeled placeholders (aws_iam_policy.example, "example-policy") that you should rename to match your own project's conventions, and if your policy needs to reference another resource dynamically (say, a bucket ARN via aws_s3_bucket.example.arn) you will need to add that interpolation by hand — this tool only converts the static JSON you paste, it cannot infer which values should become dynamic Terraform references.

The JSON itself is not rewritten or reinterpreted at all beyond re-indenting it to fit inside the HCL block — every key, action, resource, and condition is preserved exactly as pasted.

• Generates an aws_iam_policy resource block using the idiomatic jsonencode(...) pattern.
• Custom Terraform resource name and policy name fields.
• Preserves your policy JSON exactly, only re-indented to fit the HCL block.
• Works on any valid JSON, with a structural warning if it does not look like a complete IAM policy.
• One-click copy of the generated HCL.
• 100% client-side — nothing is uploaded.

1. Paste your policy JSON, or click the sample.
2. Set the Terraform resource name and policy name (or leave the defaults).
3. Click Convert to Terraform.
4. Copy the HCL and rename the placeholders to fit your project before applying.

Example. A simple S3 read-only statement converts into: resource "aws_iam_policy" "example" { name = "example-policy" policy = jsonencode({ ... }) }, with the policy JSON pretty-printed and indented inside the jsonencode(...) call.

• Skips the manual reformatting of wrapping an existing policy in an aws_iam_policy resource.
• Uses the pattern real Terraform codebases actually use — jsonencode(), not a hand-rolled HCL object translation.
• Clearly labeled placeholders so you know exactly what to rename.
• Private — conversion runs entirely in your browser.