andresriancho/enumerate-iam

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1252 stars · 196 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python CLI tool that enumerates the IAM permissions associated with an AWS credential set by brute-forcing all non-destructive API calls (get* and list*). It can also be imported as a library to return discovered permissions programmatically.

Use cases

• enumerate permissions of found AWS credentials
• discover what an AWS access key can do
• audit IAM policy permissions for a credential set
• test AWS credentials during a pentest
• list allowed AWS API calls for an access key

When to choose

• you have AWS credentials and need to know their effective permissions
• you want programmatic output of enumerated permissions for integration into other tools
• you need a non-destructive enumeration using only get* and list* calls

When to avoid

• you need a full cloud security posture assessment rather than credential permission discovery
• you need support for non-AWS clouds
• you require actively maintained tooling with support for the newest AWS services without regenerating the brute-force lists

Facets

cli-tool · maturity maintenance

security cli developer-tools security cloud-computing penetration-testing cli python windows aws iam cloud-security permission-enumeration pentesting brute-force linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="andresriancho/enumerate-iam")