iann0036/iamlive

Health v2 · maintenance only

Adoption not part of the score

3407 stars · 118 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A Go CLI tool that generates IAM policies by monitoring AWS, Azure, or GCP API calls via client-side monitoring or an embedded proxy. It observes the actions your CLI/SDK performs and produces a least-privilege policy document.

Use cases

• generate an IAM policy from AWS CLI calls
• create least-privilege policies for Terraform runs
• figure out which IAM permissions my SDK application needs
• generate Azure RBAC roles from observed API calls
• capture GCP IAM permissions from gcloud commands
• audit failed AWS calls to find missing permissions

When to choose

• you need to write least-privilege IAM policies without guessing permissions
• you want to derive policies from real CLI, SDK, or Terraform activity
• you work across AWS, Azure, or GCP and need policy generation from API traffic

When to avoid

• you need guaranteed-correct Azure or GCP policy output, which is still in preview
• you want static analysis of infrastructure code rather than runtime call monitoring
• you need policy management or enforcement, not just generation

Facets

cli-tool · maturity active

security developer-tools cli cloud-computing security developer-tools infrastructure-as-code windows cli go aws-iam least-privilege policy-generation azure-rbac gcp-iam cloud-security linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="iann0036/iamlive")