nccgroup/PMapper

Health v2 · maintenance only

Adoption not part of the score

1576 stars · 197 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Principal Mapper (PMapper) is a Python CLI tool and library that models AWS IAM users and roles as a directed graph to identify privilege escalation risks and unintended access paths. It simulates AWS authorization locally to answer queries about which principals can perform actions or access resources.

Use cases

• audit AWS IAM permissions for an account or organization
• find privilege escalation paths in AWS IAM configuration
• check which IAM users or roles can perform a specific action
• identify alternate attack paths to access an AWS resource
• generate a graph visualization of IAM relationships
• run preset queries for common IAM misconfigurations

When to choose

• you need to audit IAM privilege escalation risks in an AWS account
• you want to simulate AWS authorization locally without making live calls
• you need to trace indirect access paths through role assumption chains
• you want a scriptable CLI or Python library for IAM analysis

When to avoid

• you need continuous cloud security monitoring rather than point-in-time analysis
• you need multi-cloud IAM auditing beyond AWS
• you want automated remediation of IAM issues rather than detection

Facets

cli-tool · maturity active

security vulnerability-scanning developer-tools cloud-computing security infrastructure-as-code python cli cross-platform aws iam privilege-escalation cloud-security graph-analysis botocore docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nccgroup/PMapper")