salesforce/policy_sentry

Health v2 · maintenance only

Adoption not part of the score

2166 stars · 156 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Policy Sentry is a Python CLI tool and library that generates least-privilege AWS IAM policies. It automates writing security-conscious IAM policies by looking up AWS actions, resources, and condition keys instead of hand-crafting them.

Use cases

• generate least privilege IAM policies for AWS roles
• avoid writing AWS IAM policies by hand
• scope IAM policies to specific resource ARNs
• query the AWS IAM actions, resources, and condition keys database
• audit and tighten overly permissive IAM policies
• integrate IAM policy generation into Terraform or CI pipelines

When to choose

• you write AWS IAM policies for users, roles, or infrastructure as code
• your team wants to enforce least-privilege access on AWS
• you need programmatic or CLI-based IAM policy generation

When to avoid

• you work with clouds other than AWS
• you need general cloud security posture management rather than IAM policy authoring

Facets

cli-tool · maturity stable

security developer-tools cli infrastructure-as-code security cloud-computing developer-tools cli python cross-platform aws iam least-privilege iam-policy cloud-security policy-generation devops docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="salesforce/policy_sentry")