Awesome Open Source
Awesome Open Source

AWS IAM Tracker

This project collects IAM actions, AWS APIs and managed policies from various public sources.

You can explore the data collected using the static site.

Collected data is published to the policies and services folders in this repo.

Thank you to alanakirby/aktion for originally having this idea and being gracious about me shamelessly ripping it off.

Stats

  • Unique services: 276
  • Unique actions: 10876
  • Managed policies: 830

Most common managed policy name prefixes:

Policy ARN Count
arn:aws:iam::aws:policy/AWS* 234
arn:aws:iam::aws:policy/Amazon* 224
arn:aws:iam::aws:policy/aws-service-role/* 161
arn:aws:iam::aws:policy/service-role/* 124
arn:aws:iam::aws:policy/job-function/* 7
Other 80

The following table summarises the AWS APIs.

  • The first column is the name of the API as far as IAM policies are concerned.
  • The second column is IAM actions that exactly match the names of invokable APIs exposed by AWS.
  • The third column is invokable APIs that don't have a corresponding IAM action.
  • The fourth column is IAM actions that don't have a corresponding invokable API.
Service Action/API pairs APIs without actions Actions without APIs
ec2 449 5 0
sagemaker 245 2 2
chime 184 0 51
iam 158 0 1
glue 147 10 1
lightsail 142 0 0
ses 138 0 0
rds 137 0 1
ssm 134 1 7
mobiletargeting 112 0 0
greengrass 107 3 1
servicecatalog 107 0 0
connect 103 0 3
cognito-idp 100 1 0
quicksight 99 0 19
gamelift 95 0 0
redshift 93 11 18
a4b 93 0 3
lex 90 3 5
storagegateway 89 0 1
config 86 0 0
waf-regional 81 0 0
codecommit 77 0 11
waf 77 0 0
devicefarm 77 0 0
s3 75 57 42
cloudfront 75 8 0
opsworks 74 0 0
elasticache 65 0 0
route53 64 0 0
clouddirectory 63 3 0
ds 62 0 6
comprehend 61 0 0
autoscaling 60 1 0
route53resolver 60 0 0
guardduty 58 0 0
iotsitewise 57 1 1
robomaker 57 0 2
iotwireless 57 0 0
frauddetector 57 0 0
directconnect 56 3 0
lambda 56 2 4
macie2 56 0 0
medialive 55 1 0
cloudformation 55 0 3
workmail 54 0 51
elasticloadbalancing 54 0 1
dms 53 2 0
workspaces 53 0 0
ecs 52 0 2
securityhub 51 0 7
backup 51 0 2
events 51 0 1
rekognition 51 0 0
organizations 51 0 0
auditmanager 51 0 0
imagebuilder 49 0 0
dynamodb 48 6 10
personalize 48 4 0
kms 47 1 3
appstream 47 1 1
codedeploy 47 0 1
globalaccelerator 47 0 0
elasticmapreduce 46 1 15
elasticbeanstalk 46 1 3
nimble 45 0 2
geo 45 0 2
license-manager 45 0 0
codebuild 44 0 8
logs 42 0 5
workdocs 41 0 10
appsync 41 0 2
wafv2 40 0 2
es 39 1 9
sns 39 0 0
mechanicalturk 39 0 0
databrew 39 0 0
kendra 38 1 0
appmesh 38 0 1
codepipeline 37 2 0
swf 37 0 12
inspector 37 0 0
amplify 37 0 0
forecast 36 0 0
cloudwatch 36 0 0
sms 35 0 2
networkmanager 35 0 0
iotthingsgraph 35 0 0
iotevents 34 3 1
codeartifact 34 0 4
ecr 34 0 1
athena 34 0 1
iotanalytics 34 0 0
worklink 33 0 1
shield 33 0 0
glacier 33 0 0
cloudhsm 33 0 0
appconfig 33 0 0
datasync 32 3 0
eks 32 0 1
sso 31 0 52
wellarchitected 31 0 0
schemas 31 0 0
ce 30 0 10
kafka 30 0 0
transcribe 29 0 2
ssm-incidents 29 0 0
network-firewall 29 0 0
profile 28 2 0
cloudsearch 28 1 4
route53domains 28 0 0
machinelearning 28 0 0
kinesis 28 0 0
access-analyzer 28 0 0
proton 27 22 23
kinesisanalytics 27 4 1
mediaconnect 27 3 0
elasticfilesystem 27 0 5
kinesisvideo 27 0 3
xray 27 0 0
applicationinsights 27 0 0
mediastore 26 0 0
ivs 26 0 0
iot1click 26 0 0
fms 26 0 0
mgn 25 0 26
lookoutmetrics 25 0 1
mediaconvert 25 0 0
groundstation 25 0 0
discovery 25 0 0
ram 24 0 0
amplifybackend 24 0 0
ssm-contacts 23 4 3
states 23 0 0
servicediscovery 23 0 0
managedblockchain 23 0 0
ecr-public 23 0 0
cognito-identity 23 0 0
codeguru-profiler 23 0 0
acm-pca 23 0 0
snowball 22 3 0
dataexchange 22 0 2
apprunner 22 0 1
secretsmanager 22 0 0
mq 22 0 0
lookoutequipment 22 0 0
qldb 21 0 13
dax 21 0 9
devops-guru 21 0 0
transfer 20 5 0
comprehendmedical 20 1 0
sqs 20 0 0
mgh 20 0 0
lookoutvision 19 0 3
datapipeline 19 0 2
servicequotas 19 0 0
opsworks-cm 19 0 0
batch 19 0 0
mediapackage 18 1 0
appflow 18 0 6
fsx 18 0 4
codestar 18 0 3
cloudtrail 18 0 0
cognito-sync 17 0 2
signer 17 0 0
elastictranscoder 17 0 0
timestream 16 1 3
mediapackage-vod 16 1 0
resource-groups 16 0 1
detective 15 0 5
emr-containers 15 0 0
acm 15 0 0
support 14 0 8
fis 14 0 3
codeguru-reviewer 14 0 3
serverlessrepo 14 0 1
translate 14 0 0
lakeformation 13 10 1
cloud9 13 0 2
synthetics 13 0 0
iotdeviceadvisor 13 0 0
health 13 0 0
codestar-notifications 13 0 0
honeycode 12 0 14
codestar-connections 12 0 9
firehose 12 0 0
compute-optimizer 11 2 0
aws-marketplace 11 0 30
airflow 11 0 0
sdb 10 0 0
outposts 10 0 0
application-autoscaling 10 0 0
iot 9 0 239
app-integrations 9 0 2
savingsplans 9 0 0
redshift-data 9 0 0
polly 9 0 0
braket 9 0 0
budgets 8 14 2
mobilehub 8 1 15
healthlake 8 0 7
sts 8 0 3
tag 8 0 0
sms-voice 8 0 0
iotfleethub 8 0 0
dlm 8 0 0
mediatailor 7 24 0
macie 7 0 0
elastic-inference 6 0 1
textract 6 0 0
rds-data 6 0 0
importexport 6 0 0
ebs 6 0 0
autoscaling-plans 6 0 0
application-cost-profiler 6 0 0
aps 5 0 5
identitystore 4 0 0
cur 4 0 0
s3-outposts 3 0 29
pricing 3 0 0
pi 3 0 0
marketplacecommerceanalytics 2 0 0
ec2-instance-connect 2 0 0
workmailmessageflow 1 1 0
mobileanalytics 1 0 2
execute-api 0 238 3
apigateway 0 152 9
finspace 0 8 0
IoTSecuredTunneling 0 7 0
awsssoportal 0 4 0
finspace-api 0 3 0
awsssooidc 0 3 0
sso-directory 0 0 52
panorama 0 0 42
appmesh-preview 0 0 36
controltower 0 0 29
deepracer 0 0 26
deeplens 0 0 24
trustedadvisor 0 0 21
kafka-cluster 0 0 19
s3-object-lambda 0 0 18
deepcomposer 0 0 18
dbqms 0 0 13
monitron 0 0 12
chatbot 0 0 12
freertos 0 0 11
elemental-activations 0 0 10
grafana 0 0 9
cloudshell 0 0 9
launchwizard 0 0 8
cassandra 0 0 8
activate 0 0 8
elemental-appliances-software 0 0 7
aws-portal 0 0 7
ec2messages 0 0 6
iot-device-tester 0 0 5
groundtruthlabeling 0 0 5
elemental-support-cases 0 0 5
aws-marketplace-management 0 0 5
ssmmessages 0 0 4
artifact 0 0 4
tiros 0 0 3
resource-explorer 0 0 3
awsconnector 0 0 3
account 0 0 3
sumerian 0 0 2
purchase-orders 0 0 2
wam 0 0 1
rds-db 0 0 1
neptune-db 0 0 1
iq-permission 0 0 1
iq 0 0 1
elemental-support-content 0 0 1
codeguru 0 0 1
backup-storage 0 0 1
arsenal 0 0 1

Most common action prefixes:

Prefix Count
List 1587
Get 1424
Describe 1313
Delete 1272
Create 1169
Update 937
Put 316
Start 197
Tag 169
Untag 167

Get A Weekly Email With Trending Projects For These Topics
No Spam. Unsubscribe easily at any time.
go (15,168
golang (3,886
aws (1,102
iam (48
aws-sdk (44
aws-iam (20