Free AWS Security Tools

Free, no-signup tools for AWS IAM security. Each runs in your browser — paste a policy and get an answer instantly. For AI-Powered reasoning and a corrected policy, use the full Shieldly analyzer.

Tools

IAM Policy Linter

Paste an IAM policy and instantly flag wildcards, privilege-escalation actions, NotAction traps, and public principals. Runs in your browser.

Trust Policy Explainer

Paste a role trust policy and see who can assume it, plus flags for wildcard principals and missing ExternalId / SourceArn confused-deputy conditions.

S3 Bucket Policy Checker

Paste an S3 bucket policy and instantly see if it grants public access, broad write/delete, or wildcard actions, with a plain-English breakdown.

CloudFormation IAM Checker

Paste a JSON CloudFormation template to extract every IAM role, policy, and trust document and flag wildcards, escalation actions, admin managed policies, and open trust policies.

ARN Parser & Explainer

Paste an AWS ARN and get every field explained in plain English — partition, service, region, account ID, resource type and ID — plus flags for wildcards and malformed ARNs.

IAM Policy Diff

Paste two versions of an IAM policy and see exactly which permissions were added or removed, with privilege-sensitive actions like iam:PassRole flagged separately.

CloudTrail Policy Generator

Paste a sample of CloudTrail events and get a minimal least-privilege IAM policy scoped to exactly what was actually used.

Policy Size Calculator

Check an IAM policy against the managed (6,144 char) and inline (2,048/10,240/5,120 char) size limits before you hit LimitExceeded.

AssumeRole Chain Visualizer

Paste several role trust policies and see who can assume what — multi-hop role chains, cycles, wildcard principals, and missing ExternalId conditions.

Want the full picture?

Shieldly's AI-Powered analyzer explains every finding and returns a tightened policy in seconds. Free, no signup. Also ships as CLI, VS Code extension, GitHub Action, and CDK Guard.

Amazon Web Services (AWS) is a trademark of Amazon.com, Inc. Shieldly is not affiliated with, endorsed by, or sponsored by Amazon Web Services.