Aws-iam-managed-policies NPM

aws-iam-managed-policies

Automatically populated (every morning at 6AM UTC) repository of AWS IAM Managed Policies, which also updates a npm package containing the full history of AWS IAM Managed Policies.

Data

The raw IAM Managed Policies data can be found in the data/json directory. It is categorized by Managed Policy name and version id.

Installation

You can install the npm package like this:

npm i --save aws-iam-managed-policies

API Docs

The API docs can be found at https://tobilg.github.io/aws-iam-managed-policies.

Usage examples

const { 
  getPolicyCount,
  listPolicies,
  getPolicyByName,
  getLatestPolicyDocument,
  getPolicyDocumentByVersion,
  getPolicyDiffByVersions
} = require('aws-iam-managed-policies');

Get the number of Managed Policies

console.log(getPolicyCount());
/*
1117
*/

Get the first 10 policy names

console.log(listPolicies().filter((p, i) => i <= 9));
/*
[
  "APIGatewayServiceRolePolicy",
  "AWSAccountActivityAccess",
  "AWSAccountManagementFullAccess",
  "AWSAccountManagementReadOnlyAccess",
  "AWSAccountUsageReportAccess",
  "AWSAgentlessDiscoveryService",
  "AWSAppFabricFullAccess",
  "AWSAppFabricReadOnlyAccess",
  "AWSAppFabricServiceRolePolicy",
  "AWSAppMeshEnvoyAccess"
]
*/

Get policy by name 'AdministratorAccess'

console.log(getPolicyByName('AdministratorAccess'));
/*
{
  "arn": "arn:aws:iam::aws:policy/AdministratorAccess",
  "latestVersionId": "v1",
  "versionsCount": 1,
  "versions": {
    "v1": {
      "createdDate": "2015-02-06T18:39:46.000Z",
      "document": {
        "Version": "2012-10-17",
        "Statement": [
          {
            "Effect": "Allow",
            "Action": "*",
            "Resource": "*"
          }
        ]
      }
    }
  },
  "createdDate": "2015-02-06T18:39:46.000Z",
  "lastUpdatedDate": "2015-02-06T18:39:46.000Z"
}
*/

Get latest policy document for policy 'AdministratorAccess'

console.log(getLatestPolicyDocument('AdministratorAccess'));
/*
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "*",
      "Resource": "*"
    }
  ]
}
*/

Get version '5' policy document for policy 'ViewOnlyAccess'

console.log(getPolicyDocumentByVersion('ViewOnlyAccess', 5));
/*
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "acm:ListCertificates",
        "athena:List*",
        "aws-marketplace:ViewSubscriptions",
        "autoscaling:Describe*",
        "batch:ListJobs",
        "clouddirectory:ListAppliedSchemaArns",
        "clouddirectory:ListDevelopmentSchemaArns",
        "clouddirectory:ListDirectories",
        "clouddirectory:ListPublishedSchemaArns",
        "cloudformation:List*",
        "cloudformation:DescribeStacks",
        "cloudfront:List*",
        "cloudhsm:ListAvailableZones",
        "cloudhsm:ListLunaClients",
        "cloudhsm:ListHapgs",
        "cloudhsm:ListHsms",
        "cloudsearch:List*",
        "cloudsearch:DescribeDomains",
        "cloudtrail:DescribeTrails",
        "cloudtrail:LookupEvents",
        "cloudwatch:List*",
        "cloudwatch:GetMetricData",
        "codebuild:ListBuilds*",
        "codebuild:ListProjects",
        "codecommit:List*",
        "codedeploy:List*",
        "codedeploy:Get*",
        "codepipeline:ListPipelines",
        "codestar:List*",
        "codestar:Verify*",
        "cognito-idp:List*",
        "cognito-identity:ListIdentities",
        "cognito-identity:ListIdentityPools",
        "cognito-sync:ListDatasets",
        "connect:List*",
        "config:List*",
        "config:Describe*",
        "datapipeline:ListPipelines",
        "datapipeline:DescribePipelines",
        "datapipeline:GetAccountLimits",
        "devicefarm:List*",
        "directconnect:Describe*",
        "discovery:List*",
        "dms:List*",
        "ds:DescribeDirectories",
        "dynamodb:ListTables",
        "ec2:DescribeAccountAttributes",
        "ec2:DescribeAddresses",
        "ec2:DescribeAvailabilityZones",
        "ec2:DescribeBundleTasks",
        "ec2:DescribeClassicLinkInstances",
        "ec2:DescribeConversionTasks",
        "ec2:DescribeCustomerGateways",
        "ec2:DescribeDhcpOptions",
        "ec2:DescribeExportTasks",
        "ec2:DescribeFlowLogs",
        "ec2:DescribeHost*",
        "ec2:DescribeIdentityIdFormat",
        "ec2:DescribeIdFormat",
        "ec2:DescribeImage*",
        "ec2:DescribeImport*",
        "ec2:DescribeInstance*",
        "ec2:DescribeInternetGateways",
        "ec2:DescribeKeyPairs",
        "ec2:DescribeMovingAddresses",
        "ec2:DescribeNatGateways",
        "ec2:DescribeNetwork*",
        "ec2:DescribePlacementGroups",
        "ec2:DescribePrefixLists",
        "ec2:DescribeRegions",
        "ec2:DescribeReserved*",
        "ec2:DescribeRouteTables",
        "ec2:DescribeSecurityGroups",
        "ec2:DescribeSnapshot*",
        "ec2:DescribeSpot*",
        "ec2:DescribeSubnets",
        "ec2:DescribeVolume*",
        "ec2:DescribeVpc*",
        "ec2:DescribeVpnGateways",
        "ecr:DescribeRepositories",
        "ecr:ListImages",
        "ecs:List*",
        "ecs:Describe*",
        "elasticache:Describe*",
        "elasticbeanstalk:DescribeApplicationVersions",
        "elasticbeanstalk:DescribeApplications",
        "elasticbeanstalk:DescribeEnvironments",
        "elasticbeanstalk:ListAvailableSolutionStacks",
        "elasticloadbalancing:DescribeListeners",
        "elasticloadbalancing:DescribeLoadBalancers",
        "elasticloadbalancing:DescribeTargetGroups",
        "elasticloadbalancing:DescribeTargetHealth",
        "elasticfilesystem:DescribeFileSystems",
        "elasticmapreduce:List*",
        "elastictranscoder:List*",
        "es:DescribeElasticsearchDomain",
        "es:DescribeElasticsearchDomains",
        "es:ListDomainNames",
        "events:ListRuleNamesByTarget",
        "events:ListRules",
        "events:ListTargetsByRule",
        "firehose:List*",
        "firehose:DescribeDeliveryStream",
        "gamelift:List*",
        "glacier:List*",
        "iam:List*",
        "iam:GetAccountSummary",
        "iam:GetLoginProfile",
        "importexport:ListJobs",
        "inspector:List*",
        "iot:List*",
        "kinesis:ListStreams",
        "kinesisanalytics:ListApplications",
        "kms:ListKeys",
        "lambda:List*",
        "lex:GetBotAliases",
        "lex:GetBotChannelAssociations",
        "lex:GetBots",
        "lex:GetBotVersions",
        "lex:GetIntents",
        "lex:GetIntentVersions",
        "lex:GetSlotTypes",
        "lex:GetSlotTypeVersions",
        "lex:GetUtterancesView",
        "lightsail:GetBlueprints",
        "lightsail:GetBundles",
        "lightsail:GetInstances",
        "lightsail:GetInstanceSnapshots",
        "lightsail:GetKeyPair",
        "lightsail:GetRegions",
        "lightsail:GetStaticIps",
        "lightsail:IsVpcPeered",
        "logs:Describe*",
        "machinelearning:Describe*",
        "mobilehub:ListAvailableFeatures",
        "mobilehub:ListAvailableRegions",
        "mobilehub:ListProjects",
        "opsworks:Describe*",
        "opsworks-cm:Describe*",
        "organizations:List*",
        "mobiletargeting:GetApplicationSettings",
        "mobiletargeting:GetCampaigns",
        "mobiletargeting:GetImportJobs",
        "mobiletargeting:GetSegments",
        "polly:Describe*",
        "polly:List*",
        "rds:Describe*",
        "redshift:DescribeClusters",
        "redshift:DescribeEvents",
        "redshift:ViewQueriesInConsole",
        "route53:List*",
        "route53:Get*",
        "route53domains:List*",
        "s3:ListAllMyBuckets",
        "s3:ListBucket",
        "sagemaker:Describe*",
        "sagemaker:List*",
        "sdb:List*",
        "servicecatalog:List*",
        "ses:List*",
        "shield:List*",
        "states:ListActivities",
        "states:ListStateMachines",
        "sns:List*",
        "sqs:ListQueues",
        "ssm:ListAssociations",
        "ssm:ListDocuments",
        "storagegateway:ListGateways",
        "storagegateway:ListLocalDisks",
        "storagegateway:ListVolumeRecoveryPoints",
        "storagegateway:ListVolumes",
        "swf:List*",
        "trustedadvisor:Describe*",
        "waf:List*",
        "waf-regional:List*",
        "workdocs:DescribeAvailableDirectories",
        "workdocs:DescribeInstances",
        "workmail:Describe*",
        "workspaces:Describe*"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}
*/

Get a version comparison of versions '5' and '17' policy document for policy 'ViewOnlyAccess'

console.log(getPolicyDiffByVersions('ViewOnlyAccess', 5, 17));
/*
{
  "added": {
    "Statement": {
      "0": {
        "Action": {
          "179": "mediaconnect:ListReservations",
          "180": "mobiletargeting:GetApplicationSettings",
          "181": "mobiletargeting:GetCampaigns",
          "182": "mobiletargeting:GetImportJobs",
          "183": "mobiletargeting:GetSegments",
          "184": "opsworks-cm:Describe*",
          "185": "opsworks:Describe*",
          "186": "organizations:List*",
          "187": "outposts:GetOutpost",
          "188": "outposts:GetOutpostInstanceTypes",
          "189": "outposts:ListOutposts",
          "190": "outposts:ListSites",
          "191": "outposts:ListTagsForResource",
          "192": "polly:Describe*",
          "193": "polly:List*",
          "194": "rds:Describe*",
          "195": "redshift:DescribeClusters",
          "196": "redshift:DescribeEvents",
          "197": "redshift:ViewQueriesInConsole",
          "198": "resource-explorer-2:GetDefaultView",
          "199": "resource-explorer-2:GetIndex",
          "200": "resource-explorer-2:ListIndexes",
          "201": "resource-explorer-2:ListSupportedResourceTypes",
          "202": "resource-explorer-2:ListTagsForResource",
          "203": "resource-explorer-2:ListViews",
          "204": "route53:Get*",
          "205": "route53:List*",
          "206": "route53domains:List*",
          "207": "route53resolver:Get*",
          "208": "route53resolver:List*",
          "209": "s3:ListAllMyBuckets",
          "210": "s3:ListBucket",
          "211": "sagemaker:Describe*",
          "212": "sagemaker:List*",
          "213": "sdb:List*",
          "214": "servicecatalog:List*",
          "215": "ses:List*",
          "216": "shield:List*",
          "217": "sns:List*",
          "218": "sqs:ListQueues",
          "219": "ssm:ListAssociations",
          "220": "ssm:ListDocuments",
          "221": "states:ListActivities",
          "222": "states:ListStateMachines",
          "223": "storagegateway:ListGateways",
          "224": "storagegateway:ListLocalDisks",
          "225": "storagegateway:ListVolumeRecoveryPoints",
          "226": "storagegateway:ListVolumes",
          "227": "swf:List*",
          "228": "trustedadvisor:Describe*",
          "229": "waf-regional:List*",
          "230": "waf:List*",
          "231": "wafv2:List*",
          "232": "workdocs:DescribeAvailableDirectories",
          "233": "workdocs:DescribeInstances",
          "234": "workmail:Describe*",
          "235": "workspaces:Describe*"
        }
      }
    }
  },
  "deleted": {},
  "updated": {
    "Statement": {
      "0": {
        "Action": {
          "2": "autoscaling:Describe*",
          "3": "aws-marketplace:ViewSubscriptions",
          "9": "cloudformation:DescribeStacks",
          "10": "cloudformation:List*",
          "13": "cloudhsm:ListHapgs",
          "14": "cloudhsm:ListHsms",
          "15": "cloudhsm:ListLunaClients",
          "16": "cloudsearch:DescribeDomains",
          "17": "cloudsearch:List*",
          "20": "cloudwatch:Get*",
          "21": "cloudwatch:List*",
          "25": "codedeploy:Get*",
          "26": "codedeploy:List*",
          "29": "cognito-identity:ListIdentities",
          "30": "cognito-identity:ListIdentityPools",
          "31": "cognito-idp:List*",
          "32": "cognito-sync:ListDatasets",
          "33": "config:Describe*",
          "34": "config:List*",
          "35": "connect:List*",
          "36": "comprehend:Describe*",
          "37": "comprehend:List*",
          "40": "datapipeline:ListPipelines",
          "41": "dax:DescribeClusters",
          "42": "dax:DescribeDefaultParameters",
          "43": "dax:DescribeEvents",
          "44": "dax:DescribeParameterGroups",
          "45": "dax:DescribeParameters",
          "46": "dax:DescribeSubnetGroups",
          "47": "dax:ListTags",
          "48": "devicefarm:List*",
          "49": "directconnect:Describe*",
          "50": "discovery:List*",
          "51": "dms:List*",
          "52": "ds:DescribeDirectories",
          "53": "dynamodb:DescribeBackup",
          "54": "dynamodb:DescribeContinuousBackups",
          "55": "dynamodb:DescribeGlobalTable",
          "56": "dynamodb:DescribeGlobalTableSettings",
          "57": "dynamodb:DescribeLimits",
          "58": "dynamodb:DescribeReservedCapacity",
          "59": "dynamodb:DescribeReservedCapacityOfferings",
          "60": "dynamodb:DescribeStream",
          "61": "dynamodb:DescribeTable",
          "62": "dynamodb:DescribeTimeToLive",
          "63": "dynamodb:ListBackups",
          "64": "dynamodb:ListGlobalTables",
          "65": "dynamodb:ListStreams",
          "66": "dynamodb:ListTables",
          "67": "dynamodb:ListTagsOfResource",
          "68": "ec2:DescribeAccountAttributes",
          "69": "ec2:DescribeAddresses",
          "70": "ec2:DescribeAvailabilityZones",
          "71": "ec2:DescribeBundleTasks",
          "72": "ec2:DescribeCarrierGateways",
          "73": "ec2:DescribeClassicLinkInstances",
          "74": "ec2:DescribeConversionTasks",
          "75": "ec2:DescribeCustomerGateways",
          "76": "ec2:DescribeDhcpOptions",
          "77": "ec2:DescribeExportTasks",
          "78": "ec2:DescribeFlowLogs",
          "79": "ec2:DescribeHost*",
          "80": "ec2:DescribeIdFormat",
          "81": "ec2:DescribeIdentityIdFormat",
          "82": "ec2:DescribeImage*",
          "83": "ec2:DescribeImport*",
          "84": "ec2:DescribeInstance*",
          "85": "ec2:DescribeInternetGateways",
          "86": "ec2:DescribeKeyPairs",
          "87": "ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations",
          "88": "ec2:DescribeLocalGatewayRouteTableVpcAssociations",
          "89": "ec2:DescribeLocalGatewayRouteTables",
          "90": "ec2:DescribeLocalGatewayVirtualInterfaceGroups",
          "91": "ec2:DescribeLocalGatewayVirtualInterfaces",
          "92": "ec2:DescribeLocalGateways",
          "93": "ec2:DescribeMovingAddresses",
          "94": "ec2:DescribeNatGateways",
          "95": "ec2:DescribeNetwork*",
          "96": "ec2:DescribePlacementGroups",
          "97": "ec2:DescribePrefixLists",
          "98": "ec2:DescribeRegions",
          "99": "ec2:DescribeReserved*",
          "100": "ec2:DescribeRouteTables",
          "101": "ec2:DescribeSecurityGroupRules",
          "102": "ec2:DescribeSecurityGroups",
          "103": "ec2:DescribeSnapshot*",
          "104": "ec2:DescribeSpot*",
          "105": "ec2:DescribeSubnets",
          "106": "ec2:DescribeTags",
          "107": "ec2:DescribeVolume*",
          "108": "ec2:DescribeVpc*",
          "109": "ec2:DescribeVpnGateways",
          "110": "ec2:SearchLocalGatewayRoutes",
          "111": "ecr:DescribeRepositories",
          "112": "ecr:ListImages",
          "113": "ecs:Describe*",
          "114": "ecs:List*",
          "115": "elastic-inference:DescribeAccelerators",
          "116": "elastic-inference:DescribeAcceleratorTypes",
          "117": "elastic-inference:DescribeAcceleratorOfferings",
          "118": "elastic-inference:ListTagsForResource",
          "119": "elasticache:Describe*",
          "120": "elasticbeanstalk:DescribeApplicationVersions",
          "121": "elasticbeanstalk:DescribeApplications",
          "122": "elasticbeanstalk:DescribeEnvironments",
          "123": "elasticbeanstalk:ListAvailableSolutionStacks",
          "124": "elasticfilesystem:DescribeFileSystems",
          "125": "elasticloadbalancing:DescribeInstanceHealth",
          "126": "elasticloadbalancing:DescribeListeners",
          "127": "elasticloadbalancing:DescribeLoadBalancers",
          "128": "elasticloadbalancing:DescribeTargetGroups",
          "129": "elasticloadbalancing:DescribeTargetHealth",
          "130": "elasticmapreduce:List*",
          "131": "elastictranscoder:List*",
          "132": "es:DescribeElasticsearchDomain",
          "133": "es:DescribeElasticsearchDomains",
          "134": "es:ListDomainNames",
          "135": "events:ListRuleNamesByTarget",
          "136": "events:ListRules",
          "137": "events:ListTargetsByRule",
          "138": "firehose:DescribeDeliveryStream",
          "139": "firehose:List*",
          "140": "fsx:DescribeFileSystems",
          "141": "gamelift:List*",
          "142": "glacier:List*",
          "143": "greengrass:List*",
          "144": "iam:GetAccountSummary",
          "145": "iam:GetLoginProfile",
          "146": "iam:List*",
          "147": "importexport:ListJobs",
          "148": "inspector:List*",
          "149": "iot:List*",
          "150": "kinesis:ListStreams",
          "151": "kinesisanalytics:ListApplications",
          "152": "kms:ListKeys",
          "153": "lambda:List*",
          "154": "lex:GetBotAliases",
          "155": "lex:GetBotChannelAssociations",
          "156": "lex:GetBotVersions",
          "157": "lex:GetBots",
          "158": "lex:GetIntentVersions",
          "159": "lex:GetIntents",
          "160": "lex:GetSlotTypeVersions",
          "161": "lex:GetSlotTypes",
          "162": "lex:GetUtterancesView",
          "163": "lightsail:GetBlueprints",
          "164": "lightsail:GetBundles",
          "165": "lightsail:GetInstanceSnapshots",
          "166": "lightsail:GetInstances",
          "167": "lightsail:GetKeyPair",
          "168": "lightsail:GetRegions",
          "169": "lightsail:GetStaticIps",
          "170": "lightsail:IsVpcPeered",
          "171": "logs:Describe*",
          "172": "lookoutvision:ListModelPackagingJobs",
          "173": "lookoutvision:ListModels",
          "174": "lookoutvision:ListProjects",
          "175": "machinelearning:Describe*",
          "176": "mediaconnect:ListEntitlements",
          "177": "mediaconnect:ListFlows",
          "178": "mediaconnect:ListOfferings"
        }
      }
    }
  }
}
*/