Policy Sentry IAM Least Privilege Policy Generator

Repository documenting common techniques to bypass AppLocker with verified, unverified, and generic bypasses.

Policy Sentry IAM Least Privilege Policy Generator Step 1: Create the Template Step 2: Copy and paste ARNs Step 3: Execute the write-policy command Tutorial Installation: - Package managers - Shell completion Step 1: Create the Template Step 2: Copy and paste ARNs Step 3: Execute the write-policy command Cheat Sheets: - Policy Writing Cheat Sheet - IAM Database Query Cheat Sheet Local Initialization (Optional) Other Usage Commands: - Python Library usage - Docker - Terraform References: - Documentation

For detailed walkthroughs and comprehensive documentation, please check out the project on ReadTheDocs. Additionally, you can refer to the Salesforce Engineering Blog post on Policy Sentry.

Overview Writing security-conscious IAM Policies by hand can be a tedious and inefficient process. Many Infrastructure as Code developers have faced similar challenges: you are committed to providing users and roles with the least amount of privilege necessary to perform their duties, yet you find yourself spending excessive time sifting through the AWS IAM Documentation on Actions, Resources, and Condition Keys for AWS Services. Your team lead emphasizes the importance of incorporating security into your IAM Policies to enhance product quality, but as project deadlines loom, frustration sets in. Unfortunately, you lack an embedded security expert on your team who can assist with writing those IAM Policies.