{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"Policy Sentry generates least-privilege AWS IAM policies from resource ARNs and access levels, automating the creation of security-scoped policies that would otherwise require manual AWS documentation review.","skillfed_tags":["aws-iam","policy-generation","security-automation"],"use_cases":["Generate least-privilege IAM policies for Lambda functions, EC2 roles, or service accounts by specifying only the resources and access levels needed.","Automate policy creation in CI/CD pipelines to enforce security standards without manual policy review bottlenecks.","Create CRUD-based policy templates for teams unfamiliar with AWS IAM action names and resource constraints.","Reduce policy blast radius in breach scenarios by ensuring roles have only the minimum permissions required.","Validate or regenerate existing IAM policies to ensure they follow least-privilege principles."],"what_it_does":"Policy Sentry is a command-line tool and Python library that generates AWS IAM policies by mapping resource ARNs and access levels (Read, Write, List, Tagging, Permissions Management) to the specific IAM actions that support them. Instead of manually reviewing AWS documentation and writing policy JSON, you describe what resources you need access to and at what level, and the tool outputs a complete, least-privilege policy statement. It maintains an internal database of AWS actions, their access levels, and supported resource types, then queries that database to produce policies scoped to exactly what you specify.\n\nThe tool is designed for infrastructure-as-code developers and security teams who want to enforce least-privilege principles without the tedium of hand-crafting policies. It supports both CLI workflows (create templates, fill in ARNs, generate policies) and Python library usage for programmatic policy generation. The package depends on click for CLI handling, beautifulsoup4 and requests for fetching AWS documentation, orjson for fast JSON serialization, pyyaml for template parsing, and schema for validation.","worth_installing":"Yes. Policy Sentry is actively maintained, has no known vulnerabilities, low install friction, and solves a real security problem\u2014automating least-privilege IAM policy generation. It's appropriate for teams that want to enforce security best practices without manual AWS documentation review. The MIT license and broad Python version support (3.10\u20133.14) make it suitable for most environments."},"id":"policy-sentry","links":{"html":"https://skillfed.io/packages/policy-sentry","md":"https://skillfed.io/packages/policy-sentry.md","pypi":"https://pypi.org/project/policy-sentry/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-04-14","license_spdx":"MIT","license_treatment":"permissive","name":"policy-sentry","python_support":"supports_current","summary":"Generate locked-down AWS IAM Policies"},"popularity":{"monthly_downloads":4637897,"position":2267,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"0.15.2"}