{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"Parses and analyzes AWS IAM and Resource Policies, extracts principals and conditions, detects internet accessibility, and expands or minifies policy wildcards.","skillfed_tags":["aws-iam","policy-analysis","security-audit"],"use_cases":["Audit IAM policies for internet accessibility and overly permissive principal grants in automated security scanning.","Expand wildcard actions in policies to enumerate exactly which permissions are granted for compliance reporting.","Parse and categorize policy actions by type (Read, Write, Permissions, Tagging, List) to summarize policy impact.","Extract principals, accounts, VPCs, and IP ranges from policy conditions for access control analysis.","Minify large policies to stay within AWS policy size limits when consolidating multiple statements."],"what_it_does":"PolicyUniverse is a Python library for parsing, analyzing, and transforming AWS IAM and Resource Policies. It provides classes to extract and inspect policy components\u2014principals, actions, resources, and conditions\u2014and includes utilities to detect whether a policy is internet-accessible, expand wildcard actions to their full permission sets, and minify policies to reduce their size. The package ships with a built-in permissions dataset from the AWS Policy Generator.\n\nIt is primarily used by security teams and infrastructure auditors to understand and validate IAM policies programmatically. Common tasks include checking whether a policy grants unintended public access, categorizing actions by type (Read, Write, Permissions, etc.), and expanding wildcards like `s3:*` into their constituent permissions for detailed analysis. The library has no external runtime dependencies, making it lightweight to integrate into automation and compliance tools.","worth_installing":"Yes, if you need to parse and analyze AWS IAM policies programmatically. The package is lightweight, has no dependencies, and covers the core use cases of policy inspection and wildcard expansion well. However, note the dormant maintenance status\u2014last release was 988 days ago\u2014so verify compatibility with your AWS policy version and consider whether you need active support before adopting it for critical compliance workflows."},"id":"policyuniverse","links":{"html":"https://skillfed.io/packages/policyuniverse","md":"https://skillfed.io/packages/policyuniverse.md","pypi":"https://pypi.org/project/policyuniverse/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2023-11-30","license_spdx":null,"license_treatment":"permissive","name":"policyuniverse","python_support":"supports_current","summary":"Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards."},"popularity":{"monthly_downloads":519870,"position":6214,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.5.1.20231109"}
