{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/3"}],"enrichment":{"capability":"Expands and deobfuscates AWS IAM action patterns, resolving wildcards and inverting action sets to reveal the concrete permissions they represent.","skillfed_tags":["aws-iam","policy-analysis","security-audit"],"use_cases":["Audit IAM policies to see the full set of S3, EC2, or other service actions granted by wildcard patterns.","Invert action patterns to identify which actions are explicitly excluded by a NotAction statement.","Process JSON IAM policy documents to expand all wildcards and produce a fully resolved policy for compliance review.","Detect obfuscated or malformed IAM actions in policies and decide whether to flag, remove, or keep them.","Integrate policy analysis into CI/CD pipelines to validate that IAM policies grant only intended permissions."],"what_it_does":"py-iam-expand is a command-line and library tool for analyzing AWS IAM policies by expanding wildcard patterns in action statements. It resolves patterns like `s3:Get*` or `ec2:Describe*` into their full list of concrete IAM actions, and can invert patterns to find actions that do not match specified criteria. The tool also removes obfuscation characters from policies and handles invalid actions according to your preference (raise error, remove silently, or keep them).\n\nThe package wraps the iamdata library to access authoritative AWS IAM action definitions. It works both as a CLI tool (reading action patterns or JSON policy documents from arguments or stdin) and as a Python library for programmatic use. It's designed to help security teams and developers understand what permissions a policy actually grants when wildcards or obfuscation are involved.","worth_installing":"Yes. The package solves a real problem in AWS security analysis with low install friction, active maintenance, permissive licensing, and no known vulnerabilities. It's most valuable if you regularly audit IAM policies or need to understand what permissions wildcards actually grant; less critical if you only work with fully enumerated actions."},"id":"py-iam-expand","links":{"html":"https://skillfed.io/packages/py-iam-expand","md":"https://skillfed.io/packages/py-iam-expand.md","pypi":"https://pypi.org/project/py-iam-expand/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-02-24","license_spdx":null,"license_treatment":"permissive","name":"py-iam-expand","python_support":"supports_current","summary":"This is a Python package to expand and deobfuscate IAM policies."},"popularity":{"monthly_downloads":118609,"position":12112,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.3.0"}