Policy Validator AWS

The tool performs static analysis on AWS IAM policy JSON to identify structural and semantic issues before deployment. It parses input, validates required fields (Version, Statement), and checks that each Statement contains the expected keys (Effect, Action/NotAction, Resource/NotResource). It flags overly broad permissions, missing Principals where required, and inconsistent use of NotAction versus Action. The analysis yields a structured set of findings organized by severity, with concrete remediation guidance, such as scoping actions, refining Resource ARNs, or adding constraints in Condition blocks. Conceptually, structural validation separates JSON correctness from policy-language semantics, enabling clear, actionable feedback while avoiding runtime execution. The tool also surfaces potential cross-account exposure signals and provides a summarized risk view suitable for reviewers. Unique value comes from domain-aware checks specific to IAM policy syntax and common misconfigurations, enabling faster, repeatable audits in code reviews and CI pipelines. Use cases include pre-commit policy checks in repositories, security gate checks during CI, and policy reviews during architecture planning. Core features include JSON parsing, structural validation, semantic checks, risk scoring, and exportable findings; output formats are designed to integrate with development tooling and security dashboards.