☁️ AWS IAM Policy Generator

100% Client-Side
⚡ Quick Policy Presets
Policy Settings
Add Statement
Effect
Allow Deny
Active Statements
Generated JSON Policy

AWS IAM Policy & S3 Bucket Policy Generator Guide

An AWS IAM Policy is a JSON document that explicitly declares permissions (Actions), targets (Resources), and outcomes (Allow/Deny) within Amazon Web Services. This tool generates syntactically valid and principle-of-least-privilege compliant IAM identity policies and resource-based S3 bucket policies.

S3 Bucket Policy vs IAM Policy — Key Differences

Feature IAM Identity-Based Policy S3 Resource-Based (Bucket) Policy
Attached to IAM User, Group, or Role Directly to the S3 Bucket
Principal Element Not required (implicit) Mandatory (e.g. "Principal": "*")
Cross-Account Access Requires delegation role Can grant direct access to external AWS Accounts

Common IAM Permission Patterns

  • S3 Read-Only: s3:GetObject, s3:ListBucket on arn:aws:s3:::my-bucket/*
  • EC2 Read Operations: ec2:DescribeInstances, ec2:DescribeSecurityGroups on *
  • AWS Lambda Execution: lambda:InvokeFunction on arn:aws:lambda:us-east-1:123456789012:function:my-function