CLOUD SECURITY
AWS IAM Least-Privilege Audit & Remediation Engine
Overview
What this project is.
Python-based tooling using Boto3 and IAM Access Analyzer to programmatically audit IAM policies across an AWS organization. Detects over-permissioned roles, generates scoped-down policy recommendations, and produces before/after comparison reports with risk severity scoring.
Problem
Why this matters.
Over-permissioned IAM roles are the #1 cloud misconfiguration. Most orgs don't know which policies are too broad until they get breached.
Architecture
How it's built.
- Python + Boto3 to enumerate IAM roles, policies, unused permissions
- IAM Access Analyzer integration for external access findings
- Automated before/after policy comparison with risk severity scoring
- Lambda-based weekly scheduled audit with report generation
- Scoped-down policy recommendations per role
Tools
Tech stack.
PythonBoto3IAM Access AnalyzerAWS CLILambda
Impact
Results.
Automated detection of IAM policy drift and excessive permissions across 50+ roles
Presentation
How to showcase this.
Show sample audit report. Display before/after policy comparison. Include Lambda architecture.