Solution
IAM & Policy Testing
Validate IAM / Cedar authorization locally — before it bites you in prod.
Exercise policies, roles and conditions against a real evaluator so authorization bugs surface in dev, not in production.
What you get
Real authorization
- AWS IAM JSON policies
- Cedar policy evaluation
- Roles, conditions & wildcards
- Explicit-deny-wins semantics
- Group-inherited permissions
Test before prod
- SimulatePrincipalPolicy locally
- Catch authz bugs in dev, not prod
- Write policy unit tests
- Least-privilege verification
- Deny-by-default enforcement
Faithful evaluator
- Pure-Python policy engine
- Condition-key evaluation
- Principal / resource scoping
- Matches real cloud semantics
- No false greens