{"id":15630986,"url":"https://github.com/iann0036/iam-dataset","last_synced_at":"2025-10-10T05:40:29.938Z","repository":{"id":37456929,"uuid":"334529137","full_name":"iann0036/iam-dataset","owner":"iann0036","description":"A consolidated series of structured data for cloud identity and access management systems, including datasets for AWS, Azure, and Google Cloud","archived":false,"fork":false,"pushed_at":"2025-10-05T15:12:41.000Z","size":690325,"stargazers_count":288,"open_issues_count":10,"forks_count":33,"subscribers_count":9,"default_branch":"main","last_synced_at":"2025-10-05T17:34:45.927Z","etag":null,"topics":["aws","aws-iam","azure-rbac","gcp-iam","iam","iam-actions","iamlive","sar","sdk-actions"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/iann0036.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"iann0036"}},"created_at":"2021-01-30T22:58:11.000Z","updated_at":"2025-10-05T15:12:49.000Z","dependencies_parsed_at":"2025-09-27T17:33:59.640Z","dependency_job_id":null,"html_url":"https://github.com/iann0036/iam-dataset","commit_stats":{"total_commits":1866,"total_committers":10,"mean_commits":186.6,"dds":"0.32422293676312974","last_synced_commit":"711391cf9b33f557a4038b9aa96a2907880375dd"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/iann0036/iam-dataset","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iann0036%2Fiam-dataset","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iann0036%2Fiam-dataset/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iann0036%2Fiam-dataset/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iann0036%2Fiam-dataset/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/iann0036","download_url":"https://codeload.github.com/iann0036/iam-dataset/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iann0036%2Fiam-dataset/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279002889,"owners_count":26083468,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-10T02:00:06.843Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","aws-iam","azure-rbac","gcp-iam","iam","iam-actions","iamlive","sar","sdk-actions"],"created_at":"2024-10-03T10:38:04.029Z","updated_at":"2025-10-10T05:40:29.917Z","avatar_url":"https://github.com/iann0036.png","language":"Python","funding_links":["https://github.com/sponsors/iann0036"],"categories":["Python"],"sub_categories":[],"readme":"# IAM Dataset\n\nA consolidated series of structured data for cloud identity and access management systems, including datasets for AWS, Azure, and Google Cloud.\n\nIt is currently being used to support:\n\n* [iamlive](https://github.com/iann0036/iamlive)\n* [iamfast](https://github.com/iann0036/iamfast)\n* [aws.permissions.cloud](https://aws.permissions.cloud)\n* [azure.permissions.cloud](https://azure.permissions.cloud)\n* [gcp.permissions.cloud](https://gcp.permissions.cloud)\n* [claws](https://clawsapp.com)\n* [LocalStack](https://discuss.localstack.cloud/t/localstack-release-v2-2-0/424#live-policy-streams-9)\n* [Access Undenied](https://github.com/ermetic/access-undenied-aws)\n* [Otterize](https://otterize.com/)\n\nTooling which assists in the generation of some datasources is located in the `util/` directory.\n\n## AWS\n\nFor Amazon Web Services IAM, the primary datasources are map.json and iam_definition.json.\n\n### map.json\n\nA comprehensive mapping from SDK calls to IAM actions, typically created with the assistance of the mapping tool.\n\nFor more information on this file, see [aws/MAP-README.md](aws/MAP-README.md).\n\n### iam_definition.json\n\nA scraping of the [AWS Service Authorization Reference](https://docs.aws.amazon.com/service-authorization/latest/reference/reference.html), the AWS-provided reference of known IAM actions. It is generated using work from [Parliament](https://github.com/duo-labs/parliament).\n\nThe file does have some post-crawl patching actions.\n\n### managedpolicies/_name_.json\n\nThe details of all AWS Managed Policies, including flags for whether the managed policy contains high sensitivity actions.\n\n## Azure\n\nFor Azure, the primary datasource is built-in-roles.json.\n\n### provider-operations.json\n\nThe direct output of the command `az provider operation list` which retrieves all operations from all providers.\n\n### built-in-roles-raw.json\n\nThe output of the command `az role definition list` with a query for all built-in roles.\n\n### built-in-roles.json\n\nThe aggregation of thr built-in roles and provider operations permitted by those built-in roles.\n\n## Google Cloud\n\nFor Google Cloud, the primary datasources are methods.json, permissions.json and role_permissions.json.\n\n### predefined_roles.json\n\nThe result of the command `gcloud iam roles list`, including deleted roles, showing all predefined roles.\n\n### map.json\n\nA map of IAM permissions required for each method. **[WORK IN PROGRESS]**\n\n### methods.json\n\nThe combination of the methods extracted from the Google Cloud Go SDK.\n\n### methods_ext.json\n\nSame as methods.json, but with parameter information.\n\n### permissions.json\n\nIAM Permissions as defined by the online [IAM permissions reference](https://cloud.google.com/iam/docs/permissions-reference).\n\n### role_permissions.json\n\nA mapping of each permission and the roles which the permission has, including whether the containment is undocumented per the IAM permission reference.\n\n### roles/_name_.json\n\nThe result of the command `gcloud iam roles describe \"$name\"` for all built-in roles.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fiann0036%2Fiam-dataset","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fiann0036%2Fiam-dataset","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fiann0036%2Fiam-dataset/lists"}