{"id":13602693,"url":"https://github.com/mjgpy3/iam-dhall","last_synced_at":"2025-12-30T05:42:29.923Z","repository":{"id":44879888,"uuid":"236866157","full_name":"mjgpy3/iam-dhall","owner":"mjgpy3","description":"Create IAM policies using dhall","archived":false,"fork":false,"pushed_at":"2022-01-20T23:43:50.000Z","size":12,"stargazers_count":9,"open_issues_count":2,"forks_count":2,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-11-07T05:39:50.730Z","etag":null,"topics":["aws","dhall","iam","iam-policies","iam-policy"],"latest_commit_sha":null,"homepage":null,"language":"Dhall","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mjgpy3.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-01-28T23:35:26.000Z","updated_at":"2023-12-11T10:45:22.000Z","dependencies_parsed_at":"2022-09-24T22:51:38.287Z","dependency_job_id":null,"html_url":"https://github.com/mjgpy3/iam-dhall","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mjgpy3%2Fiam-dhall","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mjgpy3%2Fiam-dhall/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mjgpy3%2Fiam-dhall/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mjgpy3%2Fiam-dhall/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mjgpy3","download_url":"https://codeload.github.com/mjgpy3/iam-dhall/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248368185,"owners_count":21092314,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","dhall","iam","iam-policies","iam-policy"],"created_at":"2024-08-01T18:01:34.056Z","updated_at":"2025-12-30T05:42:29.897Z","avatar_url":"https://github.com/mjgpy3.png","language":"Dhall","funding_links":[],"categories":["aws"],"sub_categories":[],"readme":"# iam-dhall\nCreate IAM policies using [dhall][dhall].\n\n## Usage\n\nThese dhall files were tested using `dhall-to-json` version `1.6.1` though I\nexpect them to be compatible with other versions of the tool.\n\nSee the [examples](./examples) for usage examples.\n\n## Why?\n\nWith all the nitty-gritty little services in AWS and their interdependence,\ncreating IAM policies correctly (and maintaining them) can become quite\ndaunting. This gets increasingly difficult in highly sensitive areas, e.g.\nhealthcare, national defense, etc... where components are generally expected to\nabide by the [principle of least privilege][polp].\n\nBut these are not the only challenges provided by IAM policies\n\n - many policy errors don't surface until the policy is actually created (or,\n heaven forbid, during run-time) and JSON doesn't help to illuminate some of the\n easier-to-detect configuration errors\n - JSON is inherently schema-less though IAM policies actually have a schema,\n albeit a simple one\n - JSON doesn't compose or express dependencies without bolting on another\n programming language or nesting a wacky, unnatural DSL (again requiring another\n language for interpretation)\n \nI believe that [dhall][dhall] speaks to each of these issues.\n\n  [dhall]: https://dhall-lang.org/\n  [polp]: https://en.wikipedia.org/wiki/Principle_of_least_privilege\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmjgpy3%2Fiam-dhall","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmjgpy3%2Fiam-dhall","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmjgpy3%2Fiam-dhall/lists"}