{"id":13821258,"url":"https://github.com/nemo-wq/AWS-IAM-Permissions-Scanner","last_synced_at":"2025-05-16T12:33:03.065Z","repository":{"id":217312219,"uuid":"140796221","full_name":"nemo-wq/AWS-IAM-Permissions-Scanner","owner":"nemo-wq","description":"AWS IAM User Permissions","archived":false,"fork":false,"pushed_at":"2019-09-28T12:40:57.000Z","size":6,"stargazers_count":20,"open_issues_count":0,"forks_count":2,"subscribers_count":2,"default_branch":"master","last_synced_at":"2024-11-19T21:36:00.530Z","etag":null,"topics":["aws","iam","iam-credentials","iam-policy","iam-role","iam-users"],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nemo-wq.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-07-13T04:18:15.000Z","updated_at":"2023-03-03T15:23:47.000Z","dependencies_parsed_at":null,"dependency_job_id":"cdb77964-3f4a-495d-8dcc-9f50b022536a","html_url":"https://github.com/nemo-wq/AWS-IAM-Permissions-Scanner","commit_stats":null,"previous_names":["nemo-wq/aws-iam-permissions-scanner"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nemo-wq%2FAWS-IAM-Permissions-Scanner","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nemo-wq%2FAWS-IAM-Permissions-Scanner/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nemo-wq%2FAWS-IAM-Permissions-Scanner/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nemo-wq%2FAWS-IAM-Permissions-Scanner/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nemo-wq","download_url":"https://codeload.github.com/nemo-wq/AWS-IAM-Permissions-Scanner/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254530639,"owners_count":22086651,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","iam","iam-credentials","iam-policy","iam-role","iam-users"],"created_at":"2024-08-04T08:01:18.762Z","updated_at":"2025-05-16T12:33:01.913Z","avatar_url":"https://github.com/nemo-wq.png","language":"Python","funding_links":[],"categories":["Python"],"sub_categories":[],"readme":"# AWS IAM Permissions Scan\n\nThis tool lists all policies assigned to all IAM users in your AWS account. Policies can be assigned to users via user policies or inherited by group memberships. \n\nRead only permissions to IAM in the AWS account being scanned are required. This can be achieved by assigning the SecurityAudit AWS Managed policy to the IAM user or role being used to run this scan. \n\nThere are existing tools that go through potential privilege escalation avenues due to excessive AWS permissions. This script therefore complements rather than replaces some of these tools, such as Rhino Security's [AWS Escalate](https://github.com/RhinoSecurityLabs/Security-Research/blob/master/tools/aws-pentest-tools/aws_escalate.py), NCC Group's [Scout2](https://github.com/nccgroup/Scout2), or [CloudSploit](https://github.com/cloudsploit).\n\n## Getting Started\n\nThis script requires Python 3\n\nInstall the AWS Python SDK and Dependencies. [Details](https://github.com/boto/boto3)\n\nInstall [Colorama](https://pypi.org/project/colorama/)\n\nThe requirements.txt file can be used to install the dependencies using pip3\n\n ```\n pip3 install -r requirements.txt\n ```\n\nFurther details can be found [here](https://aws.amazon.com/developers/getting-started/python/)\n\nSetup your AWS credentials. If you have awscli installed, running `aws configure` will prompt you for your AWS Access Key ID and your Secret Key, and create the `~/.aws/credentials` file. Alternatively, the `~/.aws/credentials` file can be configured as shown in the below example:\n\n```\n[default]\naws_access_key_id = AWS_KEY\naws_secret_access_key = AWS_SECRET\n```\n\nIf you need to assume an IAM role and then scan for assigned permissions, remind101's assume-role tool is very helpful, especially is you are required to provide MFA. [Link](https://github.com/remind101/assume-role)\n\n\n### Running\n\n```\npython ./aws_perms.py\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnemo-wq%2FAWS-IAM-Permissions-Scanner","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnemo-wq%2FAWS-IAM-Permissions-Scanner","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnemo-wq%2FAWS-IAM-Permissions-Scanner/lists"}