aws AWS What's New ·

IAM Policy Autopilot Now Supports Terraform Plan Files for Policy Generation

securityawsgaengineeraws-iam
feature

IAM Policy Autopilot now supports generating baseline IAM policies directly from Terraform plan files, enabling automatic policy creation for AWS infrastructure defined via Infrastructure as Code. This enhancement addresses a top user request, significantly reducing the manual effort of writing IAM policies and improving security by generating ARN-specific policies. The open-source tool applies deterministic analysis to produce policies scoped to the CRUD functions of resources within the plan. It complements existing Terraform-aware analysis and remains available at no additional cost, running on your own machine.

Features (1)
  • Generate IAM Policies from Terraform Plan Files

    IAM Policy Autopilot can now analyze Terraform plan files to generate deterministically scoped-down IAM policies for AWS infrastructure deployments. This capability, the most requested since the tool's launch, creates policies that reference specific resource ARNs rather than wildcards, enhancing security and streamlining IaC policy management.

Read the original announcement →

https://aws.amazon.com/about-aws/whats-new/2026/08/iam-policy-autopilot-now-supports-terraform-plan-files

Related releases