IAM Policy Autopilot: An open-source tool that brings IAM policy expertise to builders and AI coding assistants

AWS introduces IAM Policy Autopilot, an open-source static analysis tool and MCP server/CLI that scans Python, Go, and TypeScript application code to deterministically map AWS SDK calls to IAM identity-based policies, automatically handle cross-service dependencies (e.g., s3:PutObject with KMS permissions), and troubleshoot Access Denied errors; it integrates with AI coding assistants (e.g., Cline, Claude Code, Amazon Q Developer, Cursor) to generate baseline policies during development, and provides best practices, limitations, and workflow integration guidance to accelerate secure deployments on AWS.