IAMTrail
UnofficialAWS silently updates Managed IAM policies all the time.
We catch every single change.
Full version history and diffs for 1639 AWS Managed IAM Policies, archived since 2019. | A service by zoph.io
Total Policies
1,639
Active AWS Managed Policies
Brand New (v1)
58
New AWS services/features
Deprecated
76
Removed from AWS
Most Active
110
ReadOnlyAccess...
Latest Changes
What AWS changed most recently, and exactly which actions moved
6 actions added
today
d4f3c912 actions added
today
8bdcdf65 actions added
today
9543aae5 actions added
today
c0621105 actions added
today
25430cf9 actions added
yesterday
92fa1eeBrand New Policies (v1)
Spot upcoming AWS services early - 58 new policies detected
Get notified when policies change
Daily or weekly email digests with inline diffs. Pick specific policies or track them all.
Endpoint Signals
46 regions, 307 services tracked from botocore
osiseu-west-3awscassandraca-west-1awsPolicy Creation by Year
Number of AWS managed policies first tracked each year
Largest Policy
4385 actions
AWSSupportServiceRolePoli...
AWS Services Tracked
447
IAM service namespaces over time
IAM Actions (literals)
15,135
Distinct action strings in managed policies (no wildcards)
Year-over-Year Velocity
Total policy commits per year - new launches vs. updates
Excludes 4 bulk-reformat day(s) where detection logic changes caused false-positive diffs.
Policy Lifecycle
Current version distribution across all policies
40% of policies (657) are still at v1 - created once and never updated.
Monthly Seasonality
Policy change volume by calendar month across all years
re:Invent Pulse
Policy changes during the Nov 15 - Dec 15 window each year
Recently Updated
AWSSupplyChainFederationAdminAccess
AWSManagedSettingsAdminAccess
AmazonVPCNetworkAccessAnalyzerFullAccessPolicy
AmazonVPCReachabilityAnalyzerFullAccessPolicy
AWSReachabilityAnalyzerServiceRolePolicy
AWSBudgetsSpendLimitMemberRolePolicy
AWSCertificateManagerReadOnly
SageMakerStudioUserIAMDefaultExecutionPolicy
SageMakerStudioUserIAMPermissiveExecutionPolicy
AWSWellArchitectedAgentResourceScanningServiceRolePolicy
Most Volatile (Trailing 12 Months)
Newest Policies
AWSSupplyChainFederationAdminAccess
AWSManagedSettingsAdminAccess
AmazonVPCNetworkAccessAnalyzerFullAccessPolicy
AWSReachabilityAnalyzerServiceRolePolicy
AmazonVPCReachabilityAnalyzerFullAccessPolicy
AWSBudgetsSpendLimitMemberRolePolicy
SageMakerStudioUserIAMDefaultExecutionPolicy
SageMakerStudioUserIAMPermissiveExecutionPolicy
AWSCertificateManagerReadOnly
AWSWellArchitectedAgentResourceScanningServiceRolePolicy
Oldest Policies
AWSOpsWorksRegisterCLI
AmazonMachineLearningRoleforRedshiftDataSource
TagGovernancePolicy
AWSLambdaReplicatorInternal
AmazonEverestServicePolicy
AWSB9InternalServicePolicy
AWSBackupAdminPolicy
AWSBackupOperatorPolicy
AWSCloudTrailFullAccess
AWSDataPipelineRole