← Back to match
TrailScraper
Command-line tool to mine AWS CloudTrail logs and generate least-privilege IAM policies.
Desktopfree
TrailScraper is a command-line tool that reads AWS CloudTrail events and generates IAM policies from them, so a policy can be built from what an application actually did rather than guessed by hand. It can filter downloaded or API-fetched logs, extend an existing policy with likely related actions, and runs via pip, Homebrew, or Docker. It's aimed at cloud and DevOps engineers writing least-privilege AWS permissions.
Categories
Cloud SecurityAWS ToolsDeveloper Tools

