policy_sentry を Homebrew でインストール

プロジェクトリンク

• ホームページ
• リポジトリ
• パッケージマネージャページ

コマンドとエイリアス

• policy_sentry

プロジェクトの歴史

Policy Sentry was created to reduce the manual work required to write tightly scoped AWS IAM policies. It derives IAM knowledge from authoritative AWS documentation and generates policies from requested access levels, actions, and resource ARNs.

採用の歴史

Salesforce maintains Policy Sentry as an open-source CLI and Python library. Its official documentation covers package installation, Docker use, Terraform-derived input, and library integration; the supplied package facts also record Homebrew distribution.

使われ方

Users create YAML templates describing resource ARNs and CRUD-style access levels or action lists, then run `policy_sentry write-policy` to produce IAM JSON. The `query` commands inspect IAM action, ARN, and condition-key data; optional initialization creates local IAM database material under `~/.policy_sentry/`.

パッケージ好きにとっての重要性

Policy Sentry turns AWS's large Actions, Resources, and Condition Keys corpus into a queryable database and a reproducible least-privilege policy generator. It is particularly useful in policy-as-code workflows where hand-maintaining action lists and resource constraints is error-prone.

タイムライン

• 2019: The project's official GitHub wiki directed users to its dedicated documentation site.
• Current project: Policy Sentry supports policy generation, IAM database queries, Python-library use, Docker, and Terraform-oriented workflows.

Related projects

• AWS IAM supplies the policy model and authoritative Actions, Resources, and Condition Keys data.
• Terraform output can be used as input for Policy Sentry's IAM-policy generation workflow.

ソース

• https://github.com/salesforce/policy_sentry
• https://policy-sentry.readthedocs.io/en/latest/
• https://policy-sentry.readthedocs.io/en/latest/appendices/comparison-to-related-tools/
• source_facts.package-manager