macOS
Homebrewverified · 100%
brew install policy_sentrylocal Homebrew formula metadata
brew / rank 5853
Install policy_sentry with Homebrew
Generate locked-down AWS IAM Policies. Version 0.15.2 via Homebrew; verified 2026-10-12.
install
Additional install commands
overview
Package summary
Generate locked-down AWS IAM Policies
Project links
Commands and aliases
- policy_sentry
history
Project history and usage
Policy Sentry is Salesforce's AWS IAM least-privilege policy generator, auditor, and IAM analysis database.
Project history
Policy Sentry was created to reduce the manual work required to write tightly scoped AWS IAM policies. It derives IAM knowledge from authoritative AWS documentation and generates policies from requested access levels, actions, and resource ARNs.
Adoption history
Salesforce maintains Policy Sentry as an open-source CLI and Python library. Its official documentation covers package installation, Docker use, Terraform-derived input, and library integration; the supplied package facts also record Homebrew distribution.
How it is used
Users create YAML templates describing resource ARNs and CRUD-style access levels or action lists, then run `policy_sentry write-policy` to produce IAM JSON. The `query` commands inspect IAM action, ARN, and condition-key data; optional initialization creates local IAM database material under `~/.policy_sentry/`.
Why package nerds care
Policy Sentry turns AWS's large Actions, Resources, and Condition Keys corpus into a queryable database and a reproducible least-privilege policy generator. It is particularly useful in policy-as-code workflows where hand-maintaining action lists and resource constraints is error-prone.
Timeline
- 2019: The project's official GitHub wiki directed users to its dedicated documentation site.
- Current project: Policy Sentry supports policy generation, IAM database queries, Python-library use, Docker, and Terraform-oriented workflows.
Related projects
- AWS IAM supplies the policy model and authoritative Actions, Resources, and Condition Keys data.
- Terraform output can be used as input for Policy Sentry's IAM-policy generation workflow.
Sources
security posture
No protected-tool coverage found yet
No matching local secret-handling manifest was found for policy_sentry. Package metadata is still published here so future coverage has a stable package URL.
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 5 platform targets.
- Installs with 3 runtime dependencies.
- Build metadata lists 1 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
policy_sentry | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-11-04
manager version0.15.2
manager updated2026-10-12
local dataok
upstreamnot checked
latest detectednot detected
https://policy-sentry.readthedocs.io/en/latest/
- infoRelease/tag comparison is only available for GitHub repositories.https://policy-sentry.readthedocs.io/en/latest/none confidence
install metadata
Package metadata
| Package key | brew:policy_sentry |
|---|---|
| Version | 0.15.2 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/policy_sentry |
| Homepage | https://policy-sentry.readthedocs.io/en/latest/ |
| Repository | https://github.com/salesforce/policy_sentry |
| Upstream docs | https://policy-sentry.readthedocs.io/en/latest/ |
| License | MIT |
| Source archive | https://files.pythonhosted.org/packages/87/fb/1d8cd9672d757481f6ffbdb18ca92d628d8d2b08cbf1829a1c4d700bc1ab/policy_sentry-0.15.2.tar.gz |
| Last updated | 2026-10-12T15:42:14Z |
| Pulse | updated |
| Dependencies | certifi, libyaml, python@3.15 |
| Build dependencies | rust |
| Bottle | available (on arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | policy_sentry |
| Version Scheme | 0 |
| Revision | 3 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation