PMapper - A Tool For Quickly Evaluating IAM Permissions In AWS

The goal of the AWS IAM auth system is to apply and enforce access controls on actions and resources in AWS. This tool helps identify if the policies in place will accomplish the intents of the account's owners.

How to Use:

1. Download this repository and install its dependencies with pip install -r requirements.txt.
2. Ensure you have graphviz installed on your host.
3. Setup an IAM user in your AWS account with a policy that grants the necessary permission to run this tool (see the file mapper-policy.json for an example). The ReadOnlyAccess managed policy works for this purpose. Grab the access keys created for this user.
4. In the AWS CLI, set up a profile for that IAM user with the command: aws configure --profile < profile_name > where < profile_name > is a unique name.
5. Run the command python pmapper.py --profile < profile_name > graph to begin pulling data about your account down to your computer.

Download here: https://github.com/nccgroup/PMapper