IAMTrail

Unofficial

AWS silently updates Managed IAM policies all the time.
We catch every single change.

Full version history and diffs for 1645 AWS Managed IAM Policies, archived since 2019. | A service by zoph.io

Total Policies

1,645

Active AWS Managed Policies

Brand New (v1)

51

New AWS services/features

Deprecated

76

Removed from AWS

Most Active

110

ReadOnlyAccess...

Latest Changes

What AWS changed most recently, and exactly which actions moved

BedrockAgentCoreFullAccessv20updated

scope changed, no action added or removed

today

cbb94bf
FinOpsAgentAgentPolicyv3updated

16 actions added

today

0696c01
5 never-before-seen actions: billing:GetEnterpriseSupportChargeSummary, billing:GetEnterpriseSupportContractDetails, billing:ListEnterpriseSupportLinkedAccountCharges, ce:StartCommitmentPurchaseAnalysis, ce:StartSavingsPlansPurchaseRecommendationGeneration
AWSAccountSettingsManagementRolev9updated

2 actions added

today

bcac12e
AWSTransformServerMigrationAgentPolicyv2updated

10 actions added

today

56bf679
AWSTransformNetworkMigrationAgentPolicyv2updated

2 actions added

today

147e425
1 never-before-seen action: mgn:ListNetworkMigrationExecutionArtifacts
AWSTransformLandingZoneAgentPolicyv2updated

1 action added

today

92d3f72
Permissions management: s3:PutBucketPolicy: s3:PutBucketPolicy
View all 1,000 recent changes

Brand New Policies (v1)

Spot upcoming AWS services early - 51 new policies detected

AssuranceServiceRolePolicy

v1 / 8/26/2026

AIDevOpsChannelAccessPolicy

v1 / 8/26/2026

AIDevOpsReleaseManagementVPCPolicy

v1 / 8/21/2026

NetworkSecurityManagerServiceRolePolicy

v1 / 8/18/2026

AmazonBioDiscoveryInAppFullAccess

v1 / 8/18/2026

AmazonBioDiscoveryFullAccess

v1 / 8/18/2026

View all 51 new policies
Free - No account needed

Get notified when policies change

Daily or weekly email digests with inline diffs. Pick specific policies or track them all.

Subscribe

Endpoint Signals

46 regions, 307 services tracked from botocore

Expansionappstream2ap-northeast-3ca-west-1eu-central-2aws
Expansionosiseu-west-3aws
New Serviceosis (2 endpoints)aws-us-gov
New Serviceresource-explorer-2 (2 endpoints)aws-cn
View all endpoint changes

Policy Creation by Year

Number of AWS managed policies first tracked each year

176
20
143
21
119
22
150
23
154
24
135
25
133
26
20201,010 total policies2026

Largest Policy

4533 actions

AWSSupportServiceRolePoli...

AWS Services Tracked

449

IAM service namespaces over time

IAM Actions (literals)

15,351

Distinct action strings in managed policies (no wildcards)

Year-over-Year Velocity

Total policy commits per year - new launches vs. updates

629 total (176 new, 453 updates)
20
488 total (143 new, 345 updates)
21
552 total (119 new, 433 updates)
22
669 total (150 new, 519 updates)
23
606 total (154 new, 452 updates)
24
753 total (135 new, 618 updates)
25
602 total (133 new, 469 updates)
26
UpdatesNew launches4,299 total commits tracked

Excludes 4 bulk-reformat day(s) where detection logic changes caused false-positive diffs.

Policy Lifecycle

Current version distribution across all policies

v1
653
v2
256
v3
182
v4
115
v5
70
v6-10
236
v11-20
93
v21+
40

40% of policies (653) are still at v1 - created once and never updated.

Most revised

ReadOnlyAccessv188AWSConfigServiceRolePolicyv95SecurityAuditv92SageMakerStudioProjectProvisioningRolePolicyv82SageMakerStudioProjectUserRolePolicyv75

Monthly Seasonality

Policy change volume by calendar month across all years

257
Jan
277
Feb
326
Mar
368
Apr
326
May
392
Jun
377
Jul
399
Aug
277
Sep
316
Oct
634
Nov
350
Dec
re:Invent season (Nov-Dec) - 37% above average

re:Invent Pulse

Policy changes during the Nov 15 - Dec 15 window each year

100 changes, 50 new
20
107 changes, 34 new
21
87 changes, 29 new
22
129 changes, 25 new
23
138 changes, 59 new
24
145 changes, 33 new
25
UpdatesNew launches

Recently Updated

BedrockAgentCoreFullAccess

Today/ 11 versions

FinOpsAgentAgentPolicy

Today/ 3 versions

AWSAccountSettingsManagementRole

Today/ 5 versions

AWSTransformLandingZoneAgentPolicy

Today/ 2 versions

AWSTransformNetworkMigrationAgentPolicy

Today/ 2 versions

AWSTransformServerMigrationAgentPolicy

Today/ 2 versions

CloudWatchNetworkFlowMonitorTopologyServiceRolePolicy

Today/ 4 versions

AWSManagedSettingsAdminAccess

Today/ 7 versions

AgentRegistryFullAccess

Yesterday/ 2 versions

AWS-SSM-DiagnosisAutomation-AdministrationRolePolicy

Yesterday/ 3 versions

Most Volatile (Trailing 12 Months)

SageMakerStudioProjectUserRolePolicy21 changesReadOnlyAccess18 changesSageMakerStudioProjectProvisioningRolePolicy16 changesAWSResourceExplorerServiceRolePolicy15 changesSageMakerStudioUserIAMDefaultExecutionPolicy13 changesAWSConfigServiceRolePolicy12 changesSageMakerStudioUserIAMPermissiveExecutionPolicy12 changesSecurityAudit12 changesAWS_ConfigRole11 changesAWSMarketplaceSellerFullAccess11 changes

Newest Policies

BedrockAgentCoreFullAccess

Today

FinOpsAgentAgentPolicy

Today

AWSAccountSettingsManagementRole

Today

AWSTransformServerMigrationAgentPolicy

Today

AWSTransformNetworkMigrationAgentPolicy

Today

AWSTransformLandingZoneAgentPolicy

Today

CloudWatchNetworkFlowMonitorTopologyServiceRolePolicy

Today

AWSManagedSettingsAdminAccess

Today

AgentRegistryFullAccess

Yesterday

AWS-SSM-DiagnosisAutomation-AdministrationRolePolicy

Yesterday

Oldest Policies

AWSOpsWorksRegisterCLI

7y 7m ago

AmazonMachineLearningRoleforRedshiftDataSource

7y 7m ago

TagGovernancePolicy

7y 7m ago

AWSLambdaReplicatorInternal

7y 3m ago

AmazonEverestServicePolicy

7y 1m ago

AWSB9InternalServicePolicy

7 years ago

AWSBackupAdminPolicy

7 years ago

AWSBackupOperatorPolicy

7 years ago

AWSCloudTrailFullAccess

7 years ago

AWSDataPipelineRole

7 years ago