IAMTrail

Unofficial

AWS silently updates Managed IAM policies all the time.
We catch every single change.

Full version history and diffs for 1645 AWS Managed IAM Policies, archived since 2019. | A service by zoph.io

Total Policies

1,645

Active AWS Managed Policies

Brand New (v1)

58

New AWS services/features

Deprecated

76

Removed from AWS

Most Active

110

ReadOnlyAccess...

Latest Changes

What AWS changed most recently, and exactly which actions moved

CloudWatchNetworkFlowMonitorTopologyServiceRolePolicyv10updated

19 actions added

today

cd09367
Permissions management: iam:CreateServiceLinkedRole: iam:CreateServiceLinkedRole
AWSManagedSettingsAdminAccessv7updated

2 actions added

today

ded769a
2 never-before-seen actions: customer-verification:GetInheritanceConfig, customer-verification:PutInheritanceConfig
AgentRegistryFullAccessv2updated

7 actions added

today

6631360
Permissions management: kms:CreateGrant: kms:CreateGrant
AWS-SSM-DiagnosisAutomation-AdministrationRolePolicyv5updated

scope changed, no action added or removed

yesterday

cf7536b
AWS-SSM-DiagnosisAutomation-ExecutionRolePolicyv8updated

4 actions added

3 days ago

894e3e5
AWSBackupServiceRolePolicyForRestoresv36updated

1 action added

4 days ago

4176abb
View all 1,000 recent changes

Brand New Policies (v1)

Spot upcoming AWS services early - 58 new policies detected

AssuranceServiceRolePolicy

v1 / 8/26/2026

AIDevOpsChannelAccessPolicy

v1 / 8/26/2026

AIDevOpsReleaseManagementVPCPolicy

v1 / 8/21/2026

NetworkSecurityManagerServiceRolePolicy

v1 / 8/18/2026

AmazonBioDiscoveryInAppFullAccess

v1 / 8/18/2026

AmazonBioDiscoveryFullAccess

v1 / 8/18/2026

View all 58 new policies
Free - No account needed

Get notified when policies change

Daily or weekly email digests with inline diffs. Pick specific policies or track them all.

Subscribe

Endpoint Signals

46 regions, 307 services tracked from botocore

Expansionosiseu-west-3aws
New Serviceosis (2 endpoints)aws-us-gov
New Serviceresource-explorer-2 (2 endpoints)aws-cn
Expansioncassandraca-west-1aws
View all endpoint changes

Policy Creation by Year

Number of AWS managed policies first tracked each year

176
20
143
21
119
22
150
23
154
24
135
25
133
26
20201,010 total policies2026

Largest Policy

4533 actions

AWSSupportServiceRolePoli...

AWS Services Tracked

449

IAM service namespaces over time

IAM Actions (literals)

15,345

Distinct action strings in managed policies (no wildcards)

Year-over-Year Velocity

Total policy commits per year - new launches vs. updates

629 total (176 new, 453 updates)
20
488 total (143 new, 345 updates)
21
552 total (119 new, 433 updates)
22
669 total (150 new, 519 updates)
23
606 total (154 new, 452 updates)
24
753 total (135 new, 618 updates)
25
596 total (133 new, 463 updates)
26
UpdatesNew launches4,293 total commits tracked

Excludes 4 bulk-reformat day(s) where detection logic changes caused false-positive diffs.

Policy Lifecycle

Current version distribution across all policies

v1
656
v2
254
v3
181
v4
115
v5
70
v6-10
236
v11-20
93
v21+
40

40% of policies (656) are still at v1 - created once and never updated.

Most revised

ReadOnlyAccessv188AWSConfigServiceRolePolicyv95SecurityAuditv92SageMakerStudioProjectProvisioningRolePolicyv82SageMakerStudioProjectUserRolePolicyv75

Monthly Seasonality

Policy change volume by calendar month across all years

257
Jan
277
Feb
326
Mar
368
Apr
326
May
392
Jun
377
Jul
399
Aug
271
Sep
316
Oct
634
Nov
350
Dec
re:Invent season (Nov-Dec) - 38% above average

re:Invent Pulse

Policy changes during the Nov 15 - Dec 15 window each year

100 changes, 50 new
20
107 changes, 34 new
21
87 changes, 29 new
22
129 changes, 25 new
23
138 changes, 59 new
24
145 changes, 33 new
25
UpdatesNew launches

Recently Updated

CloudWatchNetworkFlowMonitorTopologyServiceRolePolicy

Today/ 4 versions

AWSManagedSettingsAdminAccess

Today/ 7 versions

AgentRegistryFullAccess

Today/ 2 versions

AWS-SSM-DiagnosisAutomation-AdministrationRolePolicy

Yesterday/ 3 versions

AWS-SSM-DiagnosisAutomation-ExecutionRolePolicy

3 days ago/ 4 versions

AWSBackupServiceRolePolicyForRestores

4 days ago/ 33 versions

AWSConfigServiceRolePolicy

4 days ago/ 70 versions

AWS_ConfigRole

4 days ago/ 56 versions

SageMakerStudioProjectUserRolePolicy

4 days ago/ 37 versions

AWSServiceRolePolicyForWorkspacesInstances

4 days ago/ 4 versions

Most Volatile (Trailing 12 Months)

SageMakerStudioProjectUserRolePolicy21 changesReadOnlyAccess18 changesSageMakerStudioProjectProvisioningRolePolicy16 changesAWSResourceExplorerServiceRolePolicy15 changesSageMakerStudioUserIAMDefaultExecutionPolicy13 changesAWSConfigServiceRolePolicy12 changesSageMakerStudioUserIAMPermissiveExecutionPolicy12 changesSecurityAudit12 changesAWS_ConfigRole11 changesAWSMarketplaceSellerFullAccess11 changes

Newest Policies

CloudWatchNetworkFlowMonitorTopologyServiceRolePolicy

Today

AWSManagedSettingsAdminAccess

Today

AgentRegistryFullAccess

Today

AWS-SSM-DiagnosisAutomation-AdministrationRolePolicy

Yesterday

AWS-SSM-DiagnosisAutomation-ExecutionRolePolicy

3 days ago

AWSBackupServiceRolePolicyForRestores

4 days ago

AWSConfigServiceRolePolicy

4 days ago

AWS_ConfigRole

4 days ago

SageMakerStudioProjectUserRolePolicy

4 days ago

AWSServiceRolePolicyForWorkspacesInstances

4 days ago

Oldest Policies

AWSOpsWorksRegisterCLI

7y 7m ago

AmazonMachineLearningRoleforRedshiftDataSource

7y 7m ago

TagGovernancePolicy

7y 7m ago

AWSLambdaReplicatorInternal

7y 3m ago

AmazonEverestServicePolicy

7y 1m ago

AWSB9InternalServicePolicy

7 years ago

AWSBackupAdminPolicy

7 years ago

AWSBackupOperatorPolicy

7 years ago

AWSCloudTrailFullAccess

7 years ago

AWSDataPipelineRole

7 years ago