IAMTrail
UnofficialAWS silently updates Managed IAM policies all the time.
We catch every single change.
Full version history and diffs for 1645 AWS Managed IAM Policies, archived since 2019. | A service by zoph.io
Total Policies
1,645
Active AWS Managed Policies
Brand New (v1)
60
New AWS services/features
Deprecated
76
Removed from AWS
Most Active
110
ReadOnlyAccess...
Latest Changes
What AWS changed most recently, and exactly which actions moved
4 actions added
today
894e3e51 action added
today
4176abb8 actions added
today
1cc5fd08 actions added
today
c02481f1 action added
yesterday
c0d0e701 action added
yesterday
c9be95eBrand New Policies (v1)
Spot upcoming AWS services early - 60 new policies detected
Get notified when policies change
Daily or weekly email digests with inline diffs. Pick specific policies or track them all.
Endpoint Signals
46 regions, 307 services tracked from botocore
osiseu-west-3awscassandraca-west-1awsPolicy Creation by Year
Number of AWS managed policies first tracked each year
Largest Policy
4533 actions
AWSSupportServiceRolePoli...
AWS Services Tracked
449
IAM service namespaces over time
IAM Actions (literals)
15,343
Distinct action strings in managed policies (no wildcards)
Year-over-Year Velocity
Total policy commits per year - new launches vs. updates
Excludes 4 bulk-reformat day(s) where detection logic changes caused false-positive diffs.
Policy Lifecycle
Current version distribution across all policies
40% of policies (657) are still at v1 - created once and never updated.
Monthly Seasonality
Policy change volume by calendar month across all years
re:Invent Pulse
Policy changes during the Nov 15 - Dec 15 window each year
Recently Updated
AWS-SSM-DiagnosisAutomation-ExecutionRolePolicy
AWSBackupServiceRolePolicyForRestores
AWSConfigServiceRolePolicy
AWS_ConfigRole
SageMakerStudioProjectUserRolePolicy
AWSServiceRolePolicyForWorkspacesInstances
SageMakerStudioAdminIAMConsolePolicy
AIDevOpsChannelAccessPolicy
AssuranceServiceRolePolicy
AWSAccountSettingsManagementRole
Most Volatile (Trailing 12 Months)
Newest Policies
AWS-SSM-DiagnosisAutomation-ExecutionRolePolicy
AWSBackupServiceRolePolicyForRestores
AWSConfigServiceRolePolicy
AWS_ConfigRole
SageMakerStudioProjectUserRolePolicy
AWSServiceRolePolicyForWorkspacesInstances
SageMakerStudioAdminIAMConsolePolicy
AssuranceServiceRolePolicy
AIDevOpsChannelAccessPolicy
AWSAccountSettingsManagementRole
Oldest Policies
AWSOpsWorksRegisterCLI
AmazonMachineLearningRoleforRedshiftDataSource
TagGovernancePolicy
AWSLambdaReplicatorInternal
AmazonEverestServicePolicy
AWSB9InternalServicePolicy
AWSBackupAdminPolicy
AWSBackupOperatorPolicy
AWSCloudTrailFullAccess
AWSDataPipelineRole