IAMTrail

Unofficial

AWS silently updates Managed IAM policies all the time.
We catch every single change.

Full version history and diffs for 1643 AWS Managed IAM Policies, archived since 2019. | A service by zoph.io

Total Policies

1,643

Active AWS Managed Policies

Brand New (v1)

58

New AWS services/features

Deprecated

76

Removed from AWS

Most Active

110

ReadOnlyAccess...

Latest Changes

What AWS changed most recently, and exactly which actions moved

AmazonDataZoneRedshiftGlueProvisioningPolicyv5updated

1 action added

today

8938077
AIDevOpsReleaseManagementVPCPolicyv1new policy

10 actions added

today

1d38921
Permissions management: ec2:CreateNetworkInterfacePermission: ec2:CreateNetworkInterfacePermission
AWSManagedSettingsReadOnlyAccessv3updated

2 actions added

today

faf469a
AmazonEKSServiceRolePolicyv27updated

1 action added

today

4fb7756
1 never-before-seen action: ec2:DescribeTrunkInterfaceAssociations
AmazonEKSNetworkingPolicyv3updated

2 actions added

today

01ff13d
AWSAgentRegistryServiceRolePolicyv2updated

14 actions added

today

b9ab37c
3 never-before-seen actions: agent-registry:CreateRegistryRecord, agent-registry:DeleteRegistryRecord, agent-registry:UpdateRegistryRecord
Permissions management: iam:CreateServiceLinkedRole: iam:CreateServiceLinkedRole
View all 1,000 recent changes

Brand New Policies (v1)

Spot upcoming AWS services early - 58 new policies detected

AIDevOpsReleaseManagementVPCPolicy

v1 / 8/21/2026

NetworkSecurityManagerServiceRolePolicy

v1 / 8/18/2026

AmazonBioDiscoveryInAppFullAccess

v1 / 8/18/2026

AmazonBioDiscoveryFullAccess

v1 / 8/18/2026

AmazonODBAutonomousVmClusterAdmin

v1 / 8/7/2026

AmazonODBExadataInfrastructureAdmin

v1 / 8/7/2026

View all 58 new policies
Free - No account needed

Get notified when policies change

Daily or weekly email digests with inline diffs. Pick specific policies or track them all.

Subscribe

Endpoint Signals

46 regions, 307 services tracked from botocore

Expansionosiseu-west-3aws
New Serviceosis (2 endpoints)aws-us-gov
New Serviceresource-explorer-2 (2 endpoints)aws-cn
Expansioncassandraca-west-1aws
View all endpoint changes

Policy Creation by Year

Number of AWS managed policies first tracked each year

176
20
143
21
119
22
150
23
154
24
135
25
131
26
20201,008 total policies2026

Largest Policy

4533 actions

AWSSupportServiceRolePoli...

AWS Services Tracked

448

IAM service namespaces over time

IAM Actions (literals)

15,308

Distinct action strings in managed policies (no wildcards)

Year-over-Year Velocity

Total policy commits per year - new launches vs. updates

629 total (176 new, 453 updates)
20
488 total (143 new, 345 updates)
21
552 total (119 new, 433 updates)
22
669 total (150 new, 519 updates)
23
606 total (154 new, 452 updates)
24
753 total (135 new, 618 updates)
25
575 total (131 new, 444 updates)
26
UpdatesNew launches4,272 total commits tracked

Excludes 4 bulk-reformat day(s) where detection logic changes caused false-positive diffs.

Policy Lifecycle

Current version distribution across all policies

v1
655
v2
255
v3
181
v4
115
v5
69
v6-10
235
v11-20
93
v21+
40

40% of policies (655) are still at v1 - created once and never updated.

Most revised

ReadOnlyAccessv188AWSConfigServiceRolePolicyv94SecurityAuditv92SageMakerStudioProjectProvisioningRolePolicyv81SageMakerStudioProjectUserRolePolicyv74

Monthly Seasonality

Policy change volume by calendar month across all years

257
Jan
277
Feb
326
Mar
368
Apr
326
May
392
Jun
377
Jul
380
Aug
269
Sep
316
Oct
634
Nov
350
Dec
re:Invent season (Nov-Dec) - 38% above average

re:Invent Pulse

Policy changes during the Nov 15 - Dec 15 window each year

100 changes, 50 new
20
107 changes, 34 new
21
87 changes, 29 new
22
129 changes, 25 new
23
138 changes, 59 new
24
145 changes, 33 new
25
UpdatesNew launches

Recently Updated

AIDevOpsReleaseManagementVPCPolicy

Today/ 1 version

AmazonDataZoneRedshiftGlueProvisioningPolicy

Today/ 5 versions

AWSManagedSettingsReadOnlyAccess

Today/ 3 versions

AmazonEKSNetworkingPolicy

Today/ 3 versions

AmazonEKSServiceRolePolicy

Today/ 15 versions

AWSAgentRegistryServiceRolePolicy

Today/ 2 versions

AmazonEKSLoadBalancingPolicy

Yesterday/ 8 versions

AmazonInspector2AgentlessServiceRolePolicy

Yesterday/ 2 versions

AIDevOpsAgentActionsPolicy

2 days ago/ 2 versions

FinOpsAgentAgentPolicy

2 days ago/ 2 versions

Most Volatile (Trailing 12 Months)

SageMakerStudioProjectUserRolePolicy20 changesReadOnlyAccess18 changesSageMakerStudioProjectProvisioningRolePolicy17 changesAWSResourceExplorerServiceRolePolicy15 changesSageMakerStudioUserIAMDefaultExecutionPolicy14 changesSageMakerStudioUserIAMPermissiveExecutionPolicy13 changesSecurityAudit12 changesAWSConfigServiceRolePolicy11 changesAWSMarketplaceSellerFullAccess11 changesSageMakerStudioAdminIAMDefaultExecutionPolicy11 changes

Newest Policies

AmazonDataZoneRedshiftGlueProvisioningPolicy

Today

AIDevOpsReleaseManagementVPCPolicy

Today

AWSManagedSettingsReadOnlyAccess

Today

AmazonEKSNetworkingPolicy

Today

AmazonEKSServiceRolePolicy

Today

AWSAgentRegistryServiceRolePolicy

Today

AmazonEKSLoadBalancingPolicy

Yesterday

AmazonInspector2AgentlessServiceRolePolicy

Yesterday

AIDevOpsAgentActionsPolicy

2 days ago

FinOpsAgentAgentPolicy

2 days ago

Oldest Policies

AWSOpsWorksRegisterCLI

7y 6m ago

AmazonMachineLearningRoleforRedshiftDataSource

7y 6m ago

TagGovernancePolicy

7y 6m ago

AWSLambdaReplicatorInternal

7y 2m ago

AmazonEverestServicePolicy

7 years ago

AWSB9InternalServicePolicy

6y 11m ago

AWSBackupAdminPolicy

6y 11m ago

AWSBackupOperatorPolicy

6y 11m ago

AWSCloudTrailFullAccess

6y 11m ago

AWSDataPipelineRole

6y 11m ago