Stats
The whole archive in numbers: how often AWS changes its managed policies, when, and which ones.
Total Policies
1,686
Active AWS Managed Policies
Brand New (v1)
37
New AWS services/features
Deprecated
82
Removed from AWS
Most Active
114
ReadOnlyAccess...
Policy Creation by Year
Number of AWS managed policies first tracked each year
Largest Policy
4674 actions
AWSSupportServiceRolePoli...
AWS Services Tracked
453
IAM service namespaces over time
IAM Actions (literals)
16,429
Distinct action strings in managed policies (no wildcards)
Year-over-Year Velocity
Total policy commits per year - new launches vs. updates
Excludes 4 bulk-reformat day(s) where detection logic changes caused false-positive diffs.
Policy Lifecycle
Current version distribution across all policies
39% of policies (661) are still at v1 - created once and never updated.
Monthly Seasonality
Policy change volume by calendar month across all years
re:Invent Pulse
Policy changes from October 1 through December 31 each year. Season archive
Recently Updated
AWSSecurityAgentWebAppPolicy
SageMakerStudioAdminIAMDefaultExecutionPolicy
SageMakerStudioAdminIAMPermissiveExecutionPolicy
SageMakerStudioUserIAMDefaultExecutionPolicy
SageMakerStudioUserIAMPermissiveExecutionPolicy
AIDevOpsAgentAccessPolicy
ROSAControlPlaneOperatorPolicy
SageMakerStudioEMRInstanceRolePolicy
AWSObservabilityAdminTelemetryEnablementServiceRolePolicy
SageMakerStudioEMRContainersSystemNamespaceRolePolicy
Most Volatile (Trailing 12 Months)
Newest Policies
AWSSecurityAgentWebAppPolicy
SageMakerStudioAdminIAMDefaultExecutionPolicy
SageMakerStudioAdminIAMPermissiveExecutionPolicy
AIDevOpsAgentAccessPolicy
SageMakerStudioUserIAMDefaultExecutionPolicy
SageMakerStudioUserIAMPermissiveExecutionPolicy
ROSAControlPlaneOperatorPolicy
AWSObservabilityAdminTelemetryEnablementServiceRolePolicy
SageMakerStudioEMRInstanceRolePolicy
SageMakerStudioEMRContainersSystemNamespaceRolePolicy
Oldest Policies
AWSOpsWorksRegisterCLI
AmazonMachineLearningRoleforRedshiftDataSource
TagGovernancePolicy
AWSLambdaReplicatorInternal
AmazonEverestServicePolicy
AWSB9InternalServicePolicy
AWSBackupAdminPolicy
AWSBackupOperatorPolicy
AWSCloudTrailFullAccess
AWSDataPipelineRole