SourceIAM Policy Autopilot now supports Terraform plan files
This update reduces the time developers spend manually writing IAM policies and troubleshooting access issues when deploying AWS infrastructure via Terraform.
- IAM Policy Autopilot can now generate baseline IAM policies directly from a Terraform plan file using deterministic analysis.
- The analysis produces policies scoped to the CRUD functions of the resources in the Terraform plan.
- Generated policies reference specific resource ARNs rather than wildcards when possible.
- This feature enables policy generation for deploying AWS infrastructure defined via Infrastructure as Code.
- Complements existing Terraform-aware analysis that cross-references Terraform resource definitions with SDK calls in application code to resolve ARNs.
- IAM Policy Autopilot is an open source tool launched at re:Invent 2025 that runs locally on the user's machine at no additional cost.