AWS ToolsAWS Policy Generator

Changelog

Notable changes to the site, newest first. Dates are when each change was completed.

  1. : Policy Checker layout fix

    • Removed the large empty gap below the Policy Checker heading on the homepage and the IAM and S3 generators; on phones its content no longer runs past the panel's border.

  2. : Homepage opens on the generator

    • The homepage now starts with the policy generator. The "Already have a policy? Check it" shortcut and the note on which services it covers sit right below it, followed by the worked example.
    • The site introduction and the "Which tool do I need?" table moved to the top of the About page; the homepage links to the table.

  3. : Inline Policy Generator: neutral start, reliable JSON sync, administrator-access warning

    • The Inline Policy Generator now opens on an empty draft with a short prompt instead of error messages, and no longer preselects all resources ("*").
    • While you edit, missing pieces are listed as steps to finish. Check Policy, Copy and Export run the full structure check, and a policy with errors can't be copied or exported until it is fixed.
    • Security recommendations appear only for statements that list actions.
    • Fixed the JSON editor going blank or out of date after edits made right after typing in it, and a delayed update that could overwrite newer typing. While the JSON is invalid, your text is kept, the form pauses, and the last valid version can be restored.
    • A statement that allows every action on every resource ("Action": "*" with "Resource": "*") is flagged as a critical security warning instead of a plain success, and copying or exporting it requires confirming that administrator-level access is intended.

  4. : Corrections after a content audit; example library rewritten

    • Corrected: negated condition operators (StringNotEquals, StringNotLike, ArnNotLike) match when a key is missing from the request; the condition keys guide said the opposite.
    • Corrected: in cross-account S3 access, SCPs only limit principals in their own account (the bucket side uses resource control policies), and the AWS managed aws/s3 key only fails for callers in another account.
    • Updated guides for organization-level S3 Block Public Access (November 2025) and IAM Access Analyzer internal access analyzers (June 2025).
    • The example library was rewritten as 15 deeper resources: each now covers the problem, deployment steps, checks that change nothing, common mistakes and limitations. Five pages were merged into the resource that covers them and redirect there.
    • Removed a test command that would have deleted a DynamoDB table if run with the wrong credentials, and added the role-protection policy that SCP exemptions need to be safe.
    • The policy checker now reports empty Action and Resource lists and unknown elements as errors, treats a missing Version as a warning, and no longer presents a passing structure check as AWS validation.
    • Generators no longer default to all resources ("*") or to every action of a service; choosing all resources is now explicit.
    • Homepage: removed the claim that its generator covers S3 (S3 permissions are built in the Inline and S3 Bucket Policy Generators) and added a guide to choosing the right tool.

  5. : Dark mode

    • New Light, Dark and System appearance setting in the header (in the menu on smaller screens). Light remains the default, and the choice is remembered in your browser.
    • Dark mode covers every page, including the policy editors, JSON and infrastructure-as-code panels, validation messages, guides and examples.
    • The service catalogue banner above the homepage policy generator uses darker greens, so its white text meets WCAG AA contrast.
    • Privacy policy updated to mention that the appearance setting is stored in your browser's local storage.

  6. : Learning Center, example library and S3 bucket-policy fixes

    • New AWS Security Learning Center with 10 guides on least privilege, policy types, S3 bucket policies, cross-account access, SCPs, permissions boundaries, condition keys, evaluation logic, IAM Access Analyzer and common misconfigurations.
    • New example library: 20 reviewed policies with statement-by-statement explanations, test steps, copy buttons and "open in generator" links.
    • S3 Bucket Policy Generator now builds real bucket policies: a principal is required, resources must be the bucket or its objects, and the infrastructure-as-code export creates bucket-policy resources.
    • Fixed: the validator no longer fails on statements that use NotAction, and accepts role trust policies.
    • Fixed: the "Policy Document" view now handles every valid policy shape and keeps the Principal element.
    • Fixed: imported policies are never partially loaded. The Inline Policy Generator keeps every statement and element (including NotAction, NotResource, Principal and multi-value conditions); the single-statement generators show a policy they can't hold exactly unchanged, with the reasons.
    • Replaced the S3 cross-account walkthrough with an original, role-based guide.
    • New About, Methodology and Changelog pages; privacy policy corrected to disclose the contact form provider and hosting logs.
    • Learn and Examples added to the main navigation; the Inline Policy Generator toolbar now fits small screens; custom 404 page.
    • Terms of service revised: professional and commercial use is permitted, questions go through the contact form, New Jersey law governs the Terms, and dates on the legal pages were corrected.
    • The About page, Privacy Policy, Terms of Service and footer now name Aexena LLC, a New Jersey limited liability company, as the developer and operator of the site.
    • Retired outdated "New" labels on the infrastructure-as-code panel and the service list.

  7. : Search, accessibility and consent foundation

    • Each page has its own title, description, canonical URL and social preview; one main heading per page.
    • Analytics requires consent, and no advertising code is loaded without a certified consent platform.
    • Accessibility improvements across the generators (labels, contrast, focus visibility, keyboard support).
    • Automated quality checks (linting, type checking, tests) added for every change.

  8. : Advertising configuration

    • Added Google AdSense site verification and ads.txt.

  9. : Inline policy guidance

    • Added "Why use an inline policy?" guidance to the Inline Policy Generator; renamed the generator panel to "Create Your AWS Policy".

  10. : Single canonical host

    • The apex domain now redirects to www.awspolicygenerator.com.

  11. : Inline Policy Generator

    • New console-style editor for multi-statement inline policies, with a live JSON pane, a searchable service and action picker, conditions and infrastructure-as-code export.

  12. : Contact form and navigation

    • Contact links replaced by a hosted contact form.
    • Mobile navigation menu added.
    • Footer links tidied (duplicates removed, related AWS tools added).

  13. : Dedicated IAM and S3 generator pages

    • Added the IAM Policy Generator and S3 Bucket Policy Generator pages.

  14. : Infrastructure as Code export and accessibility

    • Generated policies can be exported as Terraform, OpenTofu, CloudFormation, AWS CDK or Pulumi.
    • Colour-contrast and heading-order fixes from accessibility testing.
    • www.awspolicygenerator.com became the single canonical host.

  15. : Search indexing fixes

    • Self-referencing canonical URLs and corrected sitemap and robots files.

  16. : Service catalogue expansion

    • Expanded the generator's service catalogue from 5 to 58 AWS services.
    • Fixed production build issues.

  17. : Paste to validate

    • Policies can be pasted directly for validation, in addition to file import and export.

  18. : Launch

    • AWS Policy Generator launched: build IAM policies from a service and action catalogue, validate them, and import or export JSON.
    • Privacy policy and terms of service published.

Last updated: