THIS REPO IS NO LONGER UPDATED: USE https://github.com/z0ph/aws_managed_policies
Collection of the AWS Managed IAM policies. These were acquired as follows:
aws iam list-policies > list-policies.json
cat list-policies.json | jq -cr '.Policies[] | select(.Arn | contains("iam::aws"))|.Arn +" "+ .DefaultVersionId+" "+.PolicyName' | xargs -n3 sh -c 'aws iam get-policy-version --policy-arn $1 --version-id $2 > "policies/$3"' sh
This does the following:
- Gets the list of all policies in the account
- Finds the ones with an ARN containing "iam::aws", so that only the AWS managed policies are grabbed.
- Gets the ARN, current version id, and policy name (needed so we don't have a slash like the ARN does for writing a file)
- Calls
aws iam get-policy-versionwith those values, and writes the output to a file using the policy name.