IAM Policy JSON Validator
Paste IAM or S3 bucket policy JSON and check its structure - required fields, valid Effect values, and common mistakes.
Paste your IAM or S3 bucket policy JSON below - this tool checks its structure and flags common mistakes and overly broad permissions.
This checks structure only - AWS's own policy simulator remains the authoritative way to test what a policy actually permits in your account.
What Does This Tool Check?
It parses your policy JSON and verifies the structure AWS requires: a Version string, a Statement array, and each statement having a valid Effect ("Allow" or "Deny") plus Action and Resource fields.
Why Use This Tool?
A policy with invalid JSON or a missing required field is rejected outright by AWS with a generic error - this tool catches structural problems before you paste the policy into the AWS console and hit that error.
How to Use It
- Paste your policy JSON.
- Click Validate.
- Review structural errors, plus warnings for broad permissions (
Action: "*"orResource: "*").
Limitations
This validates JSON structure and common required fields - it does not simulate what the policy would actually permit against real AWS resources, which requires AWS's own IAM Policy Simulator.