AWS & Cloud Tools

IAM Policy JSON Validator

Paste IAM or S3 bucket policy JSON and check its structure - required fields, valid Effect values, and common mistakes.

Paste your IAM or S3 bucket policy JSON below - this tool checks its structure and flags common mistakes and overly broad permissions.

Policy JSON

More AWS & Cloud Tools

View all 16

AWS IAM Policy Generator AWS Cron Expression Helper S3 Policy Generator AWS CLI Command Generator AWS S3 URL Generator AWS CLI S3 Command Generator AWS Availability Zone Lookup Cloud Cost Calculator

This checks structure only - AWS's own policy simulator remains the authoritative way to test what a policy actually permits in your account.

What Does This Tool Check?

It parses your policy JSON and verifies the structure AWS requires: a Version string, a Statement array, and each statement having a valid Effect ("Allow" or "Deny") plus Action and Resource fields.

Why Use This Tool?

A policy with invalid JSON or a missing required field is rejected outright by AWS with a generic error - this tool catches structural problems before you paste the policy into the AWS console and hit that error.

How to Use It

Paste your policy JSON.
Click Validate.
Review structural errors, plus warnings for broad permissions (Action: "*" or Resource: "*").

Limitations

This validates JSON structure and common required fields - it does not simulate what the policy would actually permit against real AWS resources, which requires AWS's own IAM Policy Simulator.

Frequently Asked Questions

That the JSON is valid and has a Version and a Statement list, and that each statement has a valid Effect (Allow or Deny) plus Action and Resource entries.

"2012-10-17". It is the current policy language version and is required for features like policy variables.

It checks structure, not permissions. Use AWS IAM Access Analyzer or the Policy Simulator to see the real effect.