Beta 0.2 Available Now

Solve the least privilege
problem for good!

Generate least privileged IAM policies by analysing application code. Available as a CLI, VS Code extension or GitHub app.

Try in VS Code Install as CLI

Free to use. Results may be inaccurate during the early development period.

screenshot
Supported languages

The following programming languages and their respective SDKs are supported or planned.

JavaScript
Available Now
JavaScript

Support for the AWS, Azure & Google Cloud JavaScript SDK is now available.

Python
Available Now
Python

Support for the AWS (Boto3), Azure & Google Cloud Python SDK is now available.

Java
Available Now
Java

Support for the AWS & Google Cloud Java SDK is now available.

Go
Available Now
Go

Support for the AWS, Azure & Google Cloud Go SDK is now available.

PHP
Coming Soon
PHP

Support for PHP is planned.

C / C++
Coming Soon
C++

Support for C / C++ is planned.

Rust
Coming Soon
Rust

Support for Rust is planned.

.NET / C#
Coming Soon
C#

Support for .NET / C# is planned.

Ruby
Coming Soon
Ruby

Support for Ruby is planned.

FAQs

Frequently Asked Questions

Check out some of these frequently asked questions about the iamfast product.

Still have a question?
  • What is iamfast?

    iamfast is a suite of tools which generate IAM policies based on analysis of your application source code.

  • How do I use iamfast?

    You can use either the CLI, VS Code extension or GitHub app in order to use iamfast.

    We recommend starting with the VS Code extension to understand how the tool works and to have a convenient way of generating policies during development of your application.

  • Do you store my code?

    When using the CLI or VS Code extension, application code is analyzed on your local machine and never send to the iamfast servers.

    When using the GitHub app, your code is temporarily retrieved in order to analyze the SDK calls. This process only lasts a small amount of time and your code is then removed from our servers. The iamfast team does not store your code long-term.

  • How accurate is it?

    Whilst we make every attempt to provide accurate policies, we can't always determine what your code will and will not do with respect to SDK calls. Thus, some omissions or erroneous policy generation may occur.

    It is strongly advised to verify all outputs from the tool to ensure its sanity.

  • Do I need to pay to use it?

    iamfast is available for free use under the current license.

    While the code itself isn't publicly accessible, we're dedicated to providing a reliable and valuable tool for you to use and welcome your feedback to help us improve. You can send us feedback by emailing hello@iamfast.io.

  • Where do I get support?

    You can get in touch with us by emailing hello@iamfast.io.

Download the CLI.

Free to use. Results may be inaccurate during the early development period.

Get started
CLI