IAMTrail

Unofficial

AWS silently updates Managed IAM policies all the time.
We catch every single change.

Full version history and diffs for 1611 AWS Managed IAM Policies, archived since 2019. | A service by zoph.io

Total Policies

1,611

Active AWS Managed Policies

Brand New (v1)

45

New AWS services/features

Deprecated

76

Removed from AWS

Most Active

110

ReadOnlyAccess...

Brand New Policies (v1)

Spot upcoming AWS services early - 45 new policies detected

AmazonODBFullAccess

v1 / 7/23/2026

AWSManagedServiceAccessManagementAccess

v1 / 7/21/2026

AWSManagedControlPolicyManagementAccess

v1 / 7/21/2026

AWSManagedAdvancedFeaturesActivationAccess

v1 / 7/21/2026

AWSTransformInfrastructureExecutorAccessEC2

v1 / 7/20/2026

AWSTransformInfrastructureExecutorAccessBatch

v1 / 7/20/2026

View all 45 new policies
Free - No account needed

Get notified when policies change

Daily or weekly email digests with inline diffs. Pick specific policies or track them all.

Subscribe

Endpoint Signals

46 regions, 307 services tracked from botocore

Expansiondrsap-east-2ap-southeast-5ap-southeast-7+1aws
Expansionomicsap-northeast-1us-east-2aws
New Serviceredshift-serverless (1 endpoint)aws-eusc
Expansionguarddutyus-iso-west-1aws-iso
Expansionbackupus-isob-west-1aws-iso-b
View all endpoint changes

Policy Creation by Year

Number of AWS managed policies first tracked each year

176
20
143
21
119
22
150
23
154
24
135
25
99
26
2020976 total policies2026

Largest Policy

4385 actions

AWSSupportServiceRolePoli...

AWS Services Tracked

445

IAM service namespaces over time

IAM Actions (literals)

14,927

Distinct action strings in managed policies (no wildcards)

Year-over-Year Velocity

Total policy commits per year - new launches vs. updates

629 total (176 new, 453 updates)
20
488 total (143 new, 345 updates)
21
552 total (119 new, 433 updates)
22
669 total (150 new, 519 updates)
23
606 total (154 new, 452 updates)
24
753 total (135 new, 618 updates)
25
466 total (99 new, 367 updates)
26
UpdatesNew launches4,163 total commits tracked

Excludes 4 bulk-reformat day(s) where detection logic changes caused false-positive diffs.

Policy Lifecycle

Current version distribution across all policies

v1
641
v2
241
v3
181
v4
118
v5
66
v6-10
232
v11-20
92
v21+
40

40% of policies (641) are still at v1 - created once and never updated.

Most revised

ReadOnlyAccessv188AWSConfigServiceRolePolicyv93SecurityAuditv91SageMakerStudioProjectProvisioningRolePolicyv81SageMakerStudioProjectUserRolePolicyv72

Monthly Seasonality

Policy change volume by calendar month across all years

257
Jan
277
Feb
326
Mar
368
Apr
326
May
392
Jun
352
Jul
296
Aug
269
Sep
316
Oct
634
Nov
350
Dec
re:Invent season (Nov-Dec) - 42% above average

re:Invent Pulse

Policy changes during the Nov 15 - Dec 15 window each year

100 changes, 50 new
20
107 changes, 34 new
21
87 changes, 29 new
22
129 changes, 25 new
23
138 changes, 59 new
24
145 changes, 33 new
25
UpdatesNew launches

Recently Updated

AmazonODBFullAccess

Today/ 1 version

AWSArtifactComplianceInquiriesFullAccess

Today/ 2 versions

AWSApplicationMigrationFullAccess

Today/ 12 versions

AWSManagedSettingsReadOnlyAccess

Today/ 2 versions

AmazonRDSPerformanceInsightsFullAccess

Today/ 5 versions

AWSManagedSettingsAdminAccess

Today/ 2 versions

AmazonRDSPerformanceInsightsReadOnly

Today/ 5 versions

CloudFormationStackSetsOrgMemberServiceRolePolicy

Yesterday/ 3 versions

AWSElasticDisasterRecoveryFailbackPolicy

Yesterday/ 3 versions

SageMakerStudioDomainExecutionRolePolicy

Yesterday/ 10 versions

Most Volatile (Trailing 12 Months)

ReadOnlyAccess19 changesSageMakerStudioProjectUserRolePolicy19 changesSageMakerStudioProjectProvisioningRolePolicy18 changesAWSResourceExplorerServiceRolePolicy14 changesSageMakerStudioUserIAMDefaultExecutionPolicy14 changesSageMakerStudioUserIAMPermissiveExecutionPolicy13 changesSageMakerStudioAdminIAMDefaultExecutionPolicy12 changesSecurityAudit12 changesAWSConfigServiceRolePolicy11 changesSageMakerStudioAdminIAMPermissiveExecutionPolicy11 changes

Newest Policies

AmazonODBFullAccess

Today

AWSArtifactComplianceInquiriesFullAccess

Today

AWSApplicationMigrationFullAccess

Today

AWSManagedSettingsAdminAccess

Today

AWSManagedSettingsReadOnlyAccess

Today

AmazonRDSPerformanceInsightsFullAccess

Today

AmazonRDSPerformanceInsightsReadOnly

Today

CloudFormationStackSetsOrgMemberServiceRolePolicy

Yesterday

AWSElasticDisasterRecoveryFailbackPolicy

Yesterday

SageMakerStudioDomainExecutionRolePolicy

Yesterday

Oldest Policies

AWSOpsWorksRegisterCLI

7y 5m ago

AmazonMachineLearningRoleforRedshiftDataSource

7y 5m ago

TagGovernancePolicy

7y 5m ago

AWSLambdaReplicatorInternal

7y 1m ago

AmazonEverestServicePolicy

6y 11m ago

AWSB9InternalServicePolicy

6y 10m ago

AWSBackupAdminPolicy

6y 10m ago

AWSBackupOperatorPolicy

6y 10m ago

AWSCloudTrailFullAccess

6y 10m ago

AWSDataPipelineRole

6y 10m ago