IAM Expand
See what your wildcards actually grant
Reveal the full list of actions masked by * wildcards, so you always know the exact scope of the policy you're shipping.
Explore on GitHub
When to use
Audit wildcards
See every single action a blanket * actually grants.
Check the blast radius
Know exactly what's exposed before you ship to prod.
Catch sneaky permissions
Make sure admin or write access hasn't quietly slipped into a "read-only" policy.
Start expanding
Policy document or Actions to expand
Expanded content
Expansion options
Output options