Cloud Identity and Role Permission Audit
Check roles for least privilege.
Added October 15, 2026. Written with AI assistance and checked for clarity and placeholders; not reviewed by a lawyer, accountant, clinician or other professional. How these prompts are made
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
Audit cloud identity and permissions. Export of users, groups, roles and policies with names changed: [IAM_EXPORT]. Which roles are used by people and which by services: [ROLE_USE]. Last used dates if available: [LAST_USED]. Find wildcard permissions, unused roles, long-lived keys, users with admin rights, roles shared by many services, missing separation between environments and permissions that allow privilege escalation, at a conceptual level. Do not write attack steps. Return a table with Identity, Permission, Concern (red, amber, green) and Narrower alternative, a clean-up order, and a rollback plan for each change. Also suggest how to review service accounts and keys on a schedule, how to alert on new admin grants, and how to document the purpose of each role so that future reviewers do not guess. Report findings so the owner can fix them: describe the weakness class and the remediation, not a working attack. If a finding looks like a live compromise, tell me to isolate the system and involve the incident owner.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.