PV2 ⊧ IAM Access Analyzergenerates findings covering a given access policy

Tool to help users reason about the semantics of their Identity and Access Management (IAM) policies.

Application domain/field

• Security policies
• Cloud
• Identity and Access Management (IAM)
• Resource policies
• Access control policy
• Predicate abstraction

Expected input

• Policy $p$
• Set of partially ordered predicates $\Phi$

Format:

• Policy: IAM policy language
• Set of predicates: ?

Expected output

Minimal covering of $p$ comprising only irreducible findings Findings are presented through a web console and APIs.

Internals

Uses Zelkova as access oracle.