CodeShield

Cloud IAM is complex. Service control policies, permission boundaries, resource- and identity-based policies define an invisible access network in your cloud. Analysing only the infrastructure-as-code is insufficient as it represents only a small fraction of the network - the actual referenced cloud resources are missing.
CodeShield analyses cloud and code changes to show the effective IAM permissions pre-deployment in your development workflow. It simulates the impact of your infrastructure-as-code changes to all your cloud resources - to your Lambdas, S3 buckets or DynamoDBs.