devolv 0.1.0

Modular DevOps Toolkit with IAM policy validation

devolv-validator

devolv-validator is a Python CLI tool that statically validates AWS IAM policies (JSON or YAML) for risky patterns such as wildcards, privilege escalation risks, and bad practices.

🚀 Features

• 🚩 Detects wildcards in Action and Resource
• 🔐 Flags iam:PassRole on wildcard Resource
• 📂 Supports both JSON and YAML formats
• ⚙️ Clean CLI built with Typer
• ✅ Ready for CI with GitHub Actions

📦 Installation

pip install devolv-validator

🛠 Usage

devolv-validator validate path/to/policy.json

📁 Example

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "*",
      "Resource": "*"
    }
  ]
}

This policy will be flagged with high-severity warnings.

🧪 Run Tests

pytest

🧰 About

This is part of the devolv OSS DevOps toolkit.