devolv 0.1.1

Modular DevOps Toolkit with IAM policy validation

devolv-validator

devolv-validator is a subtool of the Devolv OSS DevOps Toolkit.
It statically validates AWS IAM policies (JSON or YAML) for risky patterns such as wildcards, privilege escalation, and misconfigurations.

---

🚀 Features

• 🚩 Detects wildcards in Action and Resource
• 🔐 Flags iam:PassRole with wildcard Resource
• 📂 Supports both JSON and YAML input
• ⚙️ Simple CLI using Typer
• ✅ CI-ready with GitHub Actions

---

📦 Installation

Install the full Devolv toolkit:

pip install devolv

---

🛠 Usage

devolv validate file path/to/policy.json

---

📁 Example

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "*",
      "Resource": "*"
    }
  ]
}

This will be flagged as high-risk due to overly permissive wildcards.

---

🧪 Run Tests

pytest

---

🧰 About

This tool is part of the Devolv OSS Toolkit, a growing collection of DevOps-first security and automation tools.

Follow the repo for upcoming modules like:

• devolv scan: analyze AWS infrastructure
• devolv generate: produce IAM policies safely
• devolv etl: secure CI/CD for policy transformation

---