The IAM Policy Simulator moved from a standalone tool to integration within the IAM management console, allowing users to test and validate IAM policies without leaving policy management workflows. It now supports simulating service control policies (SCPs) alongside identity and resource policies, enabling comprehensive analysis of organizational policy hierarchies.
Additionally, the simulator can model removal of specific policies to assess impacts, perform condition key testing like regional restrictions and tag requirements, and provide detailed decisions per policy in cross-account scenarios. These improvements enhance automation, policy unit testing, and guardrail validation capabilities across AWS regions supporting IAM Simulator.
Source & further reading
IAM Policy Simulator moves to the IAM console and adds additional capabilities ↗Source published 2026-07-30. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.