Principal Mapper (pmapper)

How can we quickly identify which users and roles have access to a given action (and resource) in an AWS account?

Erik Steringer built the Principal Mapper (pmapper) as the answer to that question. It uses the existing simulator APIs to determine which users and roles have access to each other. It provides a query interface on top of this data. When you check if a principal is able to do an action, pmapper is checking with the principal and any principals it has access to.

pmapper is available for download on the NCC Group GitHub:

Learn more about pmapper in Erik Steringer’s blog post.

Call us before you need us.

Our experts will help you.

Get in touch
%d bloggers like this: