CCloud Releases
Home
Following

Cloud Releases

Service catalogues and updates come from each provider's public product listing and announcements.

Explore

  • Home
  • Latest updates
  • Following

About

  • About
  • Contact
  • Privacy Policy
  • Terms of Use

Providers

  • Amazon Web Services
  • Microsoft Azure
  • Google Cloud
  • Cloudflare

Not affiliated with any cloud provider. Product names and logos belong to their owners.

  1. Providers
  2. ›Amazon Web Services
  3. ›AWS Identity and Access Management
  4. ›Update

Feature•May 8, 2026

IAM Policy Autopilot adds Java support and Terraform-aware policy generation

AWS Identity and Access ManagementAWS · Security, Identity, & Compliance

IAM Policy Autopilot now supports Java applications and Terraform-aware policy generation, expanding its language coverage and its ability to generate less permissive IAM policies from code. IAM Policy Autopilot is an open-source tool launched at re:Invent 2025 that helps builders quickly and deterministically create baseline IAM policies on AWS that you can refine as your application evolves, reducing the time you spend writing IAM policies and troubleshooting access issues.

Java has been one of the most requested languages from IAM Policy Autopilot users. With this release, Java developers can now analyze their application source code to generate AWS IAM policies, joining Python, TypeScript, and Go as supported languages. In addition, IAM Policy Autopilot can now cross-reference Terraform resource definitions with SDK calls in your application code to resolve actual resource ARNs for each IAM action. For example, a policy generated for an application that calls S3 GetObject will now reference the specific bucket defined in Terraform rather than defaulting to wildcard (*) resources.

IAM Policy Autopilot is available at no additional cost and can be used from your own machine. To get started, visit the IAM Policy Autopilot GitHub repository.

Read the original announcement↗

More from AWS Identity and Access Management

All AWS Identity and Access Management updates →

  1. AWS IAM outbound identity federation now supports interface VPC endpoints for OIDC discovery

    AWS Identity and Access Management (IAM) outbound identity federation now supports Amazon Virtual Private Cloud (VPC) endpoints for the OpenID Connect (OIDC) discovery APIs.

    AWS Identity and Access Management•Feature•Sep 25, 2026

  2. New AWS experience helps builders get started and ship faster

    Builders can now sign up for a new simplified experience that makes it faster to turn ideas into running code on AWS. AWS services provide an array of configuration options so that the largest enterprises can customize settings for their distinct needs.

    AWS Identity and Access Management•Feature•Sep 16, 2026

  3. AWS STS simplifies session token size limits and adds session token size monitoring

    AWS Security Token Service (STS) now enforces a single 4,096-byte size limit on session tokens. Previously, STS enforced separate limits on session token size and passed-in parameters (i.e., inline policies, managed policies, and session tags).

    AWS Identity and Access Management•Feature•Sep 15, 2026

  4. AWS improves regional resiliency for root user sign-in

    AWS root user sign-in is now served across US East (N. Virginia), US East (Ohio), and US West (Oregon), with sign-in traffic distributed across all three Regions. This change reduces reliance on US East (N. Virginia) and improves resiliency during service disruptions.

    AWS Identity and Access Management•Feature•Sep 14, 2026

  5. IAM Roles Anywhere now provides a Java plugin for the AWS SDK

    AWS Identity and Access Management (IAM) Roles Anywhere now provides a plugin for the AWS SDK for Java v2 that enables workloads running outside of AWS to obtain temporary AWS credentials directly within the Java application process.

    AWS Identity and Access Management•Feature•Aug 25, 2026