maheshcloud1/iam-xray repository overview

Visual IAM graphs, risk insights, & temporary access visibility.

⁠🛰 IAM X-Ray — AWS IAM Visualizer (v0.1.0-beta)

Instantly understand “Who can access what?” inside AWS IAM.
IAM X-Ray turns complex IAM permissions into a clean interactive attack graph so cloud engineers, developers, and security teams can debug IAM issues in seconds.

✔ No backend
✔ No cloud API
✔ Your IAM data stays on your machine
✔ Runs entirely inside Docker

⁠🌟 Key Features

⁠🕸 1. Interactive IAM Graph View

Visualizes relationships between:

• Users

• Groups

• Roles

• Policies

• Actions & resources

⁠🔎 2. Risk Indicators

IAM X-Ray automatically flags:

• Wildcard permissions ("*" actions)

• Privilege escalation paths

• Over-permissive roles

• Stale users

• High-risk policies

⁠🔒 3. Local-First Architecture

Your IAM snapshot never leaves the container or your laptop.

⁠🧪 4. Demo Mode Included

Instant preview of how the tool works without AWS credentials.

⁠🐳 Run IAM X-Ray (1 Command)

⁠Step 1 — Pull the image

docker pull maheshcloud1/iam-xray:v0.1.0-beta

⁠Step 2 — Run the container

docker run -p 8501:8501 maheshcloud1/iam-xray:v0.1.0-beta

⁠Option A — Use AWS CLI Profiles

docker run -p 8501:8501 \
  -v "${USERPROFILE:-$HOME}/.aws:/home/iamx/.aws:ro" \
  -v "$(pwd)/data:/app/data" \
  maheshcloud1/iam-xray:v0.1.0-beta

⁠Option B — Environment Variables

docker run \
  -e AWS_ACCESS_KEY_ID=YOUR_KEY \
  -e AWS_SECRET_ACCESS_KEY=YOUR_SECRET \
  -e AWS_SESSION_TOKEN=YOUR_TOKEN \
  -p 8501:8501 \
  maheshcloud1/iam-xray:v0.1.0-beta

Then open:

👉 http://localhost:8501⁠

⁠🔐 Use Your AWS Account (Env Keys Mode)

Fetch real IAM data securely using temporary credentials:

docker run \
  -e AWS_ACCESS_KEY_ID=YOUR_KEY \
  -e AWS_SECRET_ACCESS_KEY=YOUR_SECRET \
  -e AWS_SESSION_TOKEN=YOUR_TOKEN \
  -p 8501:8501 \
  maheshcloud1/iam-xray:v0.1.0-beta

No credentials are stored — IAM X-Ray only reads them at runtime.

⁠🧩 Use Your AWS CLI Profile (Recommended)

Mount your local ~/.aws folder into the container.

⁠Windows (PowerShell)

docker run ^
  -v "$env:USERPROFILE\.aws:/home/iamx/.aws:ro" ^
  -p 8501:8501 ^
  maheshcloud1/iam-xray:v0.1.0-beta

⁠*Mac/Linux

docker run \
  -v ~/.aws:/home/iamx/.aws:ro \
  -p 8501:8501 \
  maheshcloud1/iam-xray:v0.1.0-beta

IAM X-Ray will auto-detect your profiles inside the UI.

⁠🔑 Minimum IAM Permissions Needed

To fetch a complete IAM snapshot:

iam:List*
iam:Get*
iam:Simulate*
sts:GetCallerIdentity
organizations:ListAccounts (optional)

⁠🧪 Demo Mode (No Credentials Required)

If you don't have AWS credentials:

• Switch to Demo Mode in the sidebar

• IAM X-Ray loads a built-in snapshot

• All graph/table features remain fully functional

⁠💡 Tech Stack

• Python 3.11

• Streamlit UI

• PyVis graph engine

• Boto3 AWS integrations

• PyCryptography (encrypted snapshots)

• Multi-stage Docker build with obfuscated core

⁠🧱 Image Details

• Tag: v0.1.0-beta

• Size: ~200 MB

• Arch: linux/amd64 (ARM build coming soon)

• Digest: sha256:48d06bdd1…

⁠🐞 Known Issues (Beta)

• Very large IAM accounts (>10k principals) may require 2–3 GB RAM

• Graph layout can take a few seconds on huge snapshots

• AWS Organizations data optional, not required

⁠🤝 Feedback & Support

I’d love your feedback to improve IAM X-Ray.

📩 DM: LinkedIn / Instagram
🔧 GitHub Repo: https://github.com/MaheshShukla1/IAM-X-Ray⁠ 🐛 Found a bug? Open an Issue once GitHub releases go live.