AWS Toolkit

Start with ARN Parser whenever you need to make sense of a resource identifier — partition, service, region, account ID, and resource all broken out — or ARN Generator to go the other way: pick a resource type and build a correctly formatted ARN from plain fields. For access control, IAM Policy Generator builds a policy statement from plain fields, and IAM Policy Viewer does the reverse — paste one in and see each statement explained in plain English. Neither one tells you whether a specific action is actually allowed once every attached policy is combined — that's IAM Policy Simulator, which applies AWS's own evaluation logic across one or more policies at once. If a policy is too big for AWS's size limit, IAM Policy Minifier checks it against the real quota — which, for most policies, ignores whitespace entirely, so minifying alone rarely fixes it. Tagging standards across an organization are a different policy type entirely — AWS Tag Policy Validator checks a tag policy's tag_key/tag_value/enforced_for syntax and inheritance operators, where whitespace does count toward the size limit. Neither IAM Policy Generator nor IAM Policy Viewer covers resource-based policies — S3 Bucket Policy Generator builds one specifically, from four recipes: public read access, CloudFront OAC, cross-account access, or a fully custom statement with its own Principal field. AWS Region Explorer is a quick reference for Region codes, Availability Zone counts, and opt-in status. And before a template reaches a real deploy, CloudFormation Validator catches structural mistakes — a missing section, a dangling Ref, a malformed resource — entirely in your browser.