Repokid
Repokid automatically removes unused service permissions from AWS IAM role inline policies using Access Advisor data to implement least privilege access.
Repokid automatically removes unused service permissions from AWS IAM role inline policies using Access Advisor data to implement least privilege access.
Checked October 2026.
Repokid is an AWS IAM permission management tool that automatically removes unused service permissions from IAM role inline policies.
The tool integrates with Access Advisor through Aardvark to analyze service usage patterns and identify permissions that grant access to services that are not being utilized. It operates by scanning IAM roles within an AWS account and removing permissions for services that have not been accessed.
Repokid requires a DynamoDB table for storing role information and uses specific table structures with primary keys and global secondary indexes for efficient data organization. The tool supports both cloud-based and local development environments, with Docker Compose available for local DynamoDB instances.
The system requires appropriate IAM permissions to function across AWS accounts and can be configured through a JSON configuration file. It provides a systematic approach to implementing the principle of least privilege by automatically pruning unnecessary permissions from IAM roles.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Repokid: features, pricing and alternatives.
Repokid is a product in the CIEM category. It covers Least Privilege, Open Source and AWS.
Repokid is free. Download and setup instructions are at https://github.com/Netflix/repokid/.
Alternatives to Repokid listed on CybersecTools:
Compare all Repokid alternatives at https://cybersectools.com/alternatives/repokid
Repokid is available as cloud or on-premises (hybrid). It is listed for small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
CIEM platform for multicloud identity visibility, monitoring, and remediation.
Policy Sentry is an automated IAM policy generator that helps developers create least privilege AWS IAM policies through a template-based workflow.
Principal Mapper is a Python tool that models AWS IAM configurations as directed graphs to identify privilege escalation risks and alternative attack paths in AWS environments.
Cloud security platform for identity & access risk analysis across Azure/M365
Agentless CIEM tool for managing cloud entitlements & enforcing least privilege.
Manages cloud identity access with zero standing privileges and JIT provisioning
On our shortlist?
No shortlist covers this product's category yet. The closest is Best IAM Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,021 products.
Connect your AI
