# Repokid Repokid is a CIEM product. It runs in the cloud or on-premises (hybrid). Pricing is free. Repokid automatically removes unused service permissions from AWS IAM role inline policies using Access Advisor data to implement least privilege access. Checked October 2026. ## What is Repokid? Repokid is an AWS IAM permission management tool that automatically removes unused service permissions from IAM role inline policies. The tool integrates with Access Advisor through Aardvark to analyze service usage patterns and identify permissions that grant access to services that are not being utilized. It operates by scanning IAM roles within an AWS account and removing permissions for services that have not been accessed. Repokid requires a DynamoDB table for storing role information and uses specific table structures with primary keys and global secondary indexes for efficient data organization. The tool supports both cloud-based and local development environments, with Docker Compose available for local DynamoDB instances. The system requires appropriate IAM permissions to function across AWS accounts and can be configured through a JSON configuration file. It provides a systematic approach to implementing the principle of least privilege by automatically pruning unnecessary permissions from IAM roles. Tags: Least Privilege, Open Source, AWS, Permissions ## Where it fits in your security program (NIST CSF 2.0) - [Protect](https://cybersectools.com/guides/building-protect-program-small-team): helps you prevent attacks and keep data safe. ## Quick facts - Category: [IAM](https://cybersectools.com/categories/iam) ยท [CIEM](https://cybersectools.com/categories/ciem) - Deployment: Hybrid - Company size fit: SMB, Mid-Market, Enterprise - Pricing model: Free - GitHub stars: 1,142 - Website: github.com ## Where it ranks No shortlist covers this product's category yet. The closest is [Best IAM Solutions for Business](https://cybersectools.com/shortlists/best-iam-solutions). ## Repokid FAQ ### What is Repokid? Repokid is a product in the CIEM category. It covers Least Privilege, Open Source and AWS. ### What is the pricing for Repokid? Repokid is free. Download and setup instructions are at https://github.com/Netflix/repokid/. ### What are alternatives to Repokid? Alternatives to Repokid listed on CybersecTools: 1. [Teriam Cloud Identity and Access Management](https://cybersectools.com/tools/teriam-cloud-identity-and-access-management) - Consolidates and remediates multi-cloud identity and access risk across AWS, Azure (Commercial) 2. [AWS IAM Access Analyzer](https://cybersectools.com/tools/aws-iam-access-analyzer) - AWS IAM Access Analyzer is a tool for implementing and maintaining least privilege access in AWS environments through automated analysis and validation of IAM policies and permissions. (Commercial) 3. [Sysdig Cloud Infrastructure Entitlement Management (CIEM)](https://cybersectools.com/tools/sysdig-cloud-infrastructure-entitlement-management-ciem) - Cloud identity entitlement mgmt. for right-sizing perms & detecting compromise (Commercial) 4. [Sonrai Cloud Permissions Firewall](https://cybersectools.com/tools/sonrai-cloud-permissions-firewall) - Automates least privilege enforcement in cloud via centralized policies & ChatOps (Commercial) 5. [Simeio Cloud Infrastructure Entitlement Management (CIEM)](https://cybersectools.com/tools/simeio-cloud-infrastructure-entitlement-management-ciem) - Managed CIEM service for multi-cloud permission & entitlement management (Commercial) Compare all Repokid alternatives at [https://cybersectools.com/alternatives/repokid](https://cybersectools.com/alternatives/repokid) ### What deployment and organization size does Repokid fit? Repokid is available as cloud or on-premises (hybrid). It is listed for small businesses, mid-market companies and enterprises. It is free. ## Compare Repokid with similar solutions - [Repokid vs Teriam Cloud Identity and Access Management](https://cybersectools.com/compare/repokid-vs-teriam-cloud-identity-and-access-management) - [Repokid vs AWS IAM Access Analyzer](https://cybersectools.com/compare/aws-iam-access-analyzer-vs-repokid) - [Repokid vs Sysdig Cloud Infrastructure Entitlement Management (CIEM)](https://cybersectools.com/compare/repokid-vs-sysdig-cloud-infrastructure-entitlement-management-ciem) All alternatives to Repokid: [/alternatives/repokid](https://cybersectools.com/alternatives/repokid) --- Source: https://cybersectools.com/tools/repokid For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL). More on Repokid: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md