A collection of AI-powered identity and access management tools developed by the Instacart Security Team.
This repository contains security tools that utilize AI to streamline and enhance identity and access management workflows. These tools are designed to solve common security team challenges by automating decision-making processes and providing intelligent insights.
A powerful AI-driven tool for managing and redirecting users' requests for entitlements. AccessTailor helps security teams:
- Process access requests intelligently
- Streamline permission management workflows
- Generate contextually appropriate responses to entitlement requests
- Interface with various identity systems (AWS, GitHub, Okta, etc.)
An automated workflow that validates an approver's Out-of-Office status and redirects time-sensitive approval requests. OOO Checker:
- Detects when access approval requests are assigned to unavailable approvers
- Uses AI to analyze OOO messages and estimate return times
- Automatically reassigns tasks to appropriate backup approvers
- Prevents delays in critical access management workflows
A tool for analyzing AWS IAM roles against their actual usage in CloudTrail to identify and help reduce unused permissions, promoting least privilege security.
- Analyzes AWS IAM roles defined in Terraform against their actual usage in CloudTrail logs to identify unused permissions
- Compares defined permissions against real-world usage data to maintain least privilege security principles
- Supports two modes of operation: commenting on unused permissions or creating pull requests to remove them
- Integrates with Wiz or AWS CloudTrail as data sources for usage analysis
Learn more about Role-Engineer
Each tool has its own README with detailed setup and usage instructions. Please refer to the individual tool directories for specific requirements and configuration details.
- Python 3.x
- Additional dependencies are listed in the respective tool directories
We welcome contributions from the community! If you'd like to contribute:
- Fork the repository
- Create a feature branch (
git checkout -b feature/amazing-feature) - Commit your changes (
git commit -m 'Add some amazing feature') - Push to the branch (
git push origin feature/amazing-feature) - Open a Pull Request
This project is licensed under the Apache License 2.0 - see the LICENSE file for details.
This project is maintained by the Instacart Security Team:
- Dominic Zanardi
- Spencer Sheehan
- Stefan Petrovic
- Thanks to the entire Instacart Security Team for their support and feedback
- Special thanks to all contributors who help improve these tools