AWS IAM policy simulator now tests SCPs, making denied-request debugging far easier

DigitalColmer · x · 2026-11-05

AWS has updated its IAM Policy Simulator: you can now test Service Control Policies (SCPs) in the simulator, and the simulator shows up as an option directly in the IAM console.

When troubleshooting a principal (role or user), the simulator surfaces every policy type that could be blocking access:

Instead of guessing which policy denies a request, you can now see it directly — a meaningful QoL upgrade for anyone securing or debugging AWS environments.

Original post →

More from Infra

Infra channel →