• DETECTION
  • AUDIT
  • REVIEW
  • DECISION

How to verify IAM policy modifications with your AI

Connect Deep Diff Engine to your AI client once. From there, you can hand it two versions of a policy and get a precise breakdown of what changed.

Ask AI about this page

Short answer

How can I check for IAM policy changes using AI?

Your AI uses the Deep Diff Engine to compare the JSON structure of an old policy against a new one. It identifies every specific permission added or removed so you don't have to hunt through lines of code. You'll see exactly where the security posture shifted.

The results

Where the changes land.

The AI processes the raw JSON and sorts the results into these specific outcomes.

DETECTION

Exact permission diffs

The AI uses the diff tool to isolate specific JSON changes. You get a clear list of what was added or removed without the noise.

AUDIT

Security drift alerts

The AI identifies when a policy has become too permissive. You can quickly spot unauthorized privilege escalations.

REVIEW

Human-ready summaries

The AI translates complex JSON changes into plain English. You get a readable report to present to your security team.

DECISION

Manual approval required

The AI flags the changes, but you decide if the new policy is safe. It won't apply the changes to your cloud environment for you.

The workflow

What your AI does when the policy data arrives.

The AI handles the heavy lifting of structural comparison so you can focus on the security implications.

  1. Ingest JSON

    Your AI pulls the current and proposed IAM policy structures from your provided sources.

    calculate_json_diff

  2. Calculate differences

    The engine performs a deep comparison of the two JSON objects to find every structural mismatch.

    calculate_json_diff

  3. Identify shifts

    The AI maps the raw diff data to specific IAM actions, such as new 'Allow' statements or removed 'Deny' blocks.

    calculate_json_diff

  4. Draft report

    The AI organizes the findings into a concise summary of permission changes for your review.

    calculate_json_diff

Try it

Copy these to start.

Use these prompts to kick off a comparison.

Starting points

These are opening lines. Swap the bracketed text with your actual policy data or file paths.

Deep Diff Engine Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_O5wa4YabuE6ETZnARIxqA2hgMHDub30xihBar1fa/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Deep Diff Engine capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "deep-diff-engine-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_O5wa4YabuE6ETZnARIxqA2hgMHDub30xihBar1fa/mcp"
    }
  }
}
Copy into chat04

  • Compare these two IAM policies and tell me exactly which permissions were added: [Paste Policy A] and [Paste Policy B]

  • Check this new JSON policy against my baseline and list every deleted permission: [Paste New Policy]

  • I'm worried about privilege escalation. Diff these two policies and highlight any new 'Allow' statements: [Paste Policies]

  • Summarize the structural differences between these two security configurations: [Paste Policy 1] and [Paste Policy 2]

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Deep Diff Engine once, then ask.

Just click to connect. Your credentials stay encrypted, and you can immediately start asking your AI to diff JSON files.

Connect Deep Diff Engine to your AI

FAQ

How this task behaves

  • 01

    Can the AI automatically update my AWS policies?

    No. The AI only compares the JSON data. You must manually apply any changes to your cloud environment.

  • 02

    Does it work with non-IAM JSON files?

    Yes. As long as the data is structured as JSON, the engine can calculate the differences between the two objects.

  • 03

    Will the AI delete my original policy files?

    No. The AI only reads the data you provide to perform the comparison. It has no permission to delete or modify your files.

  • 04

    Can it detect changes in nested JSON objects?

    Yes. The engine is designed to find exact differences within deep JSON structures, not just top-level keys.

  • 05

    Do I need to provide both versions of the policy?

    Yes. To find a difference, the AI needs both the original version and the modified version to compare.

  • More questions about Deep Diff Engine? The Connector page answers them. See everything the Deep Diff Engine Connector can do

Connect Deep Diff Engine to Claude, Cursor, ChatGPT & more