# AWS IAM & Cloudflare Zero Trust Policy Validator

> AWS IAM & Cloudflare Zero Trust Policy Validator is a paid API for AI agents from x402-hono-api.inraby.workers.dev, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-14).

Validates AWS IAM and Cloudflare Zero Trust policy JSON for risky wildcards, bypass rules, weak scoping, and embedded secrets

## Facts

- Endpoint: POST https://x402-hono-api.inraby.workers.dev/api/v1/validate-policy
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/aws-iam-cloudflare-zero-trust-policy-validator-7d04af74
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ZyYDhIM8G8T9j9Jr_bWGo

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability aws-iam-cloudflare-zero-trust-policy-validator-7d04af74 -d '<json body>'
```

Example prompt: Can you check this AWS IAM policy JSON for me and flag any dangerous wildcards, bypass rules, weak scoping, or embedded secrets? Here's the policy: {"Version":"2012-10-17","Statement":[{"Effect":"Allow","Action":"*","Resource":"*"}]}

## When to prefer this

Use this endpoint when you need to audit AWS IAM or Cloudflare Zero Trust policies specifically for security misconfigurations including wildcards, bypass patterns, and embedded secrets — especially before deploying policies to production. Prefer this over generic linters when you need security-focused risk detection combining both IAM and Cloudflare policy formats in a single call.

## Known failure modes

- Invalid or malformed JSON returns a parse error
- Empty rawPolicyText field returns a validation error
- Policy type not recognized (neither IAM nor Cloudflare) may reduce detection accuracy
- Payment not processed results in 402 response
- Oversized policy documents may be rejected or truncated

## How this service works

Validate AWS IAM and Cloudflare Zero Trust policy JSON for risky wildcards, bypass rules, weak scoping, and embedded secrets.

## Output

Returns a structured analysis of the submitted policy JSON, identifying specific risky patterns such as wildcard actions or resources, bypass rules, overly broad scoping, and any embedded secrets or credentials found within the policy document.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "rawPolicyText": {
   "type": "string",
   "description": "IAM or Cloudflare Access policy JSON"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/aws-iam-cloudflare-zero-trust-policy-validator-7d04af74/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-hono-api.inraby.workers.dev](https://www.zero.xyz/host/x402-hono-api.inraby.workers.dev/llms.txt)