[bastawhiz]

> 3 IAM policies per month

This is... Not a useful number of policies. I've got a terraform setup for my one person business and I probably have two orders of magnitude more policies than this.

Who is this targeted at? Which policies am I supposed to use these three on? What kind of service only has three policies? How am I supposed to evaluate your service with this small number of policies? The problem is that they might be the "perfect" global maximum goodness policies, but they exist in a web of policies that all need to be correct together. So three does nothing to show me how good your service is, and it's not useful (afaict) for ongoing work.

Here's how I can see you fixing this:

- Just charge me. Give me a trial. Let me pay up front and have a money back policy. Let me generate what I need and see whether it's useful.

- Give me unlimited free policies, but charge for things like tightening down resource access (e.g., narrowing access to specific S3 buckets instead of just narrowing access to S3).

[DanielSlauth]

Thank you for the feedback!! We needed something to start of with but your arguments are very fair so we will have to change it. Would you like to sign up for the Beta and give it a try? Would absolutely love your opinionated feedback :D Also, how much would you pay? Could you give us some insights there.

[bastawhiz]

If you dumped out terraform code for policies, I'd probably pay up to $150/mo for some very reasonable number of policies (200?).

[DanielSlauth]

Nice! Will work on the pricing tiers and features. Regardless, would love for you to test it out and we can agree on the above $150/mo for 200 policies :)

[distantsounds]

https://flosell.github.io/iam-policy-json-to-terraform/

you can do this for free

[bastawhiz]

I don't need to convert JSON to TF. I need someone to tell me which policies are too lax and give me the Terraform code that should replace them.