dump IAM policies

dump-policy.py

import json

import boto3

iam = boto3.client("iam")

list_policies = iam.get_paginator("list_policies")
for page in list_policies.paginate(Scope="Local"):
    for policy in page["Policies"]:
        tags = iam.list_policy_tags(Arn=policy["Arn"])["Tags"]
        tags = {x["Key"]: x["Value"] for x in tags}
        if tags.get("Group", "") != "primary":
            continue

        version = iam.get_policy_version(
            PolicyArn=policy["Arn"], VersionId=policy["DefaultVersionId"]
        )
        with open(
            "{PolicyName}.json".format_map(policy), "w", encoding="UTF-8"
        ) as file:
            json.dump(
                version["PolicyVersion"]["Document"],
                file,
                ensure_ascii=False,
                indent=4,
            )