perms.py

import sys
import json

from c7n.config import Config
from c7n.resources import load_resources
from c7n.policy import load

def main():
   if not len(sys.argv) == 3:
       print('usage policy.yml permissions.json')
       return

   ifile = sys.argv[1]
   ofile = sys.argv[2]

   load_resources()
   policies = load(Config.empty(), ifile)

   policy_perms = {}

   for p in policies:
      perms = p.get_permissions()
      perms = list(perms)
      perms.sort()
      policy_perms[p.name] = list(perms)

   with open(ofile, 'w') as f:
      f.write(json.dumps(policy_perms, indent=2))


if __name__ == '__main__':
    main()