AWS IAM Service Principal Snippets for VS Code

This VS Code extension provides autocompletion of all AWS services that can be used as Service Principals in your IAM policies.
[!TIP]
Launch Faster on AWS and Become Fully Secure From Day One! Our AWS Landing Zone Foundation service helps B2B companies achieve SOC 2 compliance 90% faster, redirect 30% of engineering time back to product development all while eliminating the six-figure cost of specialized cloud engineers. so you can focus on shipping your product, instead of worrying about managing your infrastructure on AWS.
Schedule a free introduction call to discover how we can deliver 10x the value of securing and building your infrastructure on AWS for a fraction of the cost of a full-time cloud engineer.
☁️ Learn more about our unique AWS Foundation Service
Is AWS complexity draining your engineering resources? Most B2B startups and growing businesses struggle with overwhelming configuration options, time-consuming compliance requirements, and diverting valuable developer talent away from core product development. Without specialized AWS expertise, you risk security vulnerabilities, mounting technical debt, and delayed time-to-market. All while your competitors race ahead.
Traditional AWS consultancies only compound this problem. They're incentivized to bill by the hour, extending projects indefinitely rather than focusing on your business outcomes. We take the opposite approach. Our fixed-price subscription model proves how confident we are in delivering results, not just billable hours. We succeed when you succeed, aligning our incentives with your growth rather than your AWS complexity.
Our Solution: Enterprise-Grade AWS Foundation
We deliver an enterprise-grade AWS Landing Zone built entirely in AWS CDK coupled with a support and consultacy foundation that grows with your business needs. Here's what we'll deliver to you:
- Multi-account architecture with proper security boundaries
- Setup entirely using AWS CDK (Infrastructure as Code)
- Budget monitoring and notifications across all accounts
- Deploy changes quickly through GitHub Actions
- We're continuously adding new features as listed on our Roadmap
We upskill and accelerate your Developers
- They gain access to our library of ready-to-use, security-hardened AWS CDK components
- They receive guidance on how to utilize AWS best practices for your architecture so you avoid technical debt later on
We monitor and maintain the multi-account setup & provide ongoing support
- Gain new Landing Zone features once they're released and get free maintenance and security updates
- Get priority support through Slack/Teams whenever you need assistance with infrastructure challenges
- We proactively do quarterly security and cost optimization assessments to verify AWS account compliance and provide advice to reduce your AWS bill
What This Means For Your Business
- 30% Lower TCO: Cut your Total Cost of Ownership (TCO) by up to 30% through right-sized resources and architectural optimization while eliminating the $150K+ annual cost of a specialized AWS hire
- Close Enterprise Deals Faster: Win enterprise clients with SOC2 compliance ready in weeks instead of months - our clients report 50% faster sales cycles with security-conscious customers
- Unleash Your Development Team: Redirect up to 30% of engineering time from infrastructure back to revenue-generating product features with our pre-built, compliant components
- Scale Without Infrastructure Headaches: Grow from startup to enterprise without ever rebuilding your foundation - our architecture scales seamlessly from your first customer to your millionth
We deliver all of this as a simple subscription service. No large upfront costs, no lock-in. You'll essentially get a solid and secure landing zone foundation + a decade of AWS expertise without having to hire a full-time Cloud Engineer.

Features
- Auto-completion for AWS Service Principals: Provides intelligent auto-completion suggestions for AWS Service Principals when defining IAM policies or roles.
- Context-aware Suggestions: The extension intelligently detects when you're working with IAM policies or roles and only suggests Service Principal completions in relevant contexts.
- Supports Multiple Languages: Supports auto-completion for Service Principals in JSON, YAML, Terraform, and AWS CDK (TypeScript, and Python).
Usage
- Install the "AWS IAM Service Principal Snippets" extension in VS Code.
- Open or create a new file (
.json
, .yml
, .tf
, .ts
, or .py
) where you're defining IAM policies or roles.
- When you reach a point where you need to specify a Service Principal (e.g.,
Principal
key in JSON/YAML policies, assumed_by
parameter in Python roles, etc.), start typing the name of the AWS service.
- The extension will provide auto-completion suggestions for matching AWS Service Principals.
- Select the desired Service Principal to insert it into your code.
Example of auto-completion in action:

Note: If auto-completion doesn't trigger automatically, press Ctrl+Space
(or Cmd+Space
on macOS) to manually invoke IntelliSense.
Support
If you have a feature request or an issue, please let me know on Github
Author
Danny Steenman
