awslabs/iam-policy-autopilot 0.2.3 on GitHub

Variable type tracking for boto3 clients and resources — improves extraction precision when clients are passed across function boundaries (#128)
Support for boto3.Session().client() / .resource() patterns in variable type tracking (#232)
--resource-cutoff CLI flag and resource_cutoff MCP input to configure when resource lists collapse to * (#217)
Support for namespace imports in TypeScript/JavaScript (#190)
Added partial support for permissions needed by aws-lambda-powertools (#186)

We now respect the system's native certificate store instead of using bundled certificates (#209)
--explain now shows every call site when the same operation appears multiple times (#188)
Condition values for the same key are now merged instead of overwritten when serializing policies (#199)

EnrichmentEngine::new now requires a resource_cutoff parameter; use DEFAULT_RESOURCE_CUTOFF to preserve existing behavior (#217)