Sorry, I missed your reply. It's a very small project by a friend of mine so I'm not surprised it doesn't get a lot of love: http://github.com/brycehans/toolgate

I really appreciate the flexibility of the rules. For example I have it auto-approve `aws` cli operations when using a read-only --profile flag, but have it always ask for a privileged profile