diff --git a/parliament/statement.py b/parliament/statement.py
index bf663c9..cd9ab34 100644
--- a/parliament/statement.py
+++ b/parliament/statement.py
@@ -632,6 +632,15 @@ class Statement:
         else:
             self.effect_allow = False
 
+        # Check Sid
+        if "Sid" in self.stmt and not re.fullmatch("[0-9A-Za-z]*", self.stmt["Sid"]):
+            self.add_finding(
+                "Statement Sid does match regex [0-9A-Za-z]*",
+                severity.MALFORMED,
+                location={"string": self.stmt},
+            )
+            return False
+
         # Check Action
         if "Action" in self.stmt and "NotAction" in self.stmt:
             self.add_finding(

Validate Statement Id values
If set, the `Sid` field in IAM policies may only contain characters from `(A-Z,a-z,0-9)`. `parliament` should declare a finding if `Sid` has spaces or other invalid characters. 
diff --git a/tests/unit/test_formatting.py b/tests/unit/test_formatting.py
index 98233d9..9a395e1 100644
--- a/tests/unit/test_formatting.py
+++ b/tests/unit/test_formatting.py
@@ -41,6 +41,18 @@ class TestFormatting(unittest.TestCase):
         )
         assert_false(len(policy.findings) == 0, "Policy has no Statement")
 
+    def test_analyze_policy_string_invalid_sid(self):
+        policy = analyze_policy_string(
+            """{
+    "Version": "2012-10-17",
+    "Statement": {
+        "Sid": "Statement With Spaces And Special Chars!?",
+        "Effect": "Allow",
+        "Action": "s3:listallmybuckets",
+        "Resource": "*"}}"""
+        )
+        assert_false(len(policy.findings) == 0, "Policy statement has invalid Sid")
+
     def test_analyze_policy_string_correct_simple(self):
         policy = analyze_policy_string(
             """{

pip install -e .[dev]
parse_log_pytest
nose coverage pytest
3.7
pytest --no-header -rA --tb=line --color=no -p no:cacheprovider -W ignore::DeprecationWarning
astroid==2.15.8
autoflake==2.1.1
autopep8==2.0.4
boto3==1.33.13
botocore==1.33.13
certifi @ file:///croot/certifi_1671487769961/work/certifi
coverage==7.2.7
dill==0.3.7
exceptiongroup==1.2.2
importlib-metadata==6.7.0
iniconfig==2.0.0
isort==5.11.5
jmespath==1.0.1
lazy-object-proxy==1.9.0
mccabe==0.7.0
nose==1.3.7
packaging==24.0
-e git+https://github.com/duo-labs/parliament.git@c06bcde102981010baa7a7fe70ab35a2595d6f9b#egg=parliament
platformdirs==4.0.0
pluggy==1.2.0
pycodestyle==2.10.0
pyflakes==3.0.1
pylint==2.17.7
pytest==7.4.4
python-dateutil==2.9.0.post0
PyYAML==6.0.1
s3transfer==0.8.2
six==1.17.0
tomli==2.0.1
tomlkit==0.12.5
typed-ast==1.5.5
typing_extensions==4.7.1
urllib3==1.26.20
wrapt==1.16.0
zipp==3.15.0

name: parliament
channels:
  - defaults
  - https://repo.anaconda.com/pkgs/main
  - https://repo.anaconda.com/pkgs/r
  - conda-forge
dependencies:
  - _libgcc_mutex=0.1=main
  - _openmp_mutex=5.1=1_gnu
  - ca-certificates=2025.2.25=h06a4308_0
  - certifi=2022.12.7=py37h06a4308_0
  - ld_impl_linux-64=2.40=h12ee557_0
  - libffi=3.4.4=h6a678d5_1
  - libgcc-ng=11.2.0=h1234567_1
  - libgomp=11.2.0=h1234567_1
  - libstdcxx-ng=11.2.0=h1234567_1
  - ncurses=6.4=h6a678d5_0
  - openssl=1.1.1w=h7f8727e_0
  - pip=22.3.1=py37h06a4308_0
  - python=3.7.16=h7a1cb2a_0
  - readline=8.2=h5eee18b_0
  - setuptools=65.6.3=py37h06a4308_0
  - sqlite=3.45.3=h5eee18b_0
  - tk=8.6.14=h39e8969_0
  - wheel=0.38.4=py37h06a4308_0
  - xz=5.6.4=h5eee18b_1
  - zlib=1.2.13=h5eee18b_1
  - pip:
      - astroid==2.15.8
      - autoflake==2.1.1
      - autopep8==2.0.4
      - boto3==1.33.13
      - botocore==1.33.13
      - coverage==7.2.7
      - dill==0.3.7
      - exceptiongroup==1.2.2
      - importlib-metadata==6.7.0
      - iniconfig==2.0.0
      - isort==5.11.5
      - jmespath==1.0.1
      - lazy-object-proxy==1.9.0
      - mccabe==0.7.0
      - nose==1.3.7
      - packaging==24.0
      - platformdirs==4.0.0
      - pluggy==1.2.0
      - pycodestyle==2.10.0
      - pyflakes==3.0.1
      - pylint==2.17.7
      - pytest==7.4.4
      - python-dateutil==2.9.0.post0
      - pyyaml==6.0.1
      - s3transfer==0.8.2
      - six==1.17.0
      - tomli==2.0.1
      - tomlkit==0.12.5
      - typed-ast==1.5.5
      - typing-extensions==4.7.1
      - urllib3==1.26.20
      - wrapt==1.16.0
      - zipp==3.15.0
prefix: /opt/conda/envs/parliament

tests/unit/test_formatting.py::TestFormatting::test_analyze_policy_string_invalid_sid
tests/unit/test_formatting.py::TestFormatting::test_analyze_policy_string_correct_multiple_statements_and_actions tests/unit/test_formatting.py::TestFormatting::test_analyze_policy_string_correct_simple tests/unit/test_formatting.py::TestFormatting::test_analyze_policy_string_multiple_statements_one_bad tests/unit/test_formatting.py::TestFormatting::test_analyze_policy_string_no_action tests/unit/test_formatting.py::TestFormatting::test_analyze_policy_string_no_statement tests/unit/test_formatting.py::TestFormatting::test_analyze_policy_string_not_json tests/unit/test_formatting.py::TestFormatting::test_analyze_policy_string_opposites tests/unit/test_formatting.py::TestFormatting::test_condition tests/unit/test_formatting.py::TestFormatting::test_condition_action_specific tests/unit/test_formatting.py::TestFormatting::test_condition_action_specific_bad_type tests/unit/test_formatting.py::TestFormatting::test_condition_bad_key tests/unit/test_formatting.py::TestFormatting::test_condition_mismatch tests/unit/test_formatting.py::TestFormatting::test_condition_multiple tests/unit/test_formatting.py::TestFormatting::test_condition_operator
parliament/statement.py
parliament/statement.py