-
Notifications
You must be signed in to change notification settings - Fork 178
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
IAM Results mis-reporting role policies #154
Comments
@nmarchini - I included AdministratorAccess in the default exclusions config because otherwise it would slow things down. https://github.com/salesforce/cloudsplaining/blob/master/cloudsplaining/shared/default-exclusions.yml#L7. I recognize that's a gap. If that speed compromise is okay with you, I suggest in the meantime using a custom exclusions file and removing AdministratorAccess fro the exclusions list. @verkaufer - perhaps this is a good opportunity for the escape hatch that we discussed? |
v0.2.5
I have run Cloudsplaining against an AWS account and the default.json contains one of the admin roles in the account. It shows that the following Attached Managed Policies are part of the Role.
When I look at the iam-results-default.json document it shows the same role but reports that the role has no policies at all.
The result is that is shows in the output report as not being an issue even though is has full admin access to the account.
The text was updated successfully, but these errors were encountered: