orca-toolbox's People
Forkers
bbhunter tohar-orca abigayle42 wolfsrudel digitalarche rackme gabrielsoltz subzero112233 skhefratgordon neilcar carlosmmatosorca-toolbox's Issues
iam-ape update (PermissionError: [Errno 13] Permission denied)
Running python version 3.11.2
windows 10
iam-ape version (latest from install)
running into issue when launching terminal as admin and running:
iam-ape --update
I keep getting:
PermissionError: [Errno 13] Permission denied: 'C:\Users\XXX\AppData\Local\Temp\tmp8u32qw9q'
SCP evaluation doesnt assess Deny with NotAction correctly
IAM-APE returns an empty answer when trying to feed it a policy that is structured as an Allowlist with a Deny and NotAction combination. Example can be found here in AWS documentation.
When I run it with an ARN of my role that has Admin permissions and with -s switch it produces empty output:
`
Effective permissions policy for arn:aws:iam::12312312312:role/path/rolename
{
"Statement": []
}
`
Expectations is that it would evaluate the SCP correctly and provide the effective permissions
iam-ape: Loosen the ARN match pattern
AWS creates roles with forward-slashes in the resource name part (eg. role/aws-reserved/sso.amazonaws.com/xxx
, role/service-role/xxx
),
and the current regexp will mark them as invalid.
Possibility to add multiple SCPs to evaluate
Currently its only possible to pass 1 SCP file with the -s option. In many organizations an AWS account will have multiple SCPs attached. I would like to have the possibliity to pass multiple policy files to evaluate against.
error when I run the command: iam-ape --arn arn:aws:iam::<account_id>:role/role
I have an error when I run the command: iam-ape --arn arn:aws:iam::069560771595:role/account-creation-foundation
ERROR: Failed to load AWS IAM Actions due to file could not be opened successfully
File "c:\users\jhonnatan.costa\anaconda3\lib\site-packages\iam_ape\expand_policy.py", line 153, in expand_action
for action in self.all_iam_actions[service].keys():
KeyError: 'servicecatalog'
SCP policy feature
hi,
I'm trying to run this against the policy file downloaded using get get-account-authorisation-details, but it seems it doesn't consider SCP policies. Do we have to download the SCPp policies separately? Not sure if it is reflected in the document.
Thanks,
A.
docker image for ape
Hi.
it would be great if this tool could be delivered as a Docker image to save dependency issues:
ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
awscli 1.32.59 requires botocore==1.34.59, but you have botocore 1.34.95 which is incompatible.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. ๐๐๐
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google โค๏ธ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.