 Jonathan Nguyen
|
821fe43efd
|
feat(iam): scope AgentCore PassRole and workload token grants, and flag unbound service trust (#12664)
|
2026-09-01 17:02:05 +02:00 |
|
|
Daniel Barranquero
|
a19fd70001
|
feat(aws): add pathfinding.cloud privilege-escalation coverage (#12237)
|
2026-08-04 08:59:52 +02:00 |
|
|
Daniel BarranqueroandHugo P.Brito
|
d1ab8b8ae5
|
feat(aws): add iam_policy_no_wildcard_marketplace_subscribe and iam_inline_policy_no_wildcard_marketplace_subscribe checks (#10525)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-04-14 12:08:40 +02:00 |
|
|
Kay AgahdandClaude Opus 4.6
|
89fe867944
|
fix(aws): recognize service-specific condition keys as restrictive in is_policy_public (#10600)
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
|
2026-04-08 10:55:55 +02:00 |
|
|
Eran CohenandDaniel Barranquero
|
0b461233c1
|
feat(iam): Add trusted IP configurable option to reduce false positives in 'opensearch' check (#8631)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-10 12:12:54 +01:00 |
|
|
mohd4adilandDaniel Barranquero
|
e97e31c7ca
|
chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-01-29 09:13:34 +01:00 |
|
|
Andoni Alonso
|
2f5fce41dc
|
feat(iam): remove standalone iam:PassRole from privesc detection and add missing patterns (#8530)
|
2025-08-18 11:35:14 +02:00 |
|
|
Andoni AlonsoandMrCloudSec
|
04749c1da1
|
fix(aws): sns_topics_not_publicly_accessible false positive with aws:SourceArn conditions (#8340)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-07-24 18:03:30 +08:00 |
|
|
Andoni AlonsoandSergio Garcia
|
dfd5c9aee7
|
feat(aws): add check to ensure Codebuild Github projects are only use allowed Github orgs (#7595)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-06-18 00:17:18 +08:00 |
|
|
Andoni Alonso
|
bfafa518b1
|
feat(aws): avoid bypassing IAM check using wildcards (#7708)
|
2025-06-16 07:42:01 +02:00 |
|
|
Ogonna IwunzeandMrCloudSec
|
f5a2695c3b
|
fix(check): Add support for condition with restriction on SNS endpoint (#7750)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-05-15 16:00:00 +02:00 |
|
|
Rubén De la Torre Vico
|
e33b081dc6
|
chore(iam): add exception for public policy in EKS service (#4759)
|
2024-11-19 09:42:56 -04:00 |
|
|
Sergio Garcia
|
be523c11c8
|
fix(aws): do not flag cross-service confused deputy as public (#5593)
|
2024-11-04 15:51:52 +01:00 |
|
|
Sergio Garcia
|
6e3c008a89
|
chore(aws): improve logic for determining if resources are publicly accessible (#5195)
|
2024-10-16 12:10:38 -04:00 |
|
|
Sergio Garcia
|
3ace44979a
|
chore(aws): add more cases to public IAM resource policies (#5336)
|
2024-10-11 10:27:23 -04:00 |
|
|
Sergio GarciaandRubén De la Torre Vico
|
0a2b7cf152
|
chore(aws): improve IAM Resource Policy public logic (#5067)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
|
2024-09-25 08:33:41 -04:00 |
|
|
Sergio Garcia
|
25327d618d
|
chore(aws): handle NotAction cases in IAM policies (#5035)
|
2024-09-24 08:36:11 -04:00 |
|
|
Rubén De la Torre Vico
|
e6ae539323
|
feat(IAM): Add inline policies checks and improve custom policy checks (#4255)
|
2024-07-03 15:51:19 -04:00 |
|
|
Rubén De la Torre Vico
|
093738c65f
|
chore(s3): reduce false positive in s3 public check (#4281)
|
2024-06-25 08:55:42 -04:00 |
|
|
Sergio Garcia
|
f4eaf2d909
|
feat(eventbridge): add EventBridge checks (#4020)
|
2024-05-21 08:51:10 +02:00 |
|