Shaun e246c0cfd7 fix(aws): false negative in iam_role_cross_service_confused_deputy_prevention (#9213) ...

Co-authored-by: shaun <shaun@snotra.cloud>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>

2025-11-11 17:39:16 -05:00

..

iam_administrator_access_with_mfa

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

iam_avoid_root_usage

fix(iam_avoid_root_usage): change timestamp format (#4446)

2024-07-15 17:10:49 +02:00

iam_aws_attached_policy_no_administrative_privileges

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_check_saml_providers_sts

fix(iam): handle none SAML Providers (#7359)

2025-03-25 09:24:32 +01:00

iam_customer_attached_policy_no_administrative_privileges

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_customer_unattached_policy_no_administrative_privileges

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_group_administrator_access_policy

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_inline_policy_allows_privilege_escalation

feat(iam): remove standalone iam:PassRole from privesc detection and add missing patterns (#8530)

2025-08-18 11:35:14 +02:00

iam_inline_policy_no_administrative_privileges

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_inline_policy_no_full_access_to_cloudtrail

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_inline_policy_no_full_access_to_kms

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_no_custom_policy_permissive_role_assumption

fix(iam): detect wildcarded ARNs in sts:AssumeRole policy resources (#8164)

2025-07-03 23:09:48 +08:00

iam_no_expired_server_certificates_stored

chore(iam): add tags to missing checks report (#5280)

2024-10-03 13:47:10 -04:00

iam_no_root_access_key

fix(iam): check always if root credentials are present (#7967)

2025-06-12 17:48:09 +02:00

iam_password_policy_expires_passwords_within_90_days_or_less

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_password_policy_lowercase

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_password_policy_minimum_length_14

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_password_policy_number

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_password_policy_reuse_24

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_password_policy_symbol

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_password_policy_uppercase

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_policy_allows_privilege_escalation

feat(iam): remove standalone iam:PassRole from privesc detection and add missing patterns (#8530)

2025-08-18 11:35:14 +02:00

iam_policy_attached_only_to_group_or_roles

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_policy_cloudshell_admin_not_attached

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_policy_no_full_access_to_cloudtrail

feat(IAM): Add inline policies checks and improve custom policy checks (#4255)

2024-07-03 15:51:19 -04:00

iam_policy_no_full_access_to_kms

feat(aws): avoid bypassing IAM check using wildcards (#7708)

2025-06-16 07:42:01 +02:00

iam_role_administratoraccess_policy

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_role_cross_account_readonlyaccess_policy

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_role_cross_service_confused_deputy_prevention

fix(aws): false negative in iam_role_cross_service_confused_deputy_prevention (#9213)

2025-11-11 17:39:16 -05:00

iam_root_credentials_management_enabled

fix(report): remove invalid resources in report (#6852)

2025-02-19 21:27:52 +05:45

iam_root_hardware_mfa_enabled

fix(iam): check always if root credentials are present (#7967)

2025-06-12 17:48:09 +02:00

iam_root_mfa_enabled

fix(iam): check always if root credentials are present (#7967)

2025-06-12 17:48:09 +02:00

iam_rotate_access_key_90_days

fix(iam): set unique resource id for each user access key (#6128)

2024-12-11 09:13:49 +01:00

iam_securityaudit_role_created

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_support_role_created

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_user_accesskey_unused

chore(iam): add tags to missing checks report (#5280)

2024-10-03 13:47:10 -04:00

iam_user_administrator_access_policy

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_user_console_access_unused

chore(iam): improve iam user console access check (#4211)

2024-06-11 12:45:29 +02:00

iam_user_hardware_mfa_enabled

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_user_mfa_enabled_console_access

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_user_no_setup_initial_access_key

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_user_two_active_access_key

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

iam_user_with_temporary_credentials

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

lib

feat(iam): remove standalone iam:PassRole from privesc detection and add missing patterns (#8530)

2025-08-18 11:35:14 +02:00

iam_service_test.py

fix(tests_iam): AWS managed policies are isolated (#8609)

2025-09-30 13:44:03 +05:45