search

WithSecureLabs / awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.
GNU General Public License v3.0
905 stars 102 forks source link

Add support for actions without Resource-Level Permissions #21

Closed masteryeets closed 4 years ago

masteryeets commented 4 years ago

At present, awspx only maps actions that support Resource-Level permissions, because of the way it parses the AWS docs to determine which actions affect which resources. However, we may also be interested in actions that don't support Resource-Level permissions. Some of these actions don't affect specific resources (e.g. s3:ListBuckets) whereas others do (e.g. ec2:DescribeInstanceAttribute). For the sake of expediency, we will treat both cases the same and map all non-RLP actions to a single info node.

beatro0t commented 4 years ago

Resolved by c7b96db465220a3cd8627d1c58531059980981b0