Check all services that can use resource based policies - Githubissues

duo-labs / cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

BSD 3-Clause "New" or "Revised" License

5.99k stars 810 forks source link

Check all services that can use resource based policies #151

Closed 0xdabbad00 closed 6 years ago

0xdabbad00 commented 6 years ago

There are 14 services that can have resource based policies, as listed on https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html, as described in https://duo.com/blog/beyond-s3-exposed-resources-on-aws

My audit code checks:

S3
ECR
ES

I should check:

Lambda (see: https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html)
Glacier
KMS
SNS
SQS

The rest don't really matter that much (GreenGrass, IOT, MediaTaylor, Opsworks, Opsworks for Check Automate, and Cloud9)

0xdabbad00 commented 6 years ago

Resolved in #154