duo-labs / cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
BSD 3-Clause "New" or "Revised" License
6.01k stars 812 forks source link

Take Lambda layer permission policies into account #241

Open 0xdabbad00 opened 6 years ago

0xdabbad00 commented 6 years ago

There are now APIs to add and remove resource-based policies associated with the new lambda layers: https://github.com/boto/botocore/blob/f86f15f7028d379b1127a4acef571e6abd80e03a/botocore/data/lambda/2015-03-31/service-2.json#L31

The call to get the policies appears to be GetLayerVersionPolicy

0xdabbad00 commented 5 years ago

I need to add functionality to collect for this because the call requires two parameters, LayerName and Version, so I have to use two variables.