iann0036 / iamlive

Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy
MIT License
3.11k stars 107 forks source link

Proxy mode account ID determination #28

Open aidansteele opened 3 years ago

aidansteele commented 3 years ago

There is an --account-id command-line argument for passing in the AWS account ID in proxy mode. Given that the access key ID is available in the request HTTP headers and the account ID can be reverse engineered in most cases, maybe we should reverse-engineer it as a last-resort if unspecified by the user?

iann0036 commented 3 years ago

Implemented in https://github.com/iann0036/iamlive/commit/10c24db82df9ebf6413020edad9956efa07c97ff