iann0036 / iamlive

Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy
MIT License
3.11k stars 107 forks source link

Cognito IDP not tracked #64

Open RS-wicksy opened 1 year ago

RS-wicksy commented 1 year ago

Using Terraform it appears that cognito idp actions are not being tracked. Other services created/updated/deleted with the terraform are fine but nothing for cognito-idp. Also tracks nothing via the AWS CLI.

Have tried the latest docker container and the latest brew package and neither log anything for IDP.

For example, if I:

iamlive --set-ini --mode proxy --profile riversafe --output-file policy.json --sort-alphabetical --bind-addr 127.0.0.1:10080 --ca-bundle ~/.iamlive/ca.pem --ca-key ~/.iamlive/ca.key

and then:

aws cognito-idp list-user-pools --profile riversafe --max-results=20

the iamlive terminal session just shows:

{
    "Version": "2012-10-17",
    "Statement": []
}

Other services I'm capturing (appsync, dynamodb, s3, lambda, cloudfront) all work just fine.

(python310) ➜  ~ docker images | grep iamlive
unfor19/iamlive-docker                                                                    latest               9a5d1c84f391   2 weeks ago     71.1MB
(python310) ➜  ~ brew info iamlive
==> iann0036/iamlive/iamlive: stable 0.50.0
Generate an IAM policy from AWS calls using client-side monitoring (CSM) or embedded proxy.
https://github.com/iann0036/iamlive
/usr/local/Cellar/iamlive/0.50.0 (3 files, 28.7MB) *
  Built from source on 2023-03-31 at 17:00:21
From: https://github.com/iann0036/homebrew-iamlive/blob/HEAD/iamlive.rb
License: MIT
(python310) ➜  ~ terraform --version
Terraform v1.4.2
on darwin_amd64

Your version of Terraform is out of date! The latest version
is 1.4.4. You can update by downloading from https://www.terraform.io/downloads.html
(python310) ➜  ~ aws --version
aws-cli/1.27.103 Python/3.10.10 Darwin/21.6.0 botocore/1.29.103
(python310) ➜  ~
iann0036 commented 1 year ago

Hey @RS-wicksy,

Had a quick look into this but it wasn't obvious (can replicate). I'll try to find time to deep dive into this soon.

iann0036 commented 1 year ago

Hi @RS-wicksy,

Thanks for your patience! I've found and remediated the bug you raised. It'll be included in the next release v0.52, releasing shortly.