jckuester / awsweeper

A tool for cleaning your AWS account
Mozilla Public License 2.0
467 stars 45 forks source link

WAF: ListLoggingConfigurationsRequest (AccessDeniedException) #119

Open skyzyx opened 3 years ago

skyzyx commented 3 years ago

I'm getting this error message:

 ⨯ failed to list awsls supported resources error=AccessDeniedException: Critical information is missing in your request: ListLoggingConfigurationsRequest(scope=null, nextMarker=null, limit=null).
   status code: 400, request id: 6f85d6fe-fecf-4591-9826-1602a2196751

Appears to be related to WAF. My config is set to nuke everything:

aws_waf_byte_match_set:
aws_waf_geo_match_set:
aws_waf_ipset:
aws_waf_rate_based_rule:
aws_waf_regex_match_set:
aws_waf_regex_pattern_set:
aws_waf_rule_group:
aws_waf_rule:
aws_waf_size_constraint_set:
aws_waf_sql_injection_match_set:
aws_waf_web_acl:
aws_waf_xss_match_set:
aws_wafregional_byte_match_set:
aws_wafregional_geo_match_set:
aws_wafregional_ipset:
aws_wafregional_rate_based_rule:
aws_wafregional_regex_match_set:
aws_wafregional_regex_pattern_set:
aws_wafregional_rule_group:
aws_wafregional_rule:
aws_wafregional_size_constraint_set:
aws_wafregional_sql_injection_match_set:
aws_wafregional_web_acl:
aws_wafregional_xss_match_set:
aws_wafv2_web_acl_logging_configuration:

Using v0.11.1.

jckuester commented 3 years ago

Hi @skyzyx, thanks for letting me know.

I know what issue is and will fix this: All the functions to list resources are generated and sometimes there are missing input parameters as here for aws_wafv2_web_acl_logging_configuration (I took that into account and will cover edge cases if people run into them for not so common resource types). For now, you can ignore it. I assume it doesn't crash awsweeper and just logs?