search

nccgroup / PMapper

A tool for quickly evaluating IAM permissions in AWS.
GNU Affero General Public License v3.0
1.37k stars 169 forks source link

Stuck at Generating Edges based on lambda data #115

Open paolodm opened 2 years ago

paolodm commented 2 years ago

Describe the bug When running pmapper --profile profile_name graph create, I eventually get stuck at the Stuck at Generating Edges based on lambda data step.

I think it's because my user does not have the privilege to perform lambda:ListFunctions. I get the following error:

2022-04-14 20:46:43-0400 | DEBUG | principalmapper.graphing.lambda_edges | Exception details: An error occurred (AccessDeniedException) when calling the ListFunctions operation: User: arn:aws:sts::<AWS_ACCOUNT_ID>:<assumed-role/AWS_ACCOUNT_ROLE>/<AWS_ACCOUNT_USER> is not authorized to perform: lambda:ListFunctions on resource: * with an explicit deny in a service control policy

To Reproduce Steps to reproduce the behavior, please include information on suspected users/roles that are the source of the issue when possible:

  1. Use a AWS profile that does not have the ability to ListFunction.
  2. Run the aforementioned command.
  3. See that it gets hung at the Generating Edges based on Lambda data..

Expected behavior It should not get stuck. If you need to quit the program, that would be better.

TCFox commented 2 years ago

I can confirm, I am experiencing the same issue as above. Seen running from master (91d2e60).