Gather and Process MFA Information

nccgroup / PMapper

A tool for quickly evaluating IAM permissions in AWS.

GNU Affero General Public License v3.0

1.41k stars 169 forks source link

Closed ncc-erik-steringer closed 3 years ago

ncc-erik-steringer commented 4 years ago

Breaking change: track if a given IAM user has an MFA device, we can check for MFA bypasses in analysis with that info.

[x] Grab MFA information
[x] Go through edge-identifications to determine if caller has MFA for MFA-required actions
[ ] Add field to Edge objects tracking if MFA is required for the Edge
[x] Add MFA-related findings to analysis subcommand

ncc-erik-steringer commented 3 years ago

Appears to be handled mostly in 25dd7a2bf5cd5f2f67f6603897b05531e80630d4 ?