Nodes: Track "Available" Groups

nccgroup / PMapper

A tool for quickly evaluating IAM permissions in AWS.

GNU Affero General Public License v3.0

1.37k stars 169 forks source link

Open ncc-erik-steringer opened 4 years ago

ncc-erik-steringer commented 4 years ago

Scenario: Imagine someone has permissions to change their own group memberships? That affects the effective permissions of the nodes.

Solutions:

Evaluate the iam:*Group* actions while doing queries. Probably slow as hell to do that every time.
(Planning To Do) Cache which groups can be added/removed during the gathering process as an attribute of the node (list of str).