Add Support For GovCloud and China

nccgroup / PMapper

A tool for quickly evaluating IAM permissions in AWS.

GNU Affero General Public License v3.0

1.37k stars 169 forks source link

Open ncc-erik-steringer opened 2 years ago

ncc-erik-steringer commented 2 years ago

PMapper is not equipped to handle GovCloud or AWS China. Here's a list of work that needs to be done to add support:

[x] Change how we store info about the service namespace/partition (graph metadata?). Thinking about account ID collisions. May need to relocate graphs under an additional layer of indirection (aws vs aws-cn vs aws-us-gov) and bump a major version.
[x] Find all ARN handling that hardcodes arn:aws: at the beginning and readjust those functions.
[x] Test test test

ncc-erik-steringer commented 2 years ago

c36dacc03d936789a009574ba3aa7cfa354c63cc has the first crack at this, need to get it tested for the org-creation and graph-creation processes