search

nccgroup / Scout2

Security auditing tool for AWS environments
http://nccgroup.github.io/Scout2/
GNU General Public License v2.0
1.73k stars 300 forks source link

Assume Role Policy Naming #260

Closed jacobheath closed 6 years ago

jacobheath commented 6 years ago

Hey Loic, Any reason why when you click a role, the second row is titled Assume Role Policy when it actually describes the trust relationships of the things that are allowed to assume the clicked role? In the AWS console, there is a second tab titled Trust Relationships that I think describes the data a bit better. The way it currently is titled, it kind of looks like it is highlighting the assume role action in the below inline policy, but sometimes these will read differently.

Attached is a screenshot of what I am talking about:

ss

ss

x4v13r64 commented 6 years ago

Indeed the "Assume Role Policy" name is somewhat misleading (even though this policy is commonly referred to as the role's Assume Role Policy). It could be renamed "Role Trust Policy" to clarify that this refers to the role's resource policy.

x4v13r64 commented 6 years ago

Changed to "Role Trust Policy".