News for hackers. Stuff that matters.

A comment on Normalizing AWS IAM Policies for use in automated analysis. Parent comment

Re:Normalizing AWS IAM Policies for use in automated analysis by whoknew1122 on Thursday February 11, 2021 @04:17PM (#26107340)
Hey there. This looks interesting. It looks like you're enumerating IAM managed policies. How do you handle inline policies? That seems like it'd be a blindspot if you're just enumerating the policies the account.
[ Parent | on HN ]
Re:Normalizing AWS IAM Policies for use in automated analysis by fatjohnny on Thursday February 11, 2021 @04:26PM (#26107498)
We also return the inline policies for users, groups, and roles. There's an open issue to convert them to standard form that I expect will be done in the next week, so this will also be possible.
[ Parent | on HN ]