duo-labs / duo-labs/cloudtracker

Use policyuniverse

Open
#2 3 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
912
Forks
108
PR merge metrics
No merged PRs in 30d

Description

Use https://github.com/netflix-skunkworks/policyuniverse instead of https://github.com/duo-labs/cloudtracker/blob/master/cloudtracker/__init__.py#L80 and `aws_api_list.txt`. This would also support `NotAction` (https://github.com/duo-labs/cloudtracker/blob/33852a6f70e839b357b62722b66a2e317c440943/cloudtracker/__init__.py#L69). This could also help with the `--ignore-benign` flag to more accurately identify benign actions beyond `List*` and `Describe*`.

Need to push changes to that project to support some of CloudTracker's needs.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.