duo-labs / duo-labs/cloudtracker

Redo IAM <-> API translation

Open
#21 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
912
Forks
108
PR merge metrics
No merged PRs in 30d

Description

I've learned a lot more about IAM vs API naming since the initial development of CloudTracker and recorded those here: https://summitroute.com/blog/2018/06/28/aws_iam_vs_api_vs_cloudtrail/

I should download the list of IAM privileges from the Policy Generator and the list of API calls and make a giant dictionary. Additionally Will Bengtson has mentioned to me he has a way of generating the CloudTrail logs for all of the calls to ensure the naming is accurate between all 3 places. This should probably just look like:

```
{
api: '',
cloudtrail: '',
iam: '',
data = False
}
```

Where `data` would mean whether or not you need `data` level logging turned on.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.