Skip to content

Releases: awslabs/aws-cloudformation-iam-policy-validator

Adding support for new resource types in check-no-public-access api

22 May 20:44
5edb63f
Compare
Choose a tag to compare

Adding support for new resource types in check-no-public-access api

AWS::S3Tables::TableBucket
AWS::ApiGateway::RestApi
AWS::CodeArtifact::Domain
AWS::Backup::BackupVault
AWS::CloudTrail::Dashboard
AWS::CloudTrail::EventDataStore
AWS::S3Express::AccessPoint

v0.0.35

16 Sep 12:42
Compare
Choose a tag to compare

Updating the CFN to resource ARN mappings

v0.0.34

18 Jul 20:28
91da1a0
Compare
Choose a tag to compare

v0.0.33

11 Jun 20:11
58c0fe2
Compare
Choose a tag to compare
  • Publishing new check check-no-public-access - API (schema)[https://docs.aws.amazon.com/access-analyzer/latest/APIReference/API_CheckNoPublicAccess.html]
  • Extending check-no-access-granted to support resources - API (schema)[https://docs.aws.amazon.com/access-analyzer/latest/APIReference/API_AccessNotGranted.html]

https://aws.amazon.com/blogs/aws/iam-access-analyzer-update-extending-custom-policy-checks-guided-revocation/

v0.0.32

21 May 21:21
9f1698f
Compare
Choose a tag to compare

Update the boto3 minimum requirements #39 awslabs/terraform-iam-policy-validator#32 to accommodate custom policy checks CheckAccessNotGranted & CheckNoNewAccess

v0.0.31

03 Apr 17:27
b1e9c67
Compare
Choose a tag to compare

Updated the CFN to ARN mappings with the latest updates.

v0.0.30

01 Apr 17:44
cd8f855
Compare
Choose a tag to compare

Fixes issue #34

Migrate to jsonschema>=4.21.0 and python 3.8-3.12

v0.0.29

09 Jan 17:49
Compare
Choose a tag to compare

The Condition intrinsic function should only be evaluated if its in the "Conditions" section.

Fixes #33

v0.0.28

03 Jan 18:26
Compare
Choose a tag to compare

Adding support for evaluating conditional intrinsic functions.

Added support for conditions block, Fn::Equals, Fn::If, Fn::Or, Condition, Fn::Not, and Fn::And.

v0.0.27

20 Dec 17:32
Compare
Choose a tag to compare

Updating CFN to ARN mapping.

Custom ARN generation should also look at the specific attribute before applying the ARN generator.