Cloudsplaining Versions Save

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

0.6.2

6 months ago

Changes

  • Revert "[SCM ADMIN] Adding/Updating GUS aware code owners info @W-13958158" @svc-scm (#316)
  • Update dependencies @gruebel (#312)

🚀 Features

  • create ResourcePolicyDocument with internet reachable check @gruebel (#321)
  • extend list of actions exposing credentials @gruebel (#315)

🐛 Bug Fixes

  • properly handle missing managed policies @gruebel (#319)

0.6.1

7 months ago

Changes

  • update GHA workflows and add python version test jobs @gruebel (#309)
  • bump pyyaml to 6.0.1 @nitrocode (#310)
  • [SCM ADMIN] Adding/Updating GUS aware code owners info @W-13958158 @svc-scm (#308)
  • update dependencies and fix mypy and pylint issues @gruebel (#307)
  • Suppress findings when conditions exist, except when --flag-all-risky-actions flag is included @jacobappleton-orbis (#303)
  • Support federated principals @gruebel (#304)

0.6.0

9 months ago

Changes

  • Feature/added filter by severity option @melaniap-codsec (#295)

0.5.1

1 year ago

Changes

  • More gamelift cred vending actions @iann0036 (#286)
  • Update Python dependencies @kmcquade (#266)
  • #277 broken link fixed. @amityadav2026 (#280)

0.5.0

2 years ago

Changes

  • Optionally allow noisy results to flag risky actions regardless of resource constraints or conditions usage @kmcquade (#257)

🐛 Bug Fixes

  • Fix #242 - print Infra modification findings only if they exist @kmcquade (#259)

📝 Documentation

  • Update example report to the latest version @kmcquade (#253)

0.4.10

2 years ago

Changes

  • Ability to return json results when used as python lib @mrpool404 (#250)
  • Update security.yml to non-vulnerable GitHub actions version @kmcquade (#249)

0.4.9

2 years ago

Changes

  • AWS_DEFAULT_PROFILE is respected; Path fixes @kmcquade (#239)

0.4.8

2 years ago

Changes

  • Fix some dependency issues @kmcquade (#235)
  • Update IAM database

0.4.7

2 years ago

Changes

  • Fix NoneType exception thrown when processing a Deny statement using NotActions @acknosyn (#220)

0.4.6

2 years ago

Changes

  • Future proof some unit tests that were failing @kmcquade (#227)
  • Upgrade policy-sentry to 0.11.18 @fabaff (#225)