├── Dockerfile ├── LICENSE ├── README.md ├── bob.json ├── common ├── constants.py └── shared_tools.py ├── flow.png ├── iam_deesc.py ├── main ├── apply.py ├── audit.py ├── plan.py └── revert.py ├── misc ├── aws_actions.txt ├── case_insensitive_dict.py └── gathering.py ├── remediation ├── autoscale_handler.py ├── cf_handler.py ├── codebuild_handler.py ├── cross_handler.py ├── ec2_handler.py ├── iam_handler.py ├── lambda_handler.py ├── remediation_handler.py ├── sagemaker_handler.py ├── ssm_handler.py └── sts_handler.py ├── required_permissions.json └── requirements.txt /Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/Dockerfile -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/README.md -------------------------------------------------------------------------------- /bob.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/bob.json -------------------------------------------------------------------------------- /common/constants.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/common/constants.py -------------------------------------------------------------------------------- /common/shared_tools.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/common/shared_tools.py -------------------------------------------------------------------------------- /flow.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/flow.png -------------------------------------------------------------------------------- /iam_deesc.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/iam_deesc.py -------------------------------------------------------------------------------- /main/apply.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/main/apply.py -------------------------------------------------------------------------------- /main/audit.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/main/audit.py -------------------------------------------------------------------------------- /main/plan.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/main/plan.py -------------------------------------------------------------------------------- /main/revert.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/main/revert.py -------------------------------------------------------------------------------- /misc/aws_actions.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/misc/aws_actions.txt -------------------------------------------------------------------------------- /misc/case_insensitive_dict.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/misc/case_insensitive_dict.py -------------------------------------------------------------------------------- /misc/gathering.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/misc/gathering.py -------------------------------------------------------------------------------- /remediation/autoscale_handler.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/remediation/autoscale_handler.py -------------------------------------------------------------------------------- /remediation/cf_handler.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/remediation/cf_handler.py -------------------------------------------------------------------------------- /remediation/codebuild_handler.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/remediation/codebuild_handler.py -------------------------------------------------------------------------------- /remediation/cross_handler.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/remediation/cross_handler.py -------------------------------------------------------------------------------- /remediation/ec2_handler.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/remediation/ec2_handler.py -------------------------------------------------------------------------------- /remediation/iam_handler.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/remediation/iam_handler.py -------------------------------------------------------------------------------- /remediation/lambda_handler.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/remediation/lambda_handler.py -------------------------------------------------------------------------------- /remediation/remediation_handler.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/remediation/remediation_handler.py -------------------------------------------------------------------------------- /remediation/sagemaker_handler.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/remediation/sagemaker_handler.py -------------------------------------------------------------------------------- /remediation/ssm_handler.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/remediation/ssm_handler.py -------------------------------------------------------------------------------- /remediation/sts_handler.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/remediation/sts_handler.py -------------------------------------------------------------------------------- /required_permissions.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PaloAltoNetworks/IAM-Deescalate/HEAD/required_permissions.json -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | boto3 > 1.13 2 | packaging 3 | python-dateutil 4 | --------------------------------------------------------------------------------