├── .github └── workflows │ └── generate_files.yaml ├── .gitignore ├── LICENSE ├── README.md ├── actions.yaml ├── annotated.json ├── annotated.yaml ├── policies ├── .gitkeep ├── ALL.json ├── CredentialExposure.json ├── DataAccess.json ├── PrivEsc.json └── ResourceExposure.json ├── requirements.txt └── scripts ├── annotate-list.py └── policy-generation.py /.github/workflows/generate_files.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/.github/workflows/generate_files.yaml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | iam_definition.json 2 | venv/ 3 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/README.md -------------------------------------------------------------------------------- /actions.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/actions.yaml -------------------------------------------------------------------------------- /annotated.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/annotated.json -------------------------------------------------------------------------------- /annotated.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/annotated.yaml -------------------------------------------------------------------------------- /policies/.gitkeep: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /policies/ALL.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/policies/ALL.json -------------------------------------------------------------------------------- /policies/CredentialExposure.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/policies/CredentialExposure.json -------------------------------------------------------------------------------- /policies/DataAccess.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/policies/DataAccess.json -------------------------------------------------------------------------------- /policies/PrivEsc.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/policies/PrivEsc.json -------------------------------------------------------------------------------- /policies/ResourceExposure.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/policies/ResourceExposure.json -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | PyYAML==6.0.2 2 | -------------------------------------------------------------------------------- /scripts/annotate-list.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/scripts/annotate-list.py -------------------------------------------------------------------------------- /scripts/policy-generation.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/primeharbor/sensitive_iam_actions/HEAD/scripts/policy-generation.py --------------------------------------------------------------------------------