cfn-nag 0.5.29 → 0.5.30
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: fa5ad6a405c280513f50843d428e4895cd4364a21834a25ee2e1c6bc03be80a9
|
|
4
|
+
data.tar.gz: f5704234464d8a9226853dd88a7b19dbd3c429e0aacc05ccd2889b0a14c7cf89
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 1478b279e32d445a5370e1bb6c62586857646d3e9d5e2364fbf87ccf65ebbc02ef7c14aa3100f03d9f76bdae5120a1769ac89cc437d1af73b5f43008e2ed1125
|
|
7
|
+
data.tar.gz: 8beb31800f37dfe7d4be5427b48aaef653c5f35f6b058271cdb2bb0f02f8021a7fe3170f0d30e7e6f07df62b33019f605e513df9459eced9fafb7b0e66ad8785
|
|
@@ -32,7 +32,12 @@ class LambdaFunctionCloudWatchLogsRule < BaseRule
|
|
|
32
32
|
|
|
33
33
|
def managed_policies_include_cw_logs_access?(managed_policies)
|
|
34
34
|
!(managed_policies & ['arn:aws:iam::aws:policy/CloudWatchLogsFullAccess',
|
|
35
|
-
'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole'
|
|
35
|
+
'arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole',
|
|
36
|
+
'arn:aws:iam::aws:policy/service-role/AWSLambdaDynamoDBExecutionRole',
|
|
37
|
+
'arn:aws:iam::aws:policy/AWSLambdaExecute',
|
|
38
|
+
'arn:aws:iam::aws:policy/service-role/AWSLambdaKinesisExecutionRole',
|
|
39
|
+
'arn:aws:iam::aws:policy/service-role/AWSLambdaSQSQueueExecutionRole',
|
|
40
|
+
'arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole']
|
|
36
41
|
).empty?
|
|
37
42
|
end
|
|
38
43
|
|