cfn-nag 0.5.59 → 0.5.60
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 8da6141a3b35861ff9bd283468bfae6f656856dec2b6469fdf07e6d0152fb543
|
|
4
|
+
data.tar.gz: 723cd11f4e94b072b726b60bcb894ab0ae093942ad5bad2d5ed0f80004143702
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: d537edb823e384a0e41b71a5192329883e53843fbbdbf041ccdfddd1d0c71e0a27c00293c346959f98c4ba699417443ed98b9dcbfb79c0d60855e6391e31b9c3
|
|
7
|
+
data.tar.gz: bc4e4a0849d9cdecf761ea18081073d69fc351e98c26da6cdbb8c48391be6416cafa3c1c1b8970e74c2a808874d5322e15435fc7279f59af1dc49fe47bedf66e
|
|
@@ -19,7 +19,7 @@ class IotPolicyWildcardActionRule < BaseRule
|
|
|
19
19
|
|
|
20
20
|
def audit_impl(cfn_model)
|
|
21
21
|
violating_policies = cfn_model.resources_by_type('AWS::IoT::Policy').select do |policy|
|
|
22
|
-
policy.policy_document = PolicyDocumentParser.new.parse(policy.policyDocument)
|
|
22
|
+
policy.policy_document = PolicyDocumentParser.new.parse(cfn_model, policy.policyDocument)
|
|
23
23
|
!policy.policy_document.wildcard_allowed_actions.empty?
|
|
24
24
|
end
|
|
25
25
|
|
|
@@ -19,7 +19,7 @@ class IotPolicyWildcardResourceRule < BaseRule
|
|
|
19
19
|
|
|
20
20
|
def audit_impl(cfn_model)
|
|
21
21
|
violating_policies = cfn_model.resources_by_type('AWS::IoT::Policy').select do |policy|
|
|
22
|
-
policy.policy_document = PolicyDocumentParser.new.parse(policy.policyDocument)
|
|
22
|
+
policy.policy_document = PolicyDocumentParser.new.parse(cfn_model, policy.policyDocument)
|
|
23
23
|
!policy.policy_document.wildcard_allowed_resources.empty?
|
|
24
24
|
end
|
|
25
25
|
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: cfn-nag
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.5.
|
|
4
|
+
version: 0.5.60
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Eric Kascic
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2020-05-
|
|
11
|
+
date: 2020-05-04 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: rake
|
|
@@ -72,14 +72,14 @@ dependencies:
|
|
|
72
72
|
requirements:
|
|
73
73
|
- - '='
|
|
74
74
|
- !ruby/object:Gem::Version
|
|
75
|
-
version: 0.4.
|
|
75
|
+
version: 0.4.31
|
|
76
76
|
type: :runtime
|
|
77
77
|
prerelease: false
|
|
78
78
|
version_requirements: !ruby/object:Gem::Requirement
|
|
79
79
|
requirements:
|
|
80
80
|
- - '='
|
|
81
81
|
- !ruby/object:Gem::Version
|
|
82
|
-
version: 0.4.
|
|
82
|
+
version: 0.4.31
|
|
83
83
|
- !ruby/object:Gem::Dependency
|
|
84
84
|
name: logging
|
|
85
85
|
requirement: !ruby/object:Gem::Requirement
|