@actsecurity/iam-simulate 0.1.173 → 0.1.174
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -6
- package/dist/cjs/simulation_engine/resourceTypes.d.ts.map +1 -1
- package/dist/cjs/simulation_engine/resourceTypes.js.map +1 -1
- package/dist/esm/simulation_engine/resourceTypes.d.ts.map +1 -1
- package/dist/esm/simulation_engine/resourceTypes.js.map +1 -1
- package/package.json +4 -4
package/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# IAM Simulate
|
|
2
2
|
|
|
3
|
-
[](https://www.npmjs.com/package/@actsecurity/iam-simulate) [](LICENSE.txt) [](https://github.com/act-security-labs/iam-simulate/actions/workflows/guarddog.yml) [](https://snyk.io/test/github/act-security-labs/iam-simulate?targetFile=package.json)
|
|
4
4
|
|
|
5
5
|
An AWS IAM Simulator and Policy Tester built as a Node/Typescript library.
|
|
6
6
|
|
|
@@ -21,8 +21,8 @@ The simulator currently supports these features of AWS IAM
|
|
|
21
21
|
|
|
22
22
|
iam-simulate will automatically validate inputs including
|
|
23
23
|
|
|
24
|
-
- IAM policies using [iam-policy](https://github.com/
|
|
25
|
-
- IAM Actions using [iam-data](https://github.com/
|
|
24
|
+
- IAM policies using [iam-policy](https://github.com/act-security-labs/iam-policy)
|
|
25
|
+
- IAM Actions using [iam-data](https://github.com/act-security-labs/iam-data)
|
|
26
26
|
- The resource ARN against allowed resource types for the action
|
|
27
27
|
- The context keys allowed for the action/resource and their types.
|
|
28
28
|
|
|
@@ -45,7 +45,7 @@ It will also return "explains" for each statement that was evaluated, detailing
|
|
|
45
45
|
Use `anonymousPrincipal` to simulate unsigned requests, such as public S3 object access granted by a bucket policy. Anonymous requests do not have identity policies, session policies, permission boundaries, or SCPs; those principal-side policy inputs are rejected by `runSimulation`.
|
|
46
46
|
|
|
47
47
|
```typescript
|
|
48
|
-
import { anonymousPrincipal, runSimulation, type Simulation } from '@
|
|
48
|
+
import { anonymousPrincipal, runSimulation, type Simulation } from '@actsecurity/iam-simulate'
|
|
49
49
|
|
|
50
50
|
const simulation: Simulation = {
|
|
51
51
|
request: {
|
|
@@ -96,13 +96,13 @@ When enabled, public S3 bucket policies can block anonymous and cross-account ac
|
|
|
96
96
|
## Installation
|
|
97
97
|
|
|
98
98
|
```bash
|
|
99
|
-
npm install @
|
|
99
|
+
npm install @actsecurity/iam-simulate
|
|
100
100
|
```
|
|
101
101
|
|
|
102
102
|
## Usage
|
|
103
103
|
|
|
104
104
|
```typescript
|
|
105
|
-
import { runSimulation, type Simulation } from '@
|
|
105
|
+
import { runSimulation, type Simulation } from '@actsecurity/iam-simulate'
|
|
106
106
|
|
|
107
107
|
const simulation: Simulation = {
|
|
108
108
|
identityPolicies: [
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"resourceTypes.d.ts","sourceRoot":"","sources":["../../../src/simulation_engine/resourceTypes.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"resourceTypes.d.ts","sourceRoot":"","sources":["../../../src/simulation_engine/resourceTypes.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAGnG;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,EAAE,CAAC,CAiBzB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"resourceTypes.js","sourceRoot":"","sources":["../../../src/simulation_engine/resourceTypes.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"resourceTypes.js","sourceRoot":"","sources":["../../../src/simulation_engine/resourceTypes.ts"],"names":[],"mappings":";;AAWA,8DAqBC;AAhCD,oDAAmG;AACnG,sDAAiF;AAEjF;;;;;;;GAOG;AACI,KAAK,UAAU,yBAAyB,CAC7C,OAAe,EACf,MAAc,EACd,QAAgB;IAEhB,MAAM,aAAa,GAAG,MAAM,IAAA,2BAAgB,EAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC7D,IAAI,aAAa,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,IAAI,MAAM,mCAAmC,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,mBAAmB,GAAmB,EAAE,CAAA;IAC9C,KAAK,MAAM,EAAE,IAAI,aAAa,CAAC,aAAa,EAAE,CAAC;QAC7C,mBAAmB,CAAC,IAAI,CAAC,MAAM,IAAA,iCAAsB,EAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAA,oDAAwC,EAC/D,QAAQ,EACR,mBAAmB,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAC5D,CAAA;IAED,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;AAClG,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"resourceTypes.d.ts","sourceRoot":"","sources":["../../../src/simulation_engine/resourceTypes.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"resourceTypes.d.ts","sourceRoot":"","sources":["../../../src/simulation_engine/resourceTypes.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAGnG;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,EAAE,CAAC,CAiBzB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"resourceTypes.js","sourceRoot":"","sources":["../../../src/simulation_engine/resourceTypes.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"resourceTypes.js","sourceRoot":"","sources":["../../../src/simulation_engine/resourceTypes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAqB,MAAM,uBAAuB,CAAA;AACnG,OAAO,EAAE,wCAAwC,EAAE,MAAM,wBAAwB,CAAA;AAEjF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAe,EACf,MAAc,EACd,QAAgB;IAEhB,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC7D,IAAI,aAAa,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,IAAI,MAAM,mCAAmC,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,mBAAmB,GAAmB,EAAE,CAAA;IAC9C,KAAK,MAAM,EAAE,IAAI,aAAa,CAAC,aAAa,EAAE,CAAC;QAC7C,mBAAmB,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,gBAAgB,GAAG,wCAAwC,CAC/D,QAAQ,EACR,mBAAmB,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAC5D,CAAA;IAED,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;AAClG,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@actsecurity/iam-simulate",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.174",
|
|
4
4
|
"description": "Simulate evaluation of AWS IAM policies",
|
|
5
5
|
"repository": {
|
|
6
6
|
"type": "git",
|
|
7
|
-
"url": "git+https://github.com/
|
|
7
|
+
"url": "git+https://github.com/act-security-labs/iam-simulate.git"
|
|
8
8
|
},
|
|
9
9
|
"exports": {
|
|
10
10
|
".": {
|
|
@@ -31,9 +31,9 @@
|
|
|
31
31
|
"author": "David Kerber <dave@cloudcopilot.io>",
|
|
32
32
|
"license": "AGPL-3.0-or-later",
|
|
33
33
|
"bugs": {
|
|
34
|
-
"url": "https://github.com/
|
|
34
|
+
"url": "https://github.com/act-security-labs/iam-simulate/issues"
|
|
35
35
|
},
|
|
36
|
-
"homepage": "https://github.com/
|
|
36
|
+
"homepage": "https://github.com/act-security-labs/iam-simulate#readme",
|
|
37
37
|
"devDependencies": {
|
|
38
38
|
"@actsecurity/prettier-config": "^0.1.1",
|
|
39
39
|
"@semantic-release/changelog": "^6.0.3",
|