@cloud-copilot/iam-collect 0.1.130 → 0.1.131
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +23 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -102,6 +102,29 @@ This will show you your data that was downloaded. See the [storage docs](docs/St
|
|
|
102
102
|
- [CLI](docs/CLI.md) - Details on the CLI commands and options.
|
|
103
103
|
- [History](docs/History.md) - How to track history of changes.
|
|
104
104
|
|
|
105
|
+
## Using Your Data
|
|
106
|
+
|
|
107
|
+
### iam-lens
|
|
108
|
+
|
|
109
|
+
To explore effective access in your environment check out [iam-lens](https://github.com/cloud-copilot/iam-lens). iam-lens reads your iam-collect data to answer questions like: "Who can access this resource?", "Who can assume this role?", and "Does this principal have access to this bucket?"
|
|
110
|
+
|
|
111
|
+
### Leveraging Your AI
|
|
112
|
+
|
|
113
|
+
Use [AgentInstructions.md](docs/AgentInstructions.md) to help your AI understand the data and how to interrogate it.
|
|
114
|
+
|
|
115
|
+
```bash
|
|
116
|
+
curl -O https://raw.githubusercontent.com/cloud-copilot/iam-collect/main/docs/AgentInstructions.md
|
|
117
|
+
```
|
|
118
|
+
|
|
119
|
+
Then you can start asking questions like "Using AgentInstructions.md as context...":
|
|
120
|
+
|
|
121
|
+
- Do I have any roles that have "\*" in the trust policy?
|
|
122
|
+
- Which users have the "AdministratorAccess" managed policy attached?
|
|
123
|
+
- What RAM shares are sharing resources outside of my organization?
|
|
124
|
+
- Are there any S3 buckets without block public access enabled?
|
|
125
|
+
|
|
126
|
+
You can also ask your AI to generate scripts to predictably and scalably answer these same questions for you.
|
|
127
|
+
|
|
105
128
|
## Supported Services and Data
|
|
106
129
|
|
|
107
130
|
| Service | Resource Type | Data Downloaded |
|