iam-policy-validator 1.11.0__tar.gz → 1.11.1__tar.gz

{iam_policy_validator-1.11.0 → iam_policy_validator-1.11.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iam-policy-validator
-Version: 1.11.0
+Version: 1.11.1
 Summary: Validate AWS IAM policies for correctness and security using AWS Service Reference API
 Project-URL: Homepage, https://github.com/boogy/iam-policy-validator
 Project-URL: Documentation, https://github.com/boogy/iam-policy-validator/tree/main/docs

{iam_policy_validator-1.11.0 → iam_policy_validator-1.11.1}/iam_validator/__version__.py

@@ -3,7 +3,7 @@
 This file is the single source of truth for the package version.
 """
 
-__version__ = "1.11.0"
+__version__ = "1.11.1"
 # Parse version, handling pre-release suffixes like -rc, -alpha, -beta
 _version_base = __version__.split("-", maxsplit=1)[0]  # Remove pre-release suffix if present
 __version_info__ = tuple(int(part) for part in _version_base.split("."))

{iam_policy_validator-1.11.0 → iam_policy_validator-1.11.1}/iam_validator/commands/completion.py

@@ -135,7 +135,7 @@ _iam_validator_completion() {{
     prev="${{COMP_WORDS[COMP_CWORD-1]}}"
 
     # Main commands
-    local commands="validate post-to-pr analyze cache download-services query completion"
+    local commands="validate post-to-pr analyze cache sync-services query completion"
 
     # Get the command (first non-option argument)
     local cmd=""
@@ -215,6 +215,7 @@ _iam_validator_completion() {{
             fi
 
             # Complete options for query subcommands
+            local opts=""
             case "$query_subcmd" in
                 action)
                     opts="--service --name --access-level --resource-type --condition --output"
@@ -226,7 +227,23 @@ _iam_validator_completion() {{
                     opts="--service --name --output"
                     ;;
             esac
-            COMPREPLY=( $(compgen -W "$opts" -- "$cur") )
+
+            # Filter out already used options
+            local used_opts=""
+            for ((i=2; i<COMP_CWORD; i++)); do
+                if [[ ${{COMP_WORDS[i]}} == --* ]]; then
+                    used_opts="$used_opts ${{COMP_WORDS[i]}}"
+                fi
+            done
+
+            local available_opts=""
+            for opt in $opts; do
+                if [[ ! " $used_opts " =~ " $opt " ]]; then
+                    available_opts="$available_opts $opt"
+                fi
+            done
+
+            COMPREPLY=( $(compgen -W "$available_opts" -- "$cur") )
             return 0
             ;;
         validate)
@@ -234,18 +251,36 @@ _iam_validator_completion() {{
             COMPREPLY=( $(compgen -W "$opts" -- "$cur") )
             return 0
             ;;
+        post-to-pr)
+            opts="--report -r --create-review --no-review --add-summary --no-summary --config -c"
+            COMPREPLY=( $(compgen -W "$opts" -- "$cur") )
+            return 0
+            ;;
         analyze)
-            opts="--policy --format --output"
+            opts="--path -p --policy-type -t --region --profile --format -f --output -o --no-recursive --fail-on-warnings --github-comment --github-review --github-summary --run-all-checks --check-access-not-granted --check-access-resources --check-no-new-access --check-no-public-access --public-access-resource-type --verbose -v"
             COMPREPLY=( $(compgen -W "$opts" -- "$cur") )
             return 0
             ;;
         cache)
-            opts="--clear --info"
-            COMPREPLY=( $(compgen -W "$opts" -- "$cur") )
+            # Check if we need to complete the cache subcommand
+            local cache_subcmd=""
+            for ((i=2; i<COMP_CWORD; i++)); do
+                if [[ ${{COMP_WORDS[i]}} =~ ^(info|list|clear|refresh|prefetch|location)$ ]]; then
+                    cache_subcmd=${{COMP_WORDS[i]}}
+                    break
+                fi
+            done
+
+            if [[ -z "$cache_subcmd" ]]; then
+                # Complete cache subcommand
+                COMPREPLY=( $(compgen -W "info list clear refresh prefetch location" -- "$cur") )
+                return 0
+            fi
+            # Cache subcommands have no additional options
             return 0
             ;;
-        download-services)
-            opts="--output-dir --force"
+        sync-services)
+            opts="--output-dir --max-concurrent"
             COMPREPLY=( $(compgen -W "$opts" -- "$cur") )
             return 0
             ;;
@@ -272,72 +307,34 @@ complete -F _iam_validator_completion iam-validator
 # Generated by: iam-validator completion zsh
 
 _iam_validator() {{
-    local -a commands
-    commands=(
-        'validate:Validate IAM policies'
-        'post-to-pr:Post validation results to GitHub PR'
-        'analyze:Analyze IAM policies'
-        'cache:Manage cache'
-        'download-services:Download AWS service definitions'
-        'query:Query AWS service definitions'
-        'completion:Generate shell completion scripts'
-    )
-
-    local -a query_subcommands
-    query_subcommands=(
-        'action:Query IAM actions'
-        'arn:Query ARN formats'
-        'condition:Query condition keys'
-    )
-
-    local -a access_levels
-    access_levels=(
-        'read:Read-only actions'
-        'write:Write actions'
-        'list:List actions'
-        'tagging:Tagging actions'
-        'permissions-management:Permission management actions'
-    )
-
-    local -a formats
-    formats=(
-        'json:JSON output'
-        'yaml:YAML output'
-        'text:Plain text output'
-    )
-
-    local -a shells
-    shells=(
-        'bash:Bash completion'
-        'zsh:Zsh completion'
-    )
+    local curcontext="$curcontext" state line
+    typeset -A opt_args
 
     # Cached AWS services
     local -a aws_services
     aws_services=({services_list})
 
     _arguments -C \\
-        '1: :->command' \\
-        '*:: :->args'
+        '1: :_iam_validator_commands' \\
+        '*::arg:->args'
 
     case $state in
-        command)
-            _describe 'command' commands
-            ;;
         args)
             case $words[1] in
                 query)
-                    case $CURRENT in
-                        2)
-                            _describe 'query subcommand' query_subcommands
-                            ;;
-                        *)
-                            case $words[2] in
+                    local query_state
+                    _arguments -C \\
+                        '1: :_iam_validator_query_subcommands' \\
+                        '*::arg:->query_args' && return 0
+
+                    case $state in
+                        query_args)
+                            case $words[1] in
                                 action)
                                     _arguments \\
                                         '--service[AWS service name]:service:($aws_services)' \\
                                         '--name[Action name]:action name:' \\
-                                        '--access-level[Filter by access level]:access level:($access_levels)' \\
+                                        '--access-level[Filter by access level]:access level:(read write list tagging permissions-management)' \\
                                         '--resource-type[Filter by resource type]:resource type:' \\
                                         '--condition[Filter by condition key]:condition key:' \\
                                         '--output[Output format]:format:(json yaml text)'
@@ -361,7 +358,8 @@ _iam_validator() {{
                     ;;
                 validate)
                     _arguments \\
-                        '(--path -p)'{{--path,-p}}'[Path to policy file or directory]:file:_files' \\
+                        '*--path[Path to policy file or directory]:file:_files' \\
+                        '*-p[Path to policy file or directory]:file:_files' \\
                         '--stdin[Read policy from stdin]' \\
                         '(--format -f)'{{--format,-f}}'[Output format]:format:(console enhanced json markdown html csv sarif)' \\
                         '(--output -o)'{{--output,-o}}'[Output file path]:file:_files' \\
@@ -380,30 +378,79 @@ _iam_validator() {{
                         '--summary[Show Executive Summary section]' \\
                         '--severity-breakdown[Show Issue Severity Breakdown section]'
                     ;;
+                post-to-pr)
+                    _arguments \\
+                        '(--report -r)'{{--report,-r}}'[Path to JSON report file]:file:_files' \\
+                        '--create-review[Create line-specific review comments]' \\
+                        '--no-review[Do not create line-specific review comments]' \\
+                        '--add-summary[Add summary comment]' \\
+                        '--no-summary[Do not add summary comment]' \\
+                        '(--config -c)'{{--config,-c}}'[Configuration file]:file:_files'
+                    ;;
                 analyze)
                     _arguments \\
-                        '--policy[Policy file]:file:_files' \\
-                        '--format[Output format]:format:($formats)' \\
-                        '--output[Output file]:file:_files'
+                        '*--path[Path to policy file or directory]:file:_files' \\
+                        '*-p[Path to policy file or directory]:file:_files' \\
+                        '(--policy-type -t)'{{--policy-type,-t}}'[Type of IAM policy]:policy type:(IDENTITY_POLICY RESOURCE_POLICY SERVICE_CONTROL_POLICY)' \\
+                        '--region[AWS region]:region:' \\
+                        '--profile[AWS profile]:profile:' \\
+                        '(--format -f)'{{--format,-f}}'[Output format]:format:(console json markdown)' \\
+                        '(--output -o)'{{--output,-o}}'[Output file path]:file:_files' \\
+                        '--no-recursive[Do not recursively search directories]' \\
+                        '--fail-on-warnings[Fail validation if warnings are found]' \\
+                        '--github-comment[Post validation results as GitHub PR comment]' \\
+                        '--github-review[Create line-specific review comments on PR]' \\
+                        '--github-summary[Write validation summary to GitHub Actions job summary]' \\
+                        '--run-all-checks[Run full validation checks if Access Analyzer passes]' \\
+                        '*--check-access-not-granted[Actions to check are NOT granted]:action:' \\
+                        '*--check-access-resources[Resources to check]:resource:' \\
+                        '--check-no-new-access[Path to existing policy]:file:_files' \\
+                        '--check-no-public-access[Check that resource policy does not allow public access]' \\
+                        '*--public-access-resource-type[Resource type for public access check]:resource type:' \\
+                        '(--verbose -v)'{{--verbose,-v}}'[Enable verbose logging]'
                     ;;
                 cache)
                     _arguments \\
-                        '--clear[Clear cache]' \\
-                        '--info[Show cache info]'
+                        '1: :(info list clear refresh prefetch location)'
                     ;;
-                download-services)
+                sync-services)
                     _arguments \\
                         '--output-dir[Output directory]:directory:_directories' \\
-                        '--force[Force re-download]'
+                        '--max-concurrent[Maximum concurrent downloads]:number:'
                     ;;
                 completion)
-                    _describe 'shell' shells
+                    _arguments \\
+                        '1: :(bash zsh)'
                     ;;
             esac
             ;;
     esac
 }}
 
+_iam_validator_commands() {{
+    local -a commands
+    commands=(
+        'validate:Validate IAM policies'
+        'post-to-pr:Post validation results to GitHub PR'
+        'analyze:Analyze IAM policies using AWS IAM Access Analyzer'
+        'cache:Manage AWS service definition cache'
+        'sync-services:Sync/download all AWS service definitions for offline use'
+        'query:Query AWS service definitions (actions, ARNs, condition keys)'
+        'completion:Generate shell completion scripts (bash or zsh)'
+    )
+    _describe 'command' commands
+}}
+
+_iam_validator_query_subcommands() {{
+    local -a subcommands
+    subcommands=(
+        'action:Query IAM actions'
+        'arn:Query ARN formats'
+        'condition:Query condition keys'
+    )
+    _describe 'query subcommand' subcommands
+}}
+
 _iam_validator "$@"
 """