iam-policy-validator 1.15.3__py3-none-any.whl → 1.15.5__py3-none-any.whl

{iam_policy_validator-1.15.3.dist-info → iam_policy_validator-1.15.5.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iam-policy-validator
-Version: 1.15.3
+Version: 1.15.5
 Summary: Validate AWS IAM policies for correctness and security using AWS Service Reference API
 Project-URL: Homepage, https://github.com/boogy/iam-policy-validator
 Project-URL: Documentation, https://boogy.github.io/iam-policy-validator

{iam_policy_validator-1.15.3.dist-info → iam_policy_validator-1.15.5.dist-info}/RECORD

@@ -1,6 +1,6 @@
 iam_validator/__init__.py,sha256=xHdUASOxFHwEXfT_GSr_KrkLlnxZ-pAAr1wW1PwAGko,693
 iam_validator/__main__.py,sha256=to_nz3n_IerJpVVZZ6WSFlFR5s_06J0csfPOTfQZG8g,197
-iam_validator/__version__.py,sha256=2oTvvCnwbVqgXWNdEDQWe8-xj2ecUXJtl1jF_CIIGxk,374
+iam_validator/__version__.py,sha256=U-wVS3NvN8FNHihwmPm5Li3BYK5Ld0cc3hv7gIhvzM0,374
 iam_validator/checks/__init__.py,sha256=wFU5Lz-ZIQBcn2y1u0Kl88B--vEO3btOOaTGPPSjJ74,2106
 iam_validator/checks/action_condition_enforcement.py,sha256=2-XUMbof9tQ7SHZNmAHMkR1DgbOIzY2eFWlp9S9dwLk,60625
 iam_validator/checks/action_resource_matching.py,sha256=qND0hfDgNoxFEdLWwrxOPVDfdj3k50nzedT2qF7nK7o,19428
@@ -21,7 +21,7 @@ iam_validator/checks/set_operator_validation.py,sha256=GMZ1OWqySptYWV7565-K4R5OD
 iam_validator/checks/sid_uniqueness.py,sha256=MPQwALBjcvbY4Q55mpxDrGMqmVCMb13YSg621YbQYF8,6048
 iam_validator/checks/trust_policy_validation.py,sha256=r3fM2hU7W0yCFS6hbd4ZSlD8y2tm0zk99mUVlIt0LsI,17956
 iam_validator/checks/wildcard_action.py,sha256=VhWezb1JXmFnwV9WKgVu-48ythScGfZasg8fFd6tAG4,2001
-iam_validator/checks/wildcard_resource.py,sha256=YO2I4q0QssOyjFrG62Yz148n3yRUJPTm_LD-bkVQj28,22351
+iam_validator/checks/wildcard_resource.py,sha256=idKURJhuPT-AdxdnQK2wRgu_OM5vH9YjvFEP4WZZQOo,22422
 iam_validator/checks/utils/__init__.py,sha256=iI9jHIDlDuuPK2vxjJA-qc927PaWC9zVJb9z3vBRUsQ,356
 iam_validator/checks/utils/action_parser.py,sha256=zA_NGknc5gJvsmIlf4aC14eHFIkBLyL9if5ad80gHwY,4421
 iam_validator/checks/utils/policy_level_checks.py,sha256=pr-uLo-otB612YLZ-rd8W5Kl9ENaTHuzTNOUhQaULKc,7593
@@ -31,11 +31,11 @@ iam_validator/commands/__init__.py,sha256=BgtZqCIazIhCpQIw49J8hOG853Y-sltg4w-SsS
 iam_validator/commands/analyze.py,sha256=rtXZmevC7GCXrADoGrxihRkrLbma59wMAMP2yBhqWPU,21752
 iam_validator/commands/base.py,sha256=5baCCMwxz7pdQ6XMpWfXFNz7i1l5dB8Qv9dKKR04Gzs,1074
 iam_validator/commands/cache.py,sha256=ZMfNe1HfKlCKESqa-9OkBcgZUqAIcV6m7rDrBxLq700,16162
-iam_validator/commands/completion.py,sha256=mrvGoOOYJVC68SJbqmEJYBvqDHsDVm_4kLRbl15TtHY,23265
+iam_validator/commands/completion.py,sha256=hvTO4XFjR1Q3FUeJoUoQY5-TN7NwIAaf_z0jsKpXJSQ,23031
 iam_validator/commands/download_services.py,sha256=KKz3ybMLT8DQUf9aFZ0tilJ-o1b6PE8Pf1pC4K6cT8I,9175
 iam_validator/commands/mcp.py,sha256=ttJXeWvV9GIK7ipa5xjS0gMjRjw3qcuRhJajF_8_rrU,6315
 iam_validator/commands/post_to_pr.py,sha256=CvUXs2xvO-UhluxdfNM6F0TCWD8hDBEOiYw60fm1Dms,2363
-iam_validator/commands/query.py,sha256=6EQc3mGRqTZ8k8-yMNMBzV6vLCI0NaP-1P5zeAL1Vvo,35948
+iam_validator/commands/query.py,sha256=IzNHZDNBhYcyPM8aceRkFJashx41W7l4atTR23UqyqI,35928
 iam_validator/commands/validate.py,sha256=4wk-eSwhgqnQvyUre426S831JadVUctb0FDeCZD4RTk,34176
 iam_validator/core/__init__.py,sha256=hYXkSbxplKzhM6dqrVzV4M3k7GKLsZbgExypxKq74gs,376
 iam_validator/core/access_analyzer.py,sha256=mtMaY-FnKjKEVITky_9ywZe1FaCAm61ElRv5Z_ZeC7E,24562
@@ -102,18 +102,18 @@ iam_validator/mcp/tools/query.py,sha256=05X0dhNGY0KcmyKJIn9vYw2ed3yGlFnRC2rqOoyV
 iam_validator/mcp/tools/validation.py,sha256=XrG7rBGbHnpeZSgNZdfNWyD3XeZwmdBTj-w5ErLOt2c,13219
 iam_validator/sdk/__init__.py,sha256=rfWkijjIA8iKrHE2Wd1HnXAl0jJWHHwYgUFZeISQGiI,6297
 iam_validator/sdk/arn_matching.py,sha256=HSDpLltOYISq-SoPebAlM89mKOaUaghq_04urchEFDA,12778
-iam_validator/sdk/context.py,sha256=b2XXlvsnqxl42d1wsdoynTqsZOy8nRjV73RgxIdKdPQ,6940
+iam_validator/sdk/context.py,sha256=u9kLdDkXEeOhuQjfPJrhpJaJnjp5vW9URRr8m4841uQ,6974
 iam_validator/sdk/exceptions.py,sha256=tm91TxIwU157U_UHN7w5qICf_OhU11agj6pV5W_YP-4,1023
 iam_validator/sdk/helpers.py,sha256=sjfK0na_Fo7O8GhEVhl44rVHqOdw6nAKkBL4FVL-QdU,5697
 iam_validator/sdk/policy_utils.py,sha256=zSn3UFdwr5pik-n1Y4pv_AZheyCuFqaGlSIt403L0is,14386
 iam_validator/sdk/query_utils.py,sha256=kp1sORVnouRMt7kvzyZo1569l7j20jJGmHICR7O8Cqs,14455
-iam_validator/sdk/shortcuts.py,sha256=EVNSYV7rv4TFH03ulsZ3mS1UVmTSp2jKpc2AXs4j1q4,8531
+iam_validator/sdk/shortcuts.py,sha256=r0aYCinNwG-VBUwxqIsUV9__oeveQ7QNCECqAq_-xlM,7794
 iam_validator/utils/__init__.py,sha256=NveA2F3G1E6-ANZzFr7J6Q6u5mogvMp862iFokmYuCs,1021
 iam_validator/utils/cache.py,sha256=wOQKOBeoG6QqC5f0oXcHz63Cjtu_-SsSS-0pTSwyAiM,3254
 iam_validator/utils/regex.py,sha256=xHoMECttb7qaMhts-c9b0GIxdhHNZTt-UBr7wNhWfzg,6219
 iam_validator/utils/terminal.py,sha256=FsRaRMH_JAyDgXWBCOgOEhbS89cs17HCmKYoughq5io,724
-iam_policy_validator-1.15.3.dist-info/METADATA,sha256=r1dXILWhINVsEMyiTTC3IJpAEAoS0usdkBkt7lVe1og,34939
-iam_policy_validator-1.15.3.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
-iam_policy_validator-1.15.3.dist-info/entry_points.txt,sha256=VXAcx1evo9fuxX0Gtj3J2HnzWcBHSXugiZwBtQ1BXE0,162
-iam_policy_validator-1.15.3.dist-info/licenses/LICENSE,sha256=AMnbFTBDcK4_MITe2wiQBkj0vg-jjBBhsc43ydC7tt4,1098
-iam_policy_validator-1.15.3.dist-info/RECORD,,
+iam_policy_validator-1.15.5.dist-info/METADATA,sha256=sDFNSXMKvzmHQTDPBTdfBDpV0fVJ7xjGa094bBlzGbU,34939
+iam_policy_validator-1.15.5.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+iam_policy_validator-1.15.5.dist-info/entry_points.txt,sha256=VXAcx1evo9fuxX0Gtj3J2HnzWcBHSXugiZwBtQ1BXE0,162
+iam_policy_validator-1.15.5.dist-info/licenses/LICENSE,sha256=AMnbFTBDcK4_MITe2wiQBkj0vg-jjBBhsc43ydC7tt4,1098
+iam_policy_validator-1.15.5.dist-info/RECORD,,

iam_validator/__version__.py

@@ -3,7 +3,7 @@
 This file is the single source of truth for the package version.
 """
 
-__version__ = "1.15.3"
+__version__ = "1.15.5"
 # Parse version, handling pre-release suffixes like -rc, -alpha, -beta
 _version_base = __version__.split("-", maxsplit=1)[0]  # Remove pre-release suffix if present
 __version_info__ = tuple(int(part) for part in _version_base.split("."))

iam_validator/checks/wildcard_resource.py

@@ -234,7 +234,7 @@ class WildcardResourceCheck(PolicyCheck):
                 else:
                     action_list = ", ".join(f"`{a}`" for a in sorted_actions[:5])
                     action_list += f" (+{len(sorted_actions) - 5} more)"
-                message = 'Statement applies to all resources (`"*"`)'
+                message = f'Statement applies to all resources (`"*"`) with actions that typically require specific resources: {action_list}'
 
                 # Add adjustment reason if present
                 if adjustment_reason:

iam_validator/commands/completion.py

@@ -313,7 +313,7 @@ _iam_validator_completion() {{
             return 0
             ;;
         mcp)
-            opts="--transport --host --port --verbose -v --config --instructions --instructions-file"
+            opts="--transport --host --port --verbose -v --config"
             COMPREPLY=( $(compgen -W "$opts" -- "$cur") )
             return 0
             ;;
@@ -487,9 +487,7 @@ _iam_validator() {{
                         '--host[Host for SSE transport]:host:' \\
                         '--port[Port for SSE transport]:port:' \\
                         '(--verbose -v)'{{--verbose,-v}}'[Enable verbose logging]' \\
-                        '--config[Path to configuration YAML file]:file:_files' \\
-                        '--instructions[Custom instructions for policy generation]:text:' \\
-                        '--instructions-file[Path to file containing custom instructions]:file:_files'
+                        '--config[Path to configuration YAML file]:file:_files'
                     ;;
             esac
             ;;

iam_validator/commands/query.py

@@ -900,8 +900,6 @@ note:
 
 # For testing
 if __name__ == "__main__":
-    import asyncio
-
     cmd = QueryCommand()
     arg_parser = argparse.ArgumentParser()
     cmd.add_arguments(arg_parser)

iam_validator/sdk/context.py

@@ -197,8 +197,8 @@ async def validator(
         ...     results = await v.validate_directory("./policies")
         ...     v.generate_report(results, format="console")
     """
-    fetcher = AWSServiceFetcher()
-    yield ValidationContext(fetcher, config_path)
+    async with AWSServiceFetcher() as fetcher:
+        yield ValidationContext(fetcher, config_path)
 
 
 @asynccontextmanager
@@ -219,5 +219,5 @@ async def validator_from_config(config_path: str) -> AsyncIterator[ValidationCon
         ...     results = await v.validate_directory("./policies")
         ...     v.generate_report(results)
     """
-    fetcher = AWSServiceFetcher()
-    yield ValidationContext(fetcher, config_path=config_path)
+    async with AWSServiceFetcher() as fetcher:
+        yield ValidationContext(fetcher, config_path=config_path)

iam_validator/sdk/shortcuts.py

@@ -7,7 +7,6 @@ validation tasks without requiring deep knowledge of the internal API.
 
 from pathlib import Path
 
-from iam_validator.core.config.config_loader import ValidatorConfig
 from iam_validator.core.models import PolicyValidationResult, ValidationIssue
 from iam_validator.core.policy_checks import validate_policies
 from iam_validator.core.policy_loader import PolicyLoader
@@ -16,7 +15,6 @@ from iam_validator.core.policy_loader import PolicyLoader
 async def validate_file(
     file_path: str | Path,
     config_path: str | None = None,
-    config: ValidatorConfig | None = None,
 ) -> PolicyValidationResult:
     """
     Validate a single IAM policy file.
@@ -24,7 +22,6 @@ async def validate_file(
     Args:
         file_path: Path to the policy file (JSON or YAML)
         config_path: Optional path to configuration file
-        config: Optional ValidatorConfig object (overrides config_path)
 
     Returns:
         PolicyValidationResult for the policy
@@ -62,7 +59,6 @@ async def validate_file(
 async def validate_directory(
     dir_path: str | Path,
     config_path: str | None = None,
-    config: ValidatorConfig | None = None,
     recursive: bool = True,
 ) -> list[PolicyValidationResult]:
     """
@@ -71,7 +67,6 @@ async def validate_directory(
     Args:
         dir_path: Path to directory containing policy files
         config_path: Optional path to configuration file
-        config: Optional ValidatorConfig object (overrides config_path)
         recursive: Whether to search subdirectories (default: True)
 
     Returns:
@@ -83,7 +78,7 @@ async def validate_directory(
         >>> print(f"{valid_count}/{len(results)} policies are valid")
     """
     loader = PolicyLoader()
-    policies = loader.load_from_path(str(dir_path))
+    policies = loader.load_from_path(str(dir_path), recursive=recursive)
 
     if not policies:
         raise ValueError(f"No IAM policies found in {dir_path}")
@@ -98,7 +93,6 @@ async def validate_json(
     policy_json: dict,
     policy_name: str = "inline-policy",
     config_path: str | None = None,
-    config: ValidatorConfig | None = None,
 ) -> PolicyValidationResult:
     """
     Validate an IAM policy from a Python dictionary.
@@ -107,7 +101,6 @@ async def validate_json(
         policy_json: IAM policy as a Python dict
         policy_name: Name to identify this policy in results
         config_path: Optional path to configuration file
-        config: Optional ValidatorConfig object (overrides config_path)
 
     Returns:
         PolicyValidationResult for the policy
@@ -148,7 +141,6 @@ async def validate_json(
 async def quick_validate(
     policy: str | Path | dict,
     config_path: str | None = None,
-    config: ValidatorConfig | None = None,
 ) -> bool:
     """
     Quick validation returning just True/False.
@@ -158,7 +150,6 @@ async def quick_validate(
     Args:
         policy: File path, directory path, or policy dict
         config_path: Optional path to configuration file
-        config: Optional ValidatorConfig object (overrides config_path)
 
     Returns:
         True if all policies are valid, False otherwise
@@ -194,7 +185,6 @@ async def get_issues(
     policy: str | Path | dict,
     min_severity: str = "medium",
     config_path: str | None = None,
-    config: ValidatorConfig | None = None,
 ) -> list[ValidationIssue]:
     """
     Get just the issues from validation, filtered by severity.
@@ -203,7 +193,6 @@ async def get_issues(
         policy: File path, directory path, or policy dict
         min_severity: Minimum severity to include (critical, high, medium, low, info)
         config_path: Optional path to configuration file
-        config: Optional ValidatorConfig object (overrides config_path)
 
     Returns:
         List of ValidationIssues meeting the severity threshold
@@ -252,7 +241,6 @@ async def get_issues(
 async def count_issues_by_severity(
     policy: str | Path | dict,
     config_path: str | None = None,
-    config: ValidatorConfig | None = None,
 ) -> dict[str, int]:
     """
     Count issues grouped by severity level.
@@ -260,7 +248,6 @@ async def count_issues_by_severity(
     Args:
         policy: File path, directory path, or policy dict
         config_path: Optional path to configuration file
-        config: Optional ValidatorConfig object (overrides config_path)
 
     Returns:
         Dictionary mapping severity levels to counts