Apply condition to additional statements

hakman · Nov 29, 2021 · a1bb49f · a1bb49f
1 parent fd0e0b8
commit a1bb49f
Show file tree

Hide file tree

Showing 3 changed files with 27 additions and 0 deletions.
diff --git a/ScoutSuite/providers/aws/rules/findings/iam-inline-policy-for-role.json b/ScoutSuite/providers/aws/rules/findings/iam-inline-policy-for-role.json
@@ -51,6 +51,15 @@
             [
                 "iam._ARG_0_s.id.inline_policies.id.PolicyDocument.Statement.id"
             ]
+        ],
+        [
+            "_INCLUDE_(conditions/policy-statement-poor-condition.json)",
+            [
+                "_STATEMENT_"
+            ],
+            [
+                "iam._ARG_0_s.id.inline_policies.id.PolicyDocument.Statement.id"
+            ]
         ]
     ],
     "key": "iam-inline-_ARG_0_-policy-allows-_ARG_1_-_ARG_2_",

diff --git a/ScoutSuite/providers/aws/rules/findings/iam-managed-policy-allows-full-privileges.json b/ScoutSuite/providers/aws/rules/findings/iam-managed-policy-allows-full-privileges.json
@@ -49,6 +49,15 @@
                 ]
             ]
         ],
+        [
+            "_INCLUDE_(conditions/policy-statement-poor-condition.json)",
+            [
+                "_STATEMENT_"
+            ],
+            [
+                "iam.policies.id.PolicyDocument.Statement.id"
+            ]
+        ],
         [
             "iam.policies.id.PolicyDocument.Statement.id.Resource",
             "containAtLeastOneOf",

diff --git a/ScoutSuite/providers/aws/rules/findings/iam-managed-policy-for-role.json b/ScoutSuite/providers/aws/rules/findings/iam-managed-policy-for-role.json
@@ -56,6 +56,15 @@
             [
                 "iam.policies.id.PolicyDocument.Statement.id"
             ]
+        ],
+        [
+            "_INCLUDE_(conditions/policy-statement-poor-condition.json)",
+            [
+                "_STATEMENT_"
+            ],
+            [
+                "iam.policies.id.PolicyDocument.Statement.id"
+            ]
         ]
     ],
     "key": "iam-managed-policy-allows-_ARG_0_-_ARG_1_",