Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(mutelist): Exclude resources from AFT #3956

Conversation

jfagoagas
Copy link
Member

Context

Fixes #3810

Description

Exclude more resources from AWS Control Tower and AFT (Account Factory for Terraform) in the AWS mutelist.

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@jfagoagas jfagoagas requested review from a team May 7, 2024 07:25
@jfagoagas jfagoagas force-pushed the PRWLR-3666-bug-check-failing-due-to-iam-roles-created-by-aws-control-tower-and-aft-with-administrator-access-policy-3810 branch from 9c2a8b5 to fdb975a Compare May 7, 2024 07:38
Copy link
Member

@pedrooot pedrooot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔝 🔝

Copy link

codecov bot commented May 7, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 86.37%. Comparing base (7f105e4) to head (fdb975a).
Report is 2 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #3956      +/-   ##
==========================================
+ Coverage   86.32%   86.37%   +0.05%     
==========================================
  Files         748      748              
  Lines       23333    23333              
==========================================
+ Hits        20142    20154      +12     
+ Misses       3191     3179      -12     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@MrCloudSec MrCloudSec added the no-merge Please, DO NOT MERGE this PR. label May 7, 2024
Copy link
Member

@MrCloudSec MrCloudSec left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Those ones are already included in iam_role_*. They are not policies but roles.

@jfagoagas
Copy link
Member Author

Those ones are already included in iam_role_*. They are not policies but roles.

You are right 🤦, I'm going to close the PR and let the customer know that our mutelist currently supports that.

Thanks for the catch.

@jfagoagas
Copy link
Member Author

Already included.

@jfagoagas jfagoagas closed this May 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
no-merge Please, DO NOT MERGE this PR.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Check failing due to IAM Roles created by AWS Control Tower and AFT with AdministratorAccess policy
3 participants