Releases: duo-labs/parliament
Releases · duo-labs/parliament
1.3.0
- Bug fix from @piax93 where
node_exists
was being called but did not exist (#158) - Bug fix from @KevinHock where an
INVALID_ARN
was causing other findings to incorrectly occur (#159) - Readme now references https://github.com/z0ph/aws_managed_policies and @KevinHock also made some spelling fixes.
- Updates IAM data
1.2.3
1.2.2
Updates IAM.
Fixes #153 (an issue with NotAction) via #151 by @danielpops
1.2.1
Updates IAM data
1.2.0
1.0.0
0.6.0
This improves the RESOURCE_STAR
finding via #132 by @dgubitosi, such that given ec2:Create*
on Resource *
, it will call out specifically which actions from that expansion could have more fine-grained resources, as opposed to just telling you ec2:Create*
is bad.
Also updates the privilege info.
0.5.0
- IAM data updated
- Python 3.6 or above is now enforced thanks to @michael-k and @dgubitosi in #121
- Parliament no longer crashes when it encounters CloudFormation concepts in policies that are not proper IAM thanks to @michael-k in #124
- New community auditor that takes user-provided config values and checks policies for presence of sensitive action/resource thanks to @xen0l in #114
From now on for the version that is formatted as major.minor.patch. I'm going to bump the minor version whenever new functionality is added. I'll bump the patch if the update is only for IAM definition or a bug.