Skip to content

1.4.2: is_unrestricted Impact MetaCheck improvements
Compare
Choose a tag to compare
@gabrielsoltz gabrielsoltz released this 03 Aug 18:57
· 96 commits to main since this release
v1.4.2
bd301b6
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

This release focuses on the Impact MetaCheck is_unrestricted, making it consistently effective unrestricted and adding some resources where it was missing.

For example, an S3 bucket is now only effectively unrestricted if the attached policy is unrestricted but also if there is no S3 public access block at the bucket or account level. This logic was reviewed and enforced for every resource. This Impact Metacheck now also answers with the unrestricted policy statement when it's True (instead of only True).

Assets 2
Loading