-
Notifications
You must be signed in to change notification settings - Fork 63
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add/Update monthly controls [Oct 23]. Closes #711 #722
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@Priyanka-Chatterjee-2000 please take a look at the review comments. Thanks!!
end status, | ||
p.name || ' contains ' || coalesce(bad.statements_num,0) || | ||
' statements that allow action "*" on resource "*".' as reason | ||
${replace(local.common_dimensions_qualifier_global_sql, "__QUALIFIER__", "p.")} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Does the resource support tags? If yes, I think we should add the tag dimensions as well.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
For aws_iam_role and aws_iam_user they support tagging but aws_iam_group does not support tagging and in this query, we are doing a union of the three tables, that is the reason we cannot use tags here.
Co-authored-by: Ved misra <47312748+misraved@users.noreply.github.com>
Checklist