o
    g.                     @   s   d d Z dS )c                 C   sV   g d}|   }g }|D ]}||v r|| qt|dkr)| jdd|id dS dS )a  
    from policy_sentry.shared.database import connect_db
    from policy_sentry.querying.actions import get_actions_with_access_level

    db_session = connect_db("bundled")
    permissions_management_actions = get_actions_with_access_level(
        db_session, "all", "Permissions management"
    )
    permissions_management_actions_normalized = [
        x.lower() for x in permissions_management_actions
    ]
    permissions_management_actions = permissions_management_actions_normalized
    (  zacm-pca:createpermissionzacm-pca:deletepermissionz$backup:deletebackupvaultaccesspolicyz!backup:putbackupvaultaccesspolicyz0chime:deletevoiceconnectorterminationcredentialsz-chime:putvoiceconnectorterminationcredentialszcloudformation:setstackpolicyz'cloudsearch:updateserviceaccesspolicieszcodebuild:deleteresourcepolicyz!codebuild:deletesourcecredentialsz!codebuild:importsourcecredentialszcodebuild:putresourcepolicyzcodestar:associateteammemberzcodestar:createprojectzcodestar:deleteprojectzcodestar:disassociateteammemberzcodestar:updateteammemberz#cognito-identity:createidentitypoolz!cognito-identity:deleteidentitiesz#cognito-identity:deleteidentitypoolzcognito-identity:getidz)cognito-identity:mergedeveloperidentitiesz%cognito-identity:setidentitypoolrolesz(cognito-identity:unlinkdeveloperidentityzcognito-identity:unlinkidentityz#cognito-identity:updateidentitypoolzconnect:getfederationtokenzconnect:getfederationtokensz&deeplens:associateserviceroletoaccountzds:createconditionalforwarderzds:createdirectoryzds:createidentitypooldirectoryzds:createmicrosoftadzds:createtrustzds:sharedirectoryz$ec2:createnetworkinterfacepermissionz$ec2:deletenetworkinterfacepermissionzec2:modifysnapshotattributez'ec2:modifyvpcendpointservicepermissionszec2:resetsnapshotattributezecr:setrepositorypolicyz2elasticmapreduce:putblockpublicaccessconfigurationzes:createelasticsearchdomainz"es:updateelasticsearchdomainconfigz!gamelift:requestuploadcredentialszglacier:abortvaultlockzglacier:completevaultlockzglacier:deletevaultaccesspolicyzglacier:initiatevaultlockzglacier:setdataretrievalpolicyzglacier:setvaultaccesspolicyzglue:deleteresourcepolicyzglue:putresourcepolicyz(greengrass:associateserviceroletoaccountz1health:describehealthservicestatusfororganizationz0health:disablehealthserviceaccessfororganizationz/health:enablehealthserviceaccessfororganizationz&iam:addclientidtoopenidconnectproviderziam:addroletoinstanceprofileziam:addusertogroupziam:attachgrouppolicyziam:attachrolepolicyziam:attachuserpolicyziam:changepasswordziam:createaccesskeyziam:createaccountaliasziam:creategroupziam:createinstanceprofileziam:createloginprofileziam:createopenidconnectproviderziam:createpolicyziam:createpolicyversionziam:createroleziam:createsamlproviderziam:createservicelinkedrolez#iam:createservicespecificcredentialziam:createuserziam:createvirtualmfadeviceziam:deactivatemfadeviceziam:deleteaccesskeyziam:deleteaccountaliasziam:deleteaccountpasswordpolicyziam:deletegroupziam:deletegrouppolicyziam:deleteinstanceprofileziam:deleteloginprofileziam:deleteopenidconnectproviderziam:deletepolicyziam:deletepolicyversionziam:deleterolez!iam:deleterolepermissionsboundaryziam:deleterolepolicyziam:deletesamlproviderziam:deletesshpublickeyziam:deleteservercertificateziam:deleteservicelinkedrolez#iam:deleteservicespecificcredentialziam:deletesigningcertificateziam:deleteuserz!iam:deleteuserpermissionsboundaryziam:deleteuserpolicyziam:deletevirtualmfadeviceziam:detachgrouppolicyziam:detachrolepolicyziam:detachuserpolicyziam:enablemfadeviceziam:passroleziam:putgrouppolicyziam:putrolepermissionsboundaryziam:putrolepolicyziam:putuserpermissionsboundaryziam:putuserpolicyz+iam:removeclientidfromopenidconnectproviderz!iam:removerolefrominstanceprofileziam:removeuserfromgroupz"iam:resetservicespecificcredentialziam:resyncmfadeviceziam:setdefaultpolicyversionz&iam:setsecuritytokenservicepreferencesziam:updateaccesskeyziam:updateaccountpasswordpolicyziam:updateassumerolepolicyziam:updategroupziam:updateloginprofilez)iam:updateopenidconnectproviderthumbprintziam:updateroleziam:updateroledescriptionziam:updatesamlproviderziam:updatesshpublickeyziam:updateservercertificatez#iam:updateservicespecificcredentialziam:updatesigningcertificateziam:updateuserziam:uploadsshpublickeyziam:uploadservercertificateziam:uploadsigningcertificatezimagebuilder:getcomponentpolicyzimagebuilder:putcomponentpolicyzimagebuilder:putimagepolicyz!imagebuilder:putimagerecipepolicyziot:attachpolicyziot:attachprincipalpolicyziot:detachpolicyziot:detachprincipalpolicyziot:setdefaultauthorizerziot:setdefaultpolicyversionziotsitewise:createaccesspolicyziotsitewise:deleteaccesspolicyziotsitewise:listaccesspoliciesziotsitewise:updateaccesspolicyzkms:creategrantzkms:createkeyzkms:putkeypolicyzkms:retiregrantzkms:revokegrantz#lakeformation:batchgrantpermissionsz$lakeformation:batchrevokepermissionszlakeformation:grantpermissionsz!lakeformation:putdatalakesettingszlakeformation:revokepermissionsz lambda:addlayerversionpermissionzlambda:addpermissionzlambda:disablereplicationzlambda:enablereplicationz#lambda:removelayerversionpermissionzlambda:removepermissionz%license-manager:updateservicesettingsz"lightsail:getinstanceaccessdetailsz1lightsail:getrelationaldatabasemasteruserpasswordzlogs:deleteresourcepolicyzlogs:putresourcepolicyz,mediapackage:rotateingestendpointcredentialsz mediastore:deletecontainerpolicyzmediastore:putcontainerpolicyzopsworks:setpermissionzopsworks:updateuserprofilez!ram:acceptresourceshareinvitationzram:associateresourcesharezram:createresourcesharezram:deleteresourcesharezram:disassociateresourcesharez$ram:enablesharingwithawsorganizationz!ram:rejectresourceshareinvitationzram:updateresourcesharez#rds:authorizedbsecuritygroupingresszrds-db:connectz redshift:authorizesnapshotaccesszredshift:createclusteruserz redshift:createsnapshotcopygrantzredshift:getclustercredentialszredshift:joingroupzredshift:modifyclusteriamroleszredshift:revokesnapshotaccesszs3:bypassgovernanceretentionzs3:deleteaccesspointpolicyzs3:deletebucketpolicyz#s3:objectowneroverridetobucketownerzs3:putaccesspointpolicyzs3:putaccountpublicaccessblockzs3:putbucketaclzs3:putbucketpolicyzs3:putbucketpublicaccessblockzs3:putobjectaclzs3:putobjectversionaclz#secretsmanager:deleteresourcepolicyz secretsmanager:putresourcepolicyzsns:addpermissionzsns:createtopiczsns:removepermissionzsns:settopicattributeszsqs:addpermissionzsqs:createqueuezsqs:removepermissionzsqs:setqueueattributeszssm:modifydocumentpermissionzsso:associatedirectoryzsso:associateprofilezsso:createapplicationinstancez(sso:createapplicationinstancecertificatezsso:createpermissionsetzsso:createprofilezsso:createtrustzsso:deleteapplicationinstancez(sso:deleteapplicationinstancecertificatezsso:deletepermissionsetzsso:deletepermissionspolicyzsso:deleteprofilezsso:disassociatedirectoryzsso:disassociateprofilez4sso:importapplicationinstanceserviceprovidermetadatazsso:putpermissionspolicyzsso:startssoz.sso:updateapplicationinstanceactivecertificatez(sso:updateapplicationinstancedisplaydataz2sso:updateapplicationinstanceresponseconfigurationz8sso:updateapplicationinstanceresponseschemaconfigurationz2sso:updateapplicationinstancesecurityconfigurationz9sso:updateapplicationinstanceserviceproviderconfigurationz#sso:updateapplicationinstancestatuszsso:updatedirectoryassociationzsso:updatepermissionsetzsso:updateprofilezsso:updatessoconfigurationzsso:updatetrustzsso-directory:addmembertogroupzsso-directory:createaliaszsso-directory:creategroupzsso-directory:createuserzsso-directory:deletegroupzsso-directory:deleteuserzsso-directory:disableuserzsso-directory:enableuserz#sso-directory:removememberfromgroupzsso-directory:updategroupzsso-directory:updatepasswordzsso-directory:updateuserzsso-directory:verifyemailz$storagegateway:deletechapcredentialsz&storagegateway:setlocalconsolepasswordz"storagegateway:setsmbguestpasswordz$storagegateway:updatechapcredentialszwaf:deletepermissionpolicyzwaf:getchangetokenzwaf:putpermissionpolicyz#waf-regional:deletepermissionpolicyzwaf-regional:getchangetokenz waf-regional:putpermissionpolicyzwafv2:createwebaclzwafv2:deletewebaclzwafv2:updatewebaclz(worklink:updatedevicepolicyconfigurationzworkmail:resetpasswordzworkmail:resetuserpasswordzxray:putencryptionconfig    PERMISSIONS_MANAGEMENT_ACTIONSactions)locationN)get_allowed_actionsappendlenadd_finding)policypermissions_management_actionsr   (permissions_management_actions_in_policyaction r   r/home/ubuntu/cloudmapper/venv/lib/python3.10/site-packages/parliament/community_auditors/permissions_management.pyaudit   s     

r   N)r   r   r   r   r   <module>   s    