o
    gj                     @   s   d d Z dd ZdS )c                 C   s   |   }t| | d S )N)get_allowed_actionspermissions_on_other_users)policyactions r   p/home/ubuntu/cloudmapper/venv/lib/python3.10/site-packages/parliament/community_auditors/privilege_escalation.pyaudit   s   r   c                 C   s  dd |D }t |}i ddgddgddgd	d
gddgddgddgdddgddgddgdddgddgdddgddd gd!g d"d#g d$d%g d&dd'gdd(gdd)gd*gd+gd,}|D ]}t || |r| jd-||| d.d/ qjd S )0Nc                 S   s   g | ]}|  qS r   )lower).0xr   r   r   
<listcomp>   s    z.permissions_on_other_users.<locals>.<listcomp>CreateAccessKeyziam:createaccesskeyCreateLoginProfileziam:createloginprofileUpdateLoginProfileziam:updateloginprofileCreateNewPolicyVersionziam:createpolicyversionSetExistingDefaultPolicyVersionziam:setdefaultpolicyversionAttachUserPolicyziam:attachuserpolicyAttachGroupPolicyziam:attachgrouppolicyAttachRolePolicyziam:attachrolepolicyzsts:assumerolePutUserPolicyziam:putuserpolicyPutGroupPolicyziam:putgrouppolicyPutRolePolicyziam:putrolepolicyAddUserToGroupziam:addusertogroupUpdateRolePolicyToAssumeItziam:updateassumerolepolicyCreateEC2WithExistingIPiam:passrolezec2:runinstances%PassExistingRoleToNewLambdaThenInvoke)r   lambda:createfunctionzlambda:invokefunction3PassExistingRoleToNewLambdaThenTriggerWithNewDynamo)r   r   lambda:createeventsourcemappingzdynamodb:createtablezdynamodb:putitem8PassExistingRoleToNewLambdaThenTriggerWithExistingDynamo)r   r   r   zglue:createdevendpointzcloudformation:createstackzdatapipeline:createpipelinezglue:updatedevendpointzlambda:updatefunctioncode)$PassExistingRoleToNewGlueDevEndpoint PassExistingRoleToCloudFormation!PassExistingRoleToNewDataPipelineUpdateExistingGlueDevEndpoint"EditExistingLambdaFunctionWithRolePRIVILEGE_ESCALATION)typer   )location)setissubsetadd_finding)r   expanded_actionsexpanded_actions_normalizedescalation_methodskeyr   r   r   r   	   sr   	
%5r   N)r   r   r   r   r   r   <module>   s    