Florian Sellmayr

This was raised in #48 where the @joemilacek tried to input a snippet of CloudFormation JSON which is currently not supported (we only support plain IAM policy documents). However, the...

Usually, we probably want to copy the output of the conversion back into our IDE. Explore what we can do to make this easier. One idea would be to use...

Currently, the deployment script and pipeline aren't trivial to understand - they make some assumption about how what files are important for the website, do some artifact handling but also...

# Context #24 introduced a [basic web frontend](https://flosell.github.io/iam-policy-json-to-terraform/) to use. At the moment, it provides only very bare-bones functionality with minimal styling. This issue would add syntax highlighting to both...

Feature: rewrite .tf files with embedded policy heredocs

1

(triggered by #13) Introduce a new feature that would be able to read in a terraform file that contains JSON in heredoc and replace the occurrances with actual policy documents:...

(triggered by #13) When writing policy JSONs inline as heredoc, one often includes terraform expressions for certain values, e.g. ``` "Resource": ["${aws_kms_key.key.arn}"] ``` Currently, those are converted into normal string...

https://aws.amazon.com/about-aws/whats-new/2020/09/amazon-detective-introduces-iam-role-session-analysis/

At the moment, `trailscraper select` produces a full JSON document with the same format as it would appear in a normal CloudTrail JSON file. `trailscraper generate` reads this format. This...

Filter by different kinds of identity when generating policy

4

AS A trailscraper user I WANT to select only events for a particular role/user when generating a policy SO THAT I can generate a more useful policy for this role/user...

At the moment, `trailscraper download` will download all logs for the days specified by `--from` and `--to`. Time that might also be specified in these arguments is ignored. Therefore, trailscraper...