safeguards-plugin
safeguards-plugin copied to clipboard
no-wild-iam-role-statements fails on actions that require * resources
If one enables tracing, Serverless generates the following IAM role policy statement with a *
resource.
{
"Action": [
"xray:PutTraceSegments",
"xray:PutTelemetryRecords"
],
"Resource": [
"*"
],
"Effect": "Allow"
}
The *
resource is actually the only option you can choose when using these actions. But Safeguards is unaware of this and fails the no-wild-iam-role-statements policy regardless.
@zachwhaley thanks for report! PR with a fix is welcome