Add additional action to credentials exposure community auditor

DanHatesNumbers · web-flow · commit 596943617380 · 2022-01-17T21:31:34.000Z
diff --git a/parliament/community_auditors/credentials_exposure.py b/parliament/community_auditors/credentials_exposure.py
@@ -26,6 +26,7 @@
     "sts:assumerolewithwebidentity",
     "sts:getfederationtoken",
     "sts:getsessiontoken",
+    "cognito-idp:describeuserpoolclient",
 ]
 
 

Original file line number	Diff line number	Diff line change
`@@ -26,6 +26,7 @@`
`26`	`26`	`"sts:assumerolewithwebidentity",`
`27`	`27`	`"sts:getfederationtoken",`
`28`	`28`	`"sts:getsessiontoken",`
	`29`	`+ "cognito-idp:describeuserpoolclient",`
`29`	`30`	`]`
`30`	`31`
`31`	`32`