Merge pull request #210 from DanHatesNumbers/patch-1

0xdabbad00 · web-flow · commit 6908bb3bc49b · 2022-02-16T14:48:40.000-07:00
Add additional action to credentials exposure community auditor
diff --git a/parliament/community_auditors/credentials_exposure.py b/parliament/community_auditors/credentials_exposure.py
@@ -26,6 +26,7 @@
     "sts:assumerolewithwebidentity",
     "sts:getfederationtoken",
     "sts:getsessiontoken",
+    "cognito-idp:describeuserpoolclient",
 ]
 
 

Original file line number	Diff line number	Diff line change
`@@ -26,6 +26,7 @@`
`26`	`26`	`"sts:assumerolewithwebidentity",`
`27`	`27`	`"sts:getfederationtoken",`
`28`	`28`	`"sts:getsessiontoken",`
	`29`	`+ "cognito-idp:describeuserpoolclient",`
`29`	`30`	`]`
`30`	`31`
`31`	`32`