Skip to content

Releases: duo-labs/parliament

1.2.3

19 Nov 15:37
c7ea5b2
Compare
Choose a tag to compare

The AWS doc format changed (#155) so this fixes that and updates the IAM data.

1.2.2

16 Nov 19:35
3416cff
Compare
Choose a tag to compare

Updates IAM.
Fixes #153 (an issue with NotAction) via #151 by @danielpops

1.2.1

15 Oct 20:52
1597f94
Compare
Choose a tag to compare

Updates IAM data

1.2.0

20 Aug 21:39
afb6930
Compare
Choose a tag to compare

Bug fixes related to identifying the line numbers for locations from #143 and #142.

1.0.0

13 Aug 17:57
56a599a
Compare
Choose a tag to compare

Findings now include line numbers and column via #139. This changes the location field so it no longer attempts to just identify the Statement.

This isn't exactly a huge change, but I should have bumped this project to 1.0 a long time ago.

Also a bug fix for ignoring AWS policies via #136

0.6.0

23 Jun 15:19
a9d29f1
Compare
Choose a tag to compare

This improves the RESOURCE_STAR finding via #132 by @dgubitosi, such that given ec2:Create* on Resource *, it will call out specifically which actions from that expansion could have more fine-grained resources, as opposed to just telling you ec2:Create* is bad.

Also updates the privilege info.

0.5.0

08 Jun 22:30
a0beef0
Compare
Choose a tag to compare
  • IAM data updated
  • Python 3.6 or above is now enforced thanks to @michael-k and @dgubitosi in #121
  • Parliament no longer crashes when it encounters CloudFormation concepts in policies that are not proper IAM thanks to @michael-k in #124
  • New community auditor that takes user-provided config values and checks policies for presence of sensitive action/resource thanks to @xen0l in #114

From now on for the version that is formatted as major.minor.patch. I'm going to bump the minor version whenever new functionality is added. I'll bump the patch if the update is only for IAM definition or a bug.

0.4.14

18 May 13:49
daef9b6
Compare
Choose a tag to compare

Reference added to statements to keep track of what policy they are from (#115). Use by CloudMapper's access_check command.

0.4.13

12 May 15:44
09121b9
Compare
Choose a tag to compare

Improved performance from PR #110 by @yoava333 magically makes Parliament run up to 100x faster!

Updated privilege info in #113.

0.4.12

23 Apr 18:26
8308583
Compare
Choose a tag to compare

AWS changed their doc format which broke the web scraper, so @kmcquade fixed it via #108. Then I ran it to collect the latest privilege info.