-
Notifications
You must be signed in to change notification settings - Fork 775
Open
Labels
waitingWaiting on responseWaiting on response
Description
Similar to #192, there is no support for the GovCloud partition (aws-us-gov). This is especially true for things like IAM enumeration, where the regex matches for user/role identities (pacu/modules/iam__enum_permissions/main.py) look for:
re.match(r"arn:aws:sts::\d{12}:assumed-role/", identity["Arn"]) is not NoneSuggestion:
Parse partition of current identity using a call to sts.get_caller_identity() and string splitting based on ARN format, then use partition in other functions that parse ARN resources
identity = boto3.client("sts").get_caller_identity()
arn = identity["Arn"]
partition = arn.split(":")[1] # "aws" or "aws-us-gov" or "aws-cn"Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
waitingWaiting on responseWaiting on response