How to check the trust conditions of federated users in an AWS trust policy?

dcpeach
dcpeach ✭✭✭✭✭
in Compliance & Reporting
To ensure that SAML actions are obtained for record keeping.

Answers

  • AaronO
    AaronO ✭✭✭
    edited July 2022
    Hi, thanks for your question! 
    FIND aws_iam_role as role
THAT TRUSTS as trust Service with type ~= 'aws_iam_saml_provider' as s
WHERE trust.conditions ~= '"saml:sub": "*-AWS"'
return
role.roleName as Role, s.displayName as Service

This Month's Leaders

Categories