zoph-io / MAMIP

[MAMIP] Monitor AWS Managed IAM Policies Changes

Home Page:https://bio.link/zoph

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Include affected services in release message

iainelder opened this issue · comments

For convenience in my environments I sometimes use the AWS-managed policies directly instead of my own.

So it's also convenient to subscribe to this repo to keep track of changes AWS makes that could affect my environment's security.

It would be even more convenient if the release message that I get in my email included the affected services so that I don't have to click through to Github to read every diff.

A list of changed files would be good enough, as they are normally named after the service.

For example, for the most recent release, not just

Update detected on refs/tags/2021-02-18-08-01

https://github.com/z0ph/aws_managed_policies/releases/tag/2021-02-18-08-01

but also

Changes:

  • policies/AWSProtonDeveloperAccess
  • policies/AWSProtonFullAccess
  • policies/AWSProtonReadOnlyAccess
  • policies/AWSStorageGatewayServiceRolePolicy

(Derived from 7ea4bab)

Thanks, @iainelder,

I will work on this idea, will tell you of my findings. Thanks for your proposal.

The first try was a fail. Still trying to find something working.

Should be ok with this new approach see #24 for more details.

image