Panther informational experimental python

AWS CloudFormation Stack IAM Service Role

Associating IAM roles with CloudFormation stacks ensures least privilege when making changes to your account.

View Source

Detection Logic

def policy(resource):
    # Ignore stack sets as this setting cannot be set on those
    if resource["Name"].startswith("StackSet-"):
        return True

    return resource["RoleARN"] is not None

Field Validations

Loading…

Comments (0)

Loading comments...