1.63

Security updates, and changes to iam_definition

What's Changed

• chore: update iam_definition on 2024-03-13 by @ChrisTowles in #239
• Add a realistic user-agent to avoid WAF for util by @iann0036 in #242
• Bump requests from 2.28.1 to 2.31.0 by @dependabot in #231
• Bump certifi from 2022.6.15 to 2023.7.22 by @dependabot in #234
• Bump idna from 3.3 to 3.7 by @dependabot in #243
• Bump urllib3 from 1.26.12 to 1.26.19 by @dependabot in #245
• Bump requests from 2.31.0 to 2.32.2 by @dependabot in #246
• Show how to update iam_definition.json by @iainelder in #240

New Contributors

• @ChrisTowles made their first contribution in #239
• @iann0036 made their first contribution in #242
• @iainelder made their first contribution in #240

Full Changelog: 1.6.2...1.63

1.6.2

Updates IAM definition

1.6.1

• Bumps up size of lru_cache for a large speed improvement
• Adds more global variables
• Fixes unit tests

1.6.0

• Updates IAM definition
• Updates requirements.txt
• Uses pytest now for unit tests as nose is deprecated
• Minor bug fix from #211
• Minor feature to allow exceptions to be swallowed

1.5.2

Undo attempted bug fix

1.5.1

Bug fix

1.5.0

• Updates IAM data
• Adds community auditor SINGLE_VALUE_CONDITION_TOO_PERMISSIVE for this confusing aspect of IAM described here thanks to @patrobinson
• Adds RESOURCE_EFFECTIVELY_STAR for when the resource contains more than * but is still effectively * thanks to @raghavkaul
• Bug fix: --directory option works again thanks to @frek818

1.4.1

• Update IAM data

1.4.0

• Updates IAM data
• Add stricter checking to resource attributes #177 - thanks @briandbecker!
• Fixes --aws-managed-policies and --auth-details-file which were breaking due to json-cfg #175 - thanks @RyanJarv!
• Updated AWS principal regex to allow CloudFront OAI ARNs, added a test #174 - thanks @seth-carroll!

1.3.1

• Updates IAM data
• Validate use of NotResource and NotAction based on AWS best practices via #166 from @raghavkaul
• Find all unknown Actions and unknown Prefixes in a Statement via #165 from @raghavkaul