duo-labs/parliament

iq not accepted as a permission

Open

#100 opened on Mar 22, 2020

View on GitHub
 (0 comments) (0 reactions) (0 assignees)Python (954 stars) (88 forks)batch import
buggood first issue

Description

Using iq:* and iq-permission:* is flagged as invalid. This is because no actions exist for those privilege prefixes. I should better identify why these privileges are not ok.

Contributor guide

Tech stack
pythonaws
Domain
security
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
basic Pythonunderstanding of AWS IAM
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60
Research direction
Look for the file that maps IAM privilege prefixes to actions (likely in the parliament library's code). Identify where 'iq' prefix is missing and add it alongside similar prefixes like 'iam' or 'sts'. Check the test suite for existing permission tests and add a test case for 'iq:*' and 'iq permission:*'.