Update SAR data

iann0036 · Sep 8, 2024 · 4a119ae · 4a119ae
1 parent b209126
commit 4a119ae
Show file tree

Hide file tree

Showing 44 changed files with 456 additions and 235 deletions.
diff --git a/aws/historic_counts.json b/aws/historic_counts.json
@@ -6235,6 +6235,10 @@
     {
       "count": 15536,
       "date": "2024-09-07T13:49:29"
+    },
+    {
+      "count": 15536,
+      "date": "2024-09-08T14:08:07"
     }
   ],
   "iam": [
@@ -11065,6 +11069,10 @@
     {
       "count": 17159,
       "date": "2024-09-07T13:49:29"
+    },
+    {
+      "count": 17159,
+      "date": "2024-09-08T14:08:07"
     }
   ]
 }
diff --git a/aws/managed_policies.json b/aws/managed_policies.json
@@ -19741,7 +19741,7 @@
       "arn": "arn:aws:iam::aws:policy/AmazonDocDBElasticFullAccess",
       "createdate": "2023-06-21T18:05:47+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "docdb-elastic:CreateCluster",
@@ -24225,7 +24225,7 @@
       "arn": "arn:aws:iam::aws:policy/AmazonTimestreamFullAccess",
       "createdate": "2021-11-26T23:42:00+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "timestream:CancelQuery",
@@ -24271,7 +24271,7 @@
       ],
       "malformed": false,
       "name": "AmazonTimestreamFullAccess",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true,
       "undocumented_actions": false,
       "unknown_actions": false,
@@ -34680,7 +34680,7 @@
       ],
       "malformed": false,
       "name": "AWSBackupServiceRolePolicyForRestores",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true,
       "undocumented_actions": false,
       "unknown_actions": false,
@@ -39844,7 +39844,7 @@
       "arn": "arn:aws:iam::aws:policy/AmazonMSKFullAccess",
       "createdate": "2023-10-18T11:33:13+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "kafka:BatchAssociateScramSecret",
@@ -53944,7 +53944,7 @@
       ],
       "malformed": false,
       "name": "AWSBackupServiceRolePolicyForBackup",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true,
       "undocumented_actions": false,
       "unknown_actions": false,
@@ -59137,7 +59137,7 @@
       "arn": "arn:aws:iam::aws:policy/AWSAuditManagerAdministratorAccess",
       "createdate": "2024-05-15T23:46:15+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "auditmanager:AssociateAssessmentReportEvidenceFolder",
@@ -59335,7 +59335,7 @@
       ],
       "malformed": false,
       "name": "AWSSupplyChainFederationAdminAccess",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true,
       "undocumented_actions": false,
       "unknown_actions": false,
@@ -61350,7 +61350,7 @@
       "arn": "arn:aws:iam::aws:policy/AWSProtonFullAccess",
       "createdate": "2024-06-06T18:29:00+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "proton:AcceptEnvironmentAccountConnection",
@@ -82399,7 +82399,7 @@
       "arn": "arn:aws:iam::aws:policy/AmazonLookoutEquipmentFullAccess",
       "createdate": "2021-11-24T21:00:13+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "lookoutequipment:CreateDataset",
@@ -83440,7 +83440,7 @@
       "arn": "arn:aws:iam::aws:policy/aws-service-role/AWSBackupServiceLinkedRolePolicyForBackup",
       "createdate": "2024-05-17T17:12:59+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "elasticfilesystem:Backup",
@@ -83521,7 +83521,7 @@
       ],
       "malformed": false,
       "name": "AWSBackupServiceLinkedRolePolicyForBackup",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true,
       "undocumented_actions": false,
       "unknown_actions": false,
@@ -83882,7 +83882,7 @@
       "arn": "arn:aws:iam::aws:policy/service-role/ROSAInstallerPolicy",
       "createdate": "2024-04-24T19:49:55+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "ec2:DescribeAvailabilityZones",
@@ -95944,7 +95944,7 @@
       "arn": "arn:aws:iam::aws:policy/service-role/AWSFaultInjectionSimulatorEC2Access",
       "createdate": "2023-11-27T15:08:12+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "ec2:RebootInstances",
@@ -95960,7 +95960,7 @@
       ],
       "malformed": false,
       "name": "AWSFaultInjectionSimulatorEC2Access",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true,
       "undocumented_actions": false,
       "unknown_actions": false,
@@ -96524,7 +96524,7 @@
       "arn": "arn:aws:iam::aws:policy/AWSBackupFullAccess",
       "createdate": "2023-11-27T17:33:10+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "backup:CancelLegalHold",
@@ -97242,7 +97242,7 @@
       "arn": "arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForImageBuilder",
       "createdate": "2023-10-19T21:30:10+00:00",
       "credentials_exposure": true,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "ec2:RunInstances",
@@ -123692,7 +123692,7 @@
       "arn": null,
       "createdate": "2019-03-11T22:18:12Z",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": true,
       "effective_action_names": [
         "backup:GetBackupPlan",
@@ -125262,7 +125262,7 @@
       ],
       "malformed": false,
       "name": "AmazonDataZoneSageMakerManageAccessRolePolicy",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true,
       "undocumented_actions": false,
       "unknown_actions": false,
@@ -136542,7 +136542,7 @@
       "arn": "arn:aws:iam::aws:policy/service-role/ROSANodePoolManagementPolicy",
       "createdate": "2024-05-02T14:01:47+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "ec2:DescribeDhcpOptions",
@@ -142666,7 +142666,7 @@
       "arn": "arn:aws:iam::aws:policy/aws-service-role/AmazonGuardDutyMalwareProtectionServiceRolePolicy",
       "createdate": "2024-01-25T22:24:00+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "ec2:DescribeInstances",
@@ -142698,7 +142698,7 @@
       ],
       "malformed": false,
       "name": "AmazonGuardDutyMalwareProtectionServiceRolePolicy",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true,
       "undocumented_actions": false,
       "unknown_actions": false,
@@ -143095,7 +143095,7 @@
       "arn": "arn:aws:iam::aws:policy/AmazonAppFlowFullAccess",
       "createdate": "2022-02-28T23:11:23+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "appflow:CancelFlowExecutions",
@@ -143146,7 +143146,7 @@
       ],
       "malformed": false,
       "name": "AmazonAppFlowFullAccess",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true,
       "undocumented_actions": false,
       "unknown_actions": false,
@@ -144109,7 +144109,7 @@
       "arn": "arn:aws:iam::aws:policy/AmazonTimestreamConsoleFullAccess",
       "createdate": "2022-02-01T21:37:31+00:00",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": false,
       "effective_action_names": [
         "timestream:CancelQuery",
@@ -144168,7 +144168,7 @@
       ],
       "malformed": false,
       "name": "AmazonTimestreamConsoleFullAccess",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true,
       "undocumented_actions": false,
       "unknown_actions": false,
@@ -148622,7 +148622,7 @@
       "arn": null,
       "createdate": "2019-03-11T22:14:30Z",
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "deprecated": true,
       "effective_action_names": [
         "backup:CancelLegalHold",

diff --git a/aws/managedpolicies/AWSAuditManagerAdministratorAccess.json b/aws/managedpolicies/AWSAuditManagerAdministratorAccess.json
@@ -9,7 +9,7 @@
   "arn": "arn:aws:iam::aws:policy/AWSAuditManagerAdministratorAccess",
   "createdate": "2024-05-15T23:46:15+00:00",
   "credentials_exposure": false,
-  "data_access": false,
+  "data_access": true,
   "deprecated": false,
   "document": {
     "Statement": [
@@ -1045,9 +1045,9 @@
         }
       },
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "effective_action": "kms:CreateGrant",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true
     },
     {

diff --git a/aws/managedpolicies/AWSBackupAdminPolicy.json b/aws/managedpolicies/AWSBackupAdminPolicy.json
@@ -9,7 +9,7 @@
   "arn": null,
   "createdate": "2019-03-11T22:14:30Z",
   "credentials_exposure": false,
-  "data_access": false,
+  "data_access": true,
   "deprecated": true,
   "document": {
     "Statement": [
@@ -1568,9 +1568,9 @@
       "action": "kms:CreateGrant",
       "condition": null,
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "effective_action": "kms:CreateGrant",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true
     },
     {

diff --git a/aws/managedpolicies/AWSBackupFullAccess.json b/aws/managedpolicies/AWSBackupFullAccess.json
@@ -9,7 +9,7 @@
   "arn": "arn:aws:iam::aws:policy/AWSBackupFullAccess",
   "createdate": "2023-11-27T17:33:10+00:00",
   "credentials_exposure": false,
-  "data_access": false,
+  "data_access": true,
   "deprecated": false,
   "document": {
     "Statement": [
@@ -2125,9 +2125,9 @@
         }
       },
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "effective_action": "kms:CreateGrant",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true
     },
     {

diff --git a/aws/managedpolicies/AWSBackupOperatorPolicy.json b/aws/managedpolicies/AWSBackupOperatorPolicy.json
@@ -8,7 +8,7 @@
   "arn": null,
   "createdate": "2019-03-11T22:18:12Z",
   "credentials_exposure": false,
-  "data_access": false,
+  "data_access": true,
   "deprecated": true,
   "document": {
     "Statement": [
@@ -997,9 +997,9 @@
       "action": "kms:CreateGrant",
       "condition": null,
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "effective_action": "kms:CreateGrant",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true
     },
     {

diff --git a/aws/managedpolicies/AWSBackupServiceLinkedRolePolicyForBackup.json b/aws/managedpolicies/AWSBackupServiceLinkedRolePolicyForBackup.json
@@ -9,7 +9,7 @@
   "arn": "arn:aws:iam::aws:policy/aws-service-role/AWSBackupServiceLinkedRolePolicyForBackup",
   "createdate": "2024-05-17T17:12:59+00:00",
   "credentials_exposure": false,
-  "data_access": false,
+  "data_access": true,
   "deprecated": false,
   "document": {
     "Statement": [
@@ -828,9 +828,9 @@
         }
       },
       "credentials_exposure": false,
-      "data_access": false,
+      "data_access": true,
       "effective_action": "kms:CreateGrant",
-      "privesc": false,
+      "privesc": true,
       "resource_exposure": true
     },
     {
@@ -1200,7 +1200,7 @@
   ],
   "malformed": false,
   "name": "AWSBackupServiceLinkedRolePolicyForBackup",
-  "privesc": false,
+  "privesc": true,
   "resource_exposure": true,
   "undocumented_actions": false,
   "unknown_actions": [],