Update SAR data

iann0036 · Nov 29, 2023 · e58149e · e58149e
1 parent d09fe77
commit e58149e
Show file tree

Hide file tree

Showing 77 changed files with 26,198 additions and 3,531 deletions.
diff --git a/aws/docs.json b/aws/docs.json
diff --git a/aws/historic_counts.json b/aws/historic_counts.json
@@ -5103,6 +5103,10 @@
     {
       "count": 14555,
       "date": "2023-11-28T14:00:07"
+    },
+    {
+      "count": 14710,
+      "date": "2023-11-29T14:04:14"
     }
   ],
   "iam": [
@@ -8813,6 +8817,10 @@
     {
       "count": 15423,
       "date": "2023-11-28T14:00:07"
+    },
+    {
+      "count": 15423,
+      "date": "2023-11-29T14:04:14"
     }
   ]
 }
diff --git a/aws/managed_policies.json b/aws/managed_policies.json
@@ -47021,7 +47021,7 @@
         "Permissions management"
       ],
       "arn": "arn:aws:iam::aws:policy/AmazonElasticFileSystemFullAccess",
-      "createdate": "2022-01-10T19:03:16Z",
+      "createdate": "2023-11-28T16:53:28Z",
       "credentials_exposure": false,
       "data_access": false,
       "deprecated": false,
@@ -47079,9 +47079,9 @@
       "privesc": true,
       "resource_exposure": true,
       "undocumented_actions": false,
-      "unknown_actions": false,
-      "updatedate": "2022-01-10T19:03:16+00:00",
-      "version": "v8"
+      "unknown_actions": true,
+      "updatedate": "2023-11-28T16:53:28+00:00",
+      "version": "v9"
     },
     {
       "access_levels": [
@@ -47711,7 +47711,7 @@
         "Permissions management"
       ],
       "arn": "arn:aws:iam::aws:policy/aws-service-role/AmazonConnectServiceLinkedRolePolicy",
-      "createdate": "2023-11-15T22:04:36Z",
+      "createdate": "2023-11-28T16:05:08Z",
       "credentials_exposure": true,
       "data_access": true,
       "deprecated": false,
@@ -48002,16 +48002,18 @@
         "profile:DeleteCalculatedAttributeDefinition",
         "profile:GetCalculatedAttributeDefinition",
         "profile:UpdateCalculatedAttributeDefinition",
-        "cloudwatch:PutMetricData"
+        "cloudwatch:PutMetricData",
+        "sms-voice:SendTextMessage",
+        "sms-voice:DescribePhoneNumbers"
       ],
       "malformed": false,
       "name": "AmazonConnectServiceLinkedRolePolicy",
       "privesc": false,
       "resource_exposure": true,
       "undocumented_actions": false,
       "unknown_actions": false,
-      "updatedate": "2023-11-15T22:04:36+00:00",
-      "version": "v13"
+      "updatedate": "2023-11-28T16:05:08+00:00",
+      "version": "v14"
     },
     {
       "access_levels": [
@@ -106916,6 +106918,23 @@
       "updatedate": null,
       "version": "v1"
     },
+    {
+      "access_levels": [],
+      "arn": "arn:aws:iam::aws:policy/AmazonQFullAccess",
+      "createdate": "2023-11-28T16:00:24Z",
+      "credentials_exposure": false,
+      "data_access": false,
+      "deprecated": false,
+      "effective_action_names": [],
+      "malformed": false,
+      "name": "AmazonQFullAccess",
+      "privesc": false,
+      "resource_exposure": false,
+      "undocumented_actions": false,
+      "unknown_actions": true,
+      "updatedate": "2023-11-28T16:00:24+00:00",
+      "version": "v1"
+    },
     {
       "access_levels": [
         "Write"
@@ -134304,7 +134323,7 @@
         "Read"
       ],
       "arn": "arn:aws:iam::aws:policy/aws-service-role/AccessAnalyzerServiceRolePolicy",
-      "createdate": "2023-11-07T19:55:15Z",
+      "createdate": "2023-11-28T19:00:40Z",
       "credentials_exposure": false,
       "data_access": false,
       "deprecated": false,
@@ -134387,9 +134406,9 @@
       "privesc": false,
       "resource_exposure": false,
       "undocumented_actions": false,
-      "unknown_actions": false,
-      "updatedate": "2023-11-07T19:55:15+00:00",
-      "version": "v9"
+      "unknown_actions": true,
+      "updatedate": "2023-11-28T19:00:40+00:00",
+      "version": "v10"
     },
     {
       "access_levels": [

diff --git a/aws/managedpolicies/AccessAnalyzerServiceRolePolicy.json b/aws/managedpolicies/AccessAnalyzerServiceRolePolicy.json
@@ -4,7 +4,7 @@
     "Read"
   ],
   "arn": "arn:aws:iam::aws:policy/aws-service-role/AccessAnalyzerServiceRolePolicy",
-  "createdate": "2023-11-07T19:55:15Z",
+  "createdate": "2023-11-28T19:00:40Z",
   "credentials_exposure": false,
   "data_access": false,
   "deprecated": false,
@@ -77,6 +77,8 @@
           "s3:ListAccessPoints",
           "s3:ListAllMyBuckets",
           "s3:ListMultiRegionAccessPoints",
+          "s3express:GetBucketPolicy",
+          "s3express:ListAllMyDirectoryBuckets",
           "sns:GetTopicAttributes",
           "sns:ListTopics",
           "secretsmanager:DescribeSecret",
@@ -819,7 +821,16 @@
   "privesc": false,
   "resource_exposure": false,
   "undocumented_actions": false,
-  "unknown_actions": [],
-  "updatedate": "2023-11-07T19:55:15+00:00",
-  "version": "v9"
+  "unknown_actions": [
+    {
+      "action": "s3express:GetBucketPolicy",
+      "condition": null
+    },
+    {
+      "action": "s3express:ListAllMyDirectoryBuckets",
+      "condition": null
+    }
+  ],
+  "updatedate": "2023-11-28T19:00:40+00:00",
+  "version": "v10"
 }
diff --git a/aws/managedpolicies/AmazonConnectServiceLinkedRolePolicy.json b/aws/managedpolicies/AmazonConnectServiceLinkedRolePolicy.json
@@ -7,7 +7,7 @@
     "Permissions management"
   ],
   "arn": "arn:aws:iam::aws:policy/aws-service-role/AmazonConnectServiceLinkedRolePolicy",
-  "createdate": "2023-11-15T22:04:36Z",
+  "createdate": "2023-11-28T16:05:08Z",
   "credentials_exposure": true,
   "data_access": true,
   "deprecated": false,
@@ -193,6 +193,20 @@
         "Effect": "Allow",
         "Resource": "*",
         "Sid": "AllowPutMetricsForConnectNamespace"
+      },
+      {
+        "Action": [
+          "sms-voice:SendTextMessage",
+          "sms-voice:DescribePhoneNumbers"
+        ],
+        "Condition": {
+          "StringEquals": {
+            "aws:ResourceAccount": "${aws:PrincipalAccount}"
+          }
+        },
+        "Effect": "Allow",
+        "Resource": "arn:aws:sms-voice:*:*:phone-number/*",
+        "Sid": "AllowSMSVoiceOperationsForConnect"
       }
     ],
     "Version": "2012-10-17"
@@ -3171,6 +3185,34 @@
       "effective_action": "cloudwatch:PutMetricData",
       "privesc": false,
       "resource_exposure": false
+    },
+    {
+      "access_level": "Write",
+      "action": "sms-voice:SendTextMessage",
+      "condition": {
+        "StringEquals": {
+          "aws:ResourceAccount": "${aws:PrincipalAccount}"
+        }
+      },
+      "credentials_exposure": false,
+      "data_access": false,
+      "effective_action": "sms-voice:SendTextMessage",
+      "privesc": false,
+      "resource_exposure": false
+    },
+    {
+      "access_level": "Read",
+      "action": "sms-voice:DescribePhoneNumbers",
+      "condition": {
+        "StringEquals": {
+          "aws:ResourceAccount": "${aws:PrincipalAccount}"
+        }
+      },
+      "credentials_exposure": false,
+      "data_access": false,
+      "effective_action": "sms-voice:DescribePhoneNumbers",
+      "privesc": false,
+      "resource_exposure": false
     }
   ],
   "malformed": false,
@@ -3179,6 +3221,6 @@
   "resource_exposure": true,
   "undocumented_actions": false,
   "unknown_actions": [],
-  "updatedate": "2023-11-15T22:04:36+00:00",
-  "version": "v13"
+  "updatedate": "2023-11-28T16:05:08+00:00",
+  "version": "v14"
 }
diff --git a/aws/managedpolicies/AmazonElasticFileSystemFullAccess.json b/aws/managedpolicies/AmazonElasticFileSystemFullAccess.json
@@ -7,7 +7,7 @@
     "Permissions management"
   ],
   "arn": "arn:aws:iam::aws:policy/AmazonElasticFileSystemFullAccess",
-  "createdate": "2022-01-10T19:03:16Z",
+  "createdate": "2023-11-28T16:53:28Z",
   "credentials_exposure": false,
   "data_access": false,
   "deprecated": false,
@@ -54,6 +54,7 @@
           "elasticfilesystem:PutLifecycleConfiguration",
           "elasticfilesystem:PutFileSystemPolicy",
           "elasticfilesystem:UpdateFileSystem",
+          "elasticfilesystem:UpdateFileSystemProtection",
           "elasticfilesystem:TagResource",
           "elasticfilesystem:UntagResource",
           "elasticfilesystem:ListTagsForResource",
@@ -63,7 +64,8 @@
           "kms:ListAliases"
         ],
         "Effect": "Allow",
-        "Resource": "*"
+        "Resource": "*",
+        "Sid": "ElasticFileSystemFullAccess"
       },
       {
         "Action": [
@@ -77,7 +79,8 @@
           }
         },
         "Effect": "Allow",
-        "Resource": "*"
+        "Resource": "*",
+        "Sid": "CreateServiceLinkedRoleForEFS"
       }
     ],
     "Version": "2012-10-17"
@@ -565,7 +568,12 @@
   "privesc": true,
   "resource_exposure": true,
   "undocumented_actions": false,
-  "unknown_actions": [],
-  "updatedate": "2022-01-10T19:03:16+00:00",
-  "version": "v8"
+  "unknown_actions": [
+    {
+      "action": "elasticfilesystem:UpdateFileSystemProtection",
+      "condition": null
+    }
+  ],
+  "updatedate": "2023-11-28T16:53:28+00:00",
+  "version": "v9"
 }
diff --git a/aws/managedpolicies/AmazonQFullAccess.json b/aws/managedpolicies/AmazonQFullAccess.json
@@ -0,0 +1,35 @@
+{
+  "access_levels": [],
+  "arn": "arn:aws:iam::aws:policy/AmazonQFullAccess",
+  "createdate": "2023-11-28T16:00:24Z",
+  "credentials_exposure": false,
+  "data_access": false,
+  "deprecated": false,
+  "document": {
+    "Statement": [
+      {
+        "Action": [
+          "q:*"
+        ],
+        "Effect": "Allow",
+        "Resource": "*",
+        "Sid": "AllowAmazonQFullAccess"
+      }
+    ],
+    "Version": "2012-10-17"
+  },
+  "effective_actions": [],
+  "malformed": false,
+  "name": "AmazonQFullAccess",
+  "privesc": false,
+  "resource_exposure": false,
+  "undocumented_actions": false,
+  "unknown_actions": [
+    {
+      "action": "q:*",
+      "condition": null
+    }
+  ],
+  "updatedate": "2023-11-28T16:00:24+00:00",
+  "version": "v1"
+}