From 033e2623d3bb9328e46b2337b44c4c651e038d39 Mon Sep 17 00:00:00 2001 From: Kim Oliver Fehrs Date: Wed, 7 Aug 2019 16:13:26 +0200 Subject: [PATCH] [FIX] remove duplicated filter condition | kf/aa/if --- checks/check122 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/checks/check122 b/checks/check122 index be885311..0ae9e6c3 100644 --- a/checks/check122 +++ b/checks/check122 @@ -22,7 +22,7 @@ check122(){ for policy in $LIST_CUSTOM_POLICIES; do POLICY_ARN=$(echo $policy | awk -F ',' '{print $1}') POLICY_VERSION=$(echo $policy | awk -F ',' '{print $2}') - POLICY_WITH_FULL=$($AWSCLI iam get-policy-version --output text --policy-arn $POLICY_ARN --version-id $POLICY_VERSION --query "[PolicyVersion.Document.Statement] | [] | [?Action!=null] | [?Effect == 'Allow' && Resource == '*' && Action == '*'] | [?Effect == 'Allow' && Resource == '*' && Action == '*']" $PROFILE_OPT --region $REGION) + POLICY_WITH_FULL=$($AWSCLI iam get-policy-version --output text --policy-arn $POLICY_ARN --version-id $POLICY_VERSION --query "[PolicyVersion.Document.Statement] | [] | [?Action!=null] | [?Effect == 'Allow' && Resource == '*' && Action == '*']" $PROFILE_OPT --region $REGION) if [[ $POLICY_WITH_FULL ]]; then POLICIES_ALLOW_LIST="$POLICIES_ALLOW_LIST $POLICY_ARN" fi