From 21fba273556df82428dc27450b5b4a2b49ec05cc Mon Sep 17 00:00:00 2001 From: Sergio Garcia <38561120+sergargar@users.noreply.github.com> Date: Fri, 10 Nov 2023 09:51:19 +0100 Subject: [PATCH] fix(iam): do not list tags for inline policies (#3014) --- prowler/providers/aws/services/iam/iam_service.py | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/prowler/providers/aws/services/iam/iam_service.py b/prowler/providers/aws/services/iam/iam_service.py index 5614fef3..ca31b14a 100644 --- a/prowler/providers/aws/services/iam/iam_service.py +++ b/prowler/providers/aws/services/iam/iam_service.py @@ -718,10 +718,11 @@ class IAM(AWSService): try: for policy in self.policies: try: - response = self.client.list_policy_tags(PolicyArn=policy.arn)[ - "Tags" - ] - policy.tags = response + if policy.type != "Inline": + response = self.client.list_policy_tags(PolicyArn=policy.arn)[ + "Tags" + ] + policy.tags = response except ClientError as error: if error.response["Error"]["Code"] == "NoSuchEntity": policy.tags = []