Closed
Description
Found a FP case:
When testing AssumeRole for * resources, this policy gets flagged (belong to PowerUserAccess Managed policy):
"Statement": [
{
"Effect": "Allow",
"NotAction": [
"iam:*",
"organizations:*"
],
"Resource": [
"*"
]
} ,
{
"Action": [
"iam:CreateServiceLinkedRole",
"iam:DeleteServiceLinkedRole",
"iam:ListRoles",
"organizations:DescribeOrganization"
],
"Effect": "Allow",
"Resource": [
"*"
]
}
] ,
"Version": "2012-10-17"