CLOUDFORGE v1.4.0

Lab · kms_key_overbroad

/ INTERACTIVE WORKBENCH
idtypename
n04_8b32/acct-mainAccountprod-account-8b32
n20_8b32/role-readerIAMRoleSecretsReader-8b32
n06_8b32/pol-readerIAMPolicySecretsReaderPolicy-8b32
n32_8b32/kms-dataKmsKeycustomer-data-key-8b32
n16_8b32/s3-encryptedS3Bucketencrypted-exports-8b32
n09_8b32/s3-locked-backupsS3Bucketpublic-looking-backups-8b32
n17_8b32/app-secrets-storeApplicationsecrets-store-8b32
n34_8b32/data-secretsDataSetcustomer-secrets-8b32
n42_8b32/trail-mainLogTrailmain-trail-8b32
n40_8b32/role-batch-serviceIAMRoleBatchServiceRole-8b32
n37_8b32/pol-batch-serviceIAMPolicyBatchServicePolicy-8b32
n08_8b32/cicd-jenkins-oidcCICDIdentityjenkins-oidc-8b32
n07_8b32/role-partner-syncIAMRolePartnerSyncRole-8b32
n01_8b32/pol-partner-sync-readIAMPolicyPartnerSyncReadPolicy-8b32
n36_8b32/role-partner-syncIAMRolePartnerSyncRole-2-8b32
n27_8b32/pol-partner-sync-readIAMPolicyPartnerSyncReadPolicy-2-8b32
n18_8b32/s3-static-siteS3Bucketstatic-site-assets-8b32
n28_8b32/s3-static-siteS3Bucketstatic-site-assets-2-8b32
n15_8b32/s3-audit-evidenceS3Bucketaudit-evidence-8b32
n14_8b32/trail-audit-evidenceLogTrailtrail-audit-evidence-8b32
n11_8b32/data-audit-evidenceDataSetaudit-evidence-files-8b32
n13_8b32/s3-ml-featuresS3Bucketml-feature-store-8b32
n39_8b32/trail-ml-featuresLogTrailtrail-ml-features-8b32
n21_8b32/data-ml-featuresDataSetfeature-vectors-8b32
n02_8b32/s3-ops-runbooksS3Bucketops-runbooks-8b32
n33_8b32/trail-ops-runbooksLogTrailtrail-ops-runbooks-8b32
n30_8b32/data-ops-runbooksDataSetrunbook-library-8b32
n23_8b32/kms-storage-generalKmsKeykms-storage-general-8b32
n00_8b32/kms-app-configsKmsKeykms-app-configs-8b32
n05_8b32/sqs-metrics-queueSqsQueuemetrics-queue-8b32
n31_8b32/sqs-audit-eventsSqsQueueaudit-events-8b32
n35_8b32/trail-audit-operationsLogTrailtrail-audit-operations-8b32
n12_8b32/ecr-collector-agentEcrRepositoryrepo-collector-agent-8b32
n22_8b32/role-datadog-monitoringIAMRoleDatadogMonitoringRole-8b32
n24_8b32/data-reporting-storeDataSetdata-reporting-store-8b32
n38_8b32/ecr-base-runnerEcrRepositoryrepo-base-runner-8b32
n19_8b32/trail-security-secondaryLogTrailtrail-security-secondary-8b32
n10_8b32/sqs-ingest-pipelineSqsQueueingest-pipeline-8b32
n26_8b32/s3-backup-vaultS3Bucketbackup-vault-8b32
n25_8b32/role-backup-runnerIAMRoleBackupRunnerRole-8b32
n29_8b32/kms-storage-generalKmsKeykms-storage-general-2-8b32
n03_8b32/sqs-audit-eventsSqsQueueaudit-events-2-8b32
n41_8b32/s3-telemetry-logsS3Buckettelemetry-logs-8b32
n20_8b32/role-reader --attached_policy--> n06_8b32/pol-reader
n20_8b32/role-reader --can_decrypt--> n32_8b32/kms-data
n20_8b32/role-reader --can_read--> n16_8b32/s3-encrypted
n16_8b32/s3-encrypted --encrypted_with--> n32_8b32/kms-data
n16_8b32/s3-encrypted --stores_sensitive_data--> n34_8b32/data-secrets
n16_8b32/s3-encrypted --belongs_to_app--> n17_8b32/app-secrets-store
n09_8b32/s3-locked-backups --belongs_to_app--> n17_8b32/app-secrets-store
n40_8b32/role-batch-service --attached_policy--> n37_8b32/pol-batch-service
n40_8b32/role-batch-service --can_read--> n16_8b32/s3-encrypted
n08_8b32/cicd-jenkins-oidc --assumes--> n40_8b32/role-batch-service
n07_8b32/role-partner-sync --attached_policy--> n01_8b32/pol-partner-sync-read
n36_8b32/role-partner-sync --attached_policy--> n27_8b32/pol-partner-sync-read
n15_8b32/s3-audit-evidence --logs_to--> n14_8b32/trail-audit-evidence
n15_8b32/s3-audit-evidence --stores_sensitive_data--> n11_8b32/data-audit-evidence
n13_8b32/s3-ml-features --logs_to--> n39_8b32/trail-ml-features
n13_8b32/s3-ml-features --stores_sensitive_data--> n21_8b32/data-ml-features
n02_8b32/s3-ops-runbooks --logs_to--> n33_8b32/trail-ops-runbooks
n02_8b32/s3-ops-runbooks --stores_sensitive_data--> n30_8b32/data-ops-runbooks