CLOUDFORGE v1.4.0

Lab · secretsmanager_policy_overbroad

/ INTERACTIVE WORKBENCH
idtypename
n32_9510/acct-mainAccountprod-account-9510
n20_9510/acct-externalAccountexternal-account-9510
n38_9510/sec-db-credsSecretsManagerSecretprod-db-master-credentials-9510
n04_9510/rds-prod-primaryRdsInstanceprod-postgres-primary-9510
n16_9510/data-prod-db-recordsDataSetproduction-database-records-9510
n19_9510/role-ingest-serviceIAMRoleIngestServiceRole-9510
n27_9510/pol-ingest-serviceIAMPolicyIngestServicePolicy-9510
n35_9510/role-legacy-supportIAMRoleLegacySupportRole-9510
n21_9510/pol-legacy-support-readIAMPolicyLegacySupportReadPolicy-9510
n22_9510/role-migration-helperIAMRoleMigrationHelperRole-9510
n07_9510/pol-migration-helper-readIAMPolicyMigrationHelperReadPolicy-9510
n40_9510/role-migration-helperIAMRoleMigrationHelperRole-2-9510
n30_9510/pol-migration-helper-readIAMPolicyMigrationHelperReadPolicy-2-9510
n14_9510/s3-marketing-downloadsS3Bucketmarketing-downloads-9510
n03_9510/s3-marketing-downloadsS3Bucketmarketing-downloads-2-9510
n25_9510/s3-ops-runbooksS3Bucketops-runbooks-9510
n08_9510/trail-ops-runbooksLogTrailtrail-ops-runbooks-9510
n06_9510/data-ops-runbooksDataSetrunbook-library-9510
n33_9510/kms-app-configsKmsKeykms-app-configs-9510
n36_9510/role-prometheus-agentIAMRolePrometheusAgentRole-9510
n05_9510/role-backup-runnerIAMRoleBackupRunnerRole-9510
n37_9510/s3-exports-stagingS3Bucketexports-staging-9510
n18_9510/s3-build-artifactsS3Bucketbuild-artifacts-9510
n26_9510/s3-media-cacheS3Bucketmedia-cache-9510
n15_9510/trail-audit-operationsLogTrailtrail-audit-operations-9510
n28_9510/role-cloud-watch-agentIAMRoleCloudWatchAgentRole-9510
n13_9510/data-reporting-storeDataSetdata-reporting-store-9510
n24_9510/sqs-jobs-dispatchSqsQueuejobs-dispatch-9510
n02_9510/trail-audit-operationsLogTrailtrail-audit-operations-2-9510
n10_9510/kms-app-configsKmsKeykms-app-configs-2-9510
n17_9510/s3-assets-archiveS3Bucketassets-archive-9510
n31_9510/role-datadog-monitoringIAMRoleDatadogMonitoringRole-9510
n01_9510/kms-internal-telemetryKmsKeykms-internal-telemetry-9510
n29_9510/ecr-utility-imageEcrRepositoryrepo-utility-image-9510
n11_9510/ecr-base-runnerEcrRepositoryrepo-base-runner-9510
n23_9510/role-datadog-monitoringIAMRoleDatadogMonitoringRole-2-9510
n39_9510/trail-infra-eventsLogTrailtrail-infra-events-9510
n09_9510/data-operational-metricsDataSetdata-operational-metrics-9510
n12_9510/sqs-notifications-streamSqsQueuenotifications-stream-9510
n34_9510/role-cloud-watch-agentIAMRoleCloudWatchAgentRole-2-9510
n00_9510/sqs-ingest-pipelineSqsQueueingest-pipeline-9510
n20_9510/acct-external --can_read--> n38_9510/sec-db-creds
n04_9510/rds-prod-primary --stores_sensitive_data--> n16_9510/data-prod-db-records
n19_9510/role-ingest-service --attached_policy--> n27_9510/pol-ingest-service
n19_9510/role-ingest-service --can_read--> n38_9510/sec-db-creds
n35_9510/role-legacy-support --attached_policy--> n21_9510/pol-legacy-support-read
n22_9510/role-migration-helper --attached_policy--> n07_9510/pol-migration-helper-read
n40_9510/role-migration-helper --attached_policy--> n30_9510/pol-migration-helper-read
n25_9510/s3-ops-runbooks --logs_to--> n08_9510/trail-ops-runbooks
n25_9510/s3-ops-runbooks --stores_sensitive_data--> n06_9510/data-ops-runbooks