Class: UserHasInlinePolicyRule
- Defined in:
- lib/cfn-nag/custom_rules/UserHasInlinePolicyRule.rb
Instance Method Summary collapse
Methods inherited from BaseRule
Instance Method Details
#audit_impl(cfn_model) ⇒ Object
17 18 19 20 21 22 23 |
# File 'lib/cfn-nag/custom_rules/UserHasInlinePolicyRule.rb', line 17 def audit_impl(cfn_model) violating_users = cfn_model.iam_users.reject do |iam_user| iam_user.policy_objects.empty? end violating_users.map(&:logical_resource_id) end |
#rule_id ⇒ Object
13 14 15 |
# File 'lib/cfn-nag/custom_rules/UserHasInlinePolicyRule.rb', line 13 def rule_id 'F10' end |
#rule_text ⇒ Object
5 6 7 |
# File 'lib/cfn-nag/custom_rules/UserHasInlinePolicyRule.rb', line 5 def rule_text 'IAM user should not have any inline policies. Should be centralized Policy object on group' end |
#rule_type ⇒ Object
9 10 11 |
# File 'lib/cfn-nag/custom_rules/UserHasInlinePolicyRule.rb', line 9 def rule_type Violation::FAILING_VIOLATION end |