Aalexbit-codemod

python-s6270-aws-public-resource-policy-mining

Mine python:S6270: AWS resource-based policies should not grant public access; read-only metrics with blocking severity

miningmetricspythonsecuritypython:S6270
Public
0 executions
Apply to Repository

Run locally

npx codemod python-s6270-aws-public-resource-policy-mining

python-s6270-aws-public-resource-policy-mining

Read-only mining codemod for python:S6270: AWS resource-based policies should not grant public access.

Emits python_security_finding metric rows with blocking severity. Source files are never modified.

Rule

  • ID: python:S6270
  • Severity: blocking
  • Remediation: Remove Principal "" or AWS "" from resource policies

Usage

bash

Development

bash

Ready to contribute?

Build your own codemod and share it with the community.

Publish a codemodJoin the community