CLI for expansion

[mwarkentin]

It would be nice if there was a small CLI tool available when you installed that would allow you to quickly expand wildcards without having to hop into a python shell. Imagining something like:

policyuniverse expand --action 'swf:res*'
"Action": [
              "swf:respondactivitytaskcanceled",
              "swf:respondactivitytaskcompleted",
              "swf:respondactivitytaskfailed",
              "swf:responddecisiontaskcompleted"
            ]

Alternatively if you wanted to output the full policy:

policyuniverse expand --action 'swf:res*' --resource '*' --effect 'Allow'
{
        "Statement": [{
            "Action": [
              "swf:respondactivitytaskcanceled",
              "swf:respondactivitytaskcompleted",
              "swf:respondactivitytaskfailed",
              "swf:responddecisiontaskcompleted"
            ],
            "Resource": "*",
            "Effect": "Allow"
          }]
      }

[TryTryAgain]

I was hoping the same, but for minification ;)

[getsec]

@TryTryAgain Same. I'd like given a policy, make it smaller

[kmcquade]

@mwarkentin - Cloudsplaining does have an expand-policy subcommand. It would be pretty straightforward to also have a minimize-policy subcommand as well

[patricksanders]

This does sound neat, but since policyuniverse is more of a library than a CLI tool, I'm thinking @kmcquade's plug sounds pretty good. 😉

That being said, I'm more than happy to review a PR (or a proposal) for a CLI.

[jtyers]

Shameless plug, but check out my project aws-policy-generator. It uses policyuniverse under the hood to do all the heavy lifting.

[patricksanders]

Neat, thanks for sharing @jtyers!

[scriptsrc]

That’s awesome!!

…

On Wed, Jun 22, 2022 at 11:42 AM Patrick Sanders ***@***.***> wrote: Neat, thanks for sharing @jtyers <https://github.com/jtyers>! — Reply to this email directly, view it on GitHub <#38 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AB5DLJVGTS7WVWU3H2Z6ZXTVQNF7VANCNFSM4LUIAUXA> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>