Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stuck at Generating Edges based on lambda data #115

Open
paolodm opened this issue Apr 15, 2022 · 1 comment
Open

Stuck at Generating Edges based on lambda data #115

paolodm opened this issue Apr 15, 2022 · 1 comment
Labels
bug Something isn't working

Comments

@paolodm
Copy link

paolodm commented Apr 15, 2022

Describe the bug
When running pmapper --profile profile_name graph create, I eventually get stuck at the Stuck at Generating Edges based on lambda data step.

I think it's because my user does not have the privilege to perform lambda:ListFunctions. I get the following error:

2022-04-14 20:46:43-0400 | DEBUG | principalmapper.graphing.lambda_edges | Exception details: An error occurred (AccessDeniedException) when calling the ListFunctions operation: User: arn:aws:sts::<AWS_ACCOUNT_ID>:<assumed-role/AWS_ACCOUNT_ROLE>/<AWS_ACCOUNT_USER> is not authorized to perform: lambda:ListFunctions on resource: * with an explicit deny in a service control policy

To Reproduce
Steps to reproduce the behavior, please include information on suspected users/roles that are the source of the issue when possible:

  1. Use a AWS profile that does not have the ability to ListFunction.
  2. Run the aforementioned command.
  3. See that it gets hung at the Generating Edges based on Lambda data..

Expected behavior
It should not get stuck. If you need to quit the program, that would be better.

@paolodm paolodm added the bug Something isn't working label Apr 15, 2022
@TCFox
Copy link

TCFox commented May 11, 2022

I can confirm, I am experiencing the same issue as above. Seen running from master (91d2e60).

wdahlenburg pushed a commit to wdahlenburg/PMapper that referenced this issue Sep 5, 2022
…dential_exfiltration

Added note about a niche credential exfiltration GuardDuty bypass
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants