Netflix / security_monkey / 1104

68%

Pull #692

travis-ci

Skip listing attachments for unused IAM policies
The AWS IAM watcher attempts to list attachments for all policies within an account for users, groups, and roles. This causes a minimum
of three calls to iam:ListEntitiesForPolicy for every policy even if the attachment count for a policy is zero. This change reduces the
number of calls by checking the attachment count of a policy before listing the attached entities. For accounts with a large number of
unused policies or additional tools calling IAM, this prevents unnecessary volume and helps prevent throttling by AWS.

9 of 9 new or added lines in 1 file covered. (100.0%)

7085 of 11728 relevant lines covered (60.41%)

0.6 hits per line