def _find_roles_assumable_in_policy()

in cartography/intel/aws/iam.py [0:0]

• 10 lines of code
• 5 McCabe index (conditional complexity)

def _find_roles_assumable_in_policy(policy_data):
    ret = []
    statements = policy_data["PolicyDocument"]["Statement"]
    if isinstance(statements, dict):
        statements = [statements]
    for statement in statements:
        parsed_statement = policyuniverse.statement.Statement(statement)
        if parsed_statement.effect == 'Allow' and 'sts:assumerole' in parsed_statement.actions_expanded:
            ret.extend(list(parsed_statement.resources))
    return ret