{"id":16615393,"url":"https://github.com/denisse-dev/can","last_synced_at":"2025-09-11T10:39:00.403Z","repository":{"id":112037689,"uuid":"280280109","full_name":"denisse-dev/can","owner":"denisse-dev","description":"can is a command line tool that allows you to easily check which actions from a list can the role do.","archived":false,"fork":false,"pushed_at":"2020-07-18T00:49:07.000Z","size":7,"stargazers_count":0,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-01-17T17:54:55.193Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/denisse-dev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-07-16T23:30:47.000Z","updated_at":"2020-10-20T16:13:34.000Z","dependencies_parsed_at":"2023-07-31T06:00:17.300Z","dependency_job_id":null,"html_url":"https://github.com/denisse-dev/can","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/denisse-dev%2Fcan","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/denisse-dev%2Fcan/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/denisse-dev%2Fcan/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/denisse-dev%2Fcan/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/denisse-dev","download_url":"https://codeload.github.com/denisse-dev/can/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":242956549,"owners_count":20212454,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-12T02:09:20.736Z","updated_at":"2025-03-11T01:50:44.128Z","avatar_url":"https://github.com/denisse-dev.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# can\n\ncan is a command line tool that allows you to easily check which actions from a list can the role do.\n\n## Installation\n\n### Using go\n\nExecute the following command\n\n```shell\n$ go get -u github.com/wizeline-sre/can\n```\n\n### Usage\n\n1. Set your credentials through the AWS CLI.\n1. The file with the actions should contain one action per row, for example:\n    ```shell\n    ec2:CreateVpc\n    ec2:Describe*\n    logs:ListTagsLogGroup\n    ```\n1. To check what actions the role can do, execute:\n  ```shell\n  $ can -source-arn arn:aws:iam::XXXXXX:XXXX/XXXXXXXX -do actions.txt\n  ```\n1. A printed table will appear showing what actions the role can do.\n  - ✓ means that it is allowed\n  - × means it is not allowed\n\n#### Output example\n\n```shell\n+-----------------------------------+---------+\n|              ACTION               | ALLOWED |\n+-----------------------------------+---------+\n| ec2:CreateVpc                     | ✓       |\n| ec2:DeleteVpc                     | ✓       |\n| ec2:Describe*                     | ✓       |\n| iam:UpdateAssumeRolePolicy        | ×       |\n| logs:CreateLogGroup               | ✓       |\n| logs:DescribeLogGroups            | ✓       |\n| logs:DeleteLogGroup               | ✓       |\n| logs:ListTagsLogGroup             | ✓       |\n| logs:PutRetentionPolicy           | ×       |\n+-----------------------------------+---------+\n```\n\n### Restrictions and considerations\n\n- You'll need to have `iam:SimulatePrincipalPolicy` to be able to run `can` successfully.\n\n- Currently, `can` does not support context keys.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdenisse-dev%2Fcan","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdenisse-dev%2Fcan","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdenisse-dev%2Fcan/lists"}