[sync] Revert changes to aws_ami_modified_for_public_access.py/.yml (#48

) (#1067)
panther-labs · Jan 23, 2024 · 5aa65f5 · 5aa65f5
1 parent df57b3d
commit 5aa65f5
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/rules/aws_cloudtrail_rules/aws_ami_modified_for_public_access.py b/rules/aws_cloudtrail_rules/aws_ami_modified_for_public_access.py
@@ -12,7 +12,7 @@ def rule(event):
     )
 
     for item in added_perms:
-        if item.get("userId") or item.get("group") == "all":
+        if item.get("group") == "all":
             return True
 
     return False

diff --git a/rules/aws_cloudtrail_rules/aws_ami_modified_for_public_access.yml b/rules/aws_cloudtrail_rules/aws_ami_modified_for_public_access.yml
@@ -190,7 +190,7 @@ Tests:
       }
   -
     Name: AMI Added to User
-    ExpectedResult: true
+    ExpectedResult: false
     Log:
       {
           "awsRegion": "us-west-2",