Conditionals of the following format are not captured by the tool when Federated principals in role-trusts-federated #77
Description
Description of Bug
Conditionals of the following format are not captured by the tool when Federated principals in role-trusts-federated.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Principal": {
"Federated": "arn:aws:iam::012345678912:oidc-provider/oidc.eks.us-west-2.amazonaws.com/id/SOMEID"
},
"Action": "sts:AssumeRoleWithWebIdentity",
"Condition": {
"StringEquals": {
"oidc.eks.us-west-2.amazonaws.com/id/SOMEID:sub": [
"system:serviceaccount:some-system:some-controller",
"system:serviceaccount:myoperator-system:myoperator-controller-manager"
]
}
}
}
]
}
What should the expected behavior be
The tool should capture both.