Add Prowler detection coverage to 64 attack paths

README.md

@@ -2,9 +2,6 @@
 
 **The definitive source of truth for AWS IAM privilege escalation paths**
 
-[![Validate Schema](https://github.com/DataDog/pathfinding.cloud/actions/workflows/validate.yml/badge.svg)](https://github.com/DataDog/pathfinding.cloud/actions/workflows/validate.yml)
-[![Deploy to GitHub Pages](https://github.com/DataDog/pathfinding.cloud/actions/workflows/deploy.yml/badge.svg)](https://github.com/DataDog/pathfinding.cloud/actions/workflows/deploy.yml)
-
 **Website:** [https://pathfinding.cloud](https://pathfinding.cloud)
 
 ## Overview

data/paths/apprunner/apprunner-001.yaml

@@ -92,6 +92,8 @@ relatedPaths:
 - apprunner-002
 - lambda-001
 - ec2-001
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L287
 toolSupport:
   pmapper: false
   iamVulnerable: false

data/paths/apprunner/apprunner-002.yaml

@@ -91,6 +91,8 @@ relatedPaths:
 - apprunner-001
 - lambda-003
 - glue-002
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L292
 permissions:
   required:
   - permission: apprunner:UpdateService

data/paths/bedrock/bedrock-001.yaml

@@ -157,7 +157,7 @@ relatedPaths:
 - ec2-001
 - sagemaker-001
 detectionTools:
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L106
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L294
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/bedrock/bedrock-002.yaml

@@ -116,6 +116,8 @@ relatedPaths:
 - lambda-003
 - glue-002
 - ec2-002
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L300
 permissions:
   required:
   - permission: bedrock-agentcore:StartCodeInterpreterSession

data/paths/cloudformation/cloudformation-001.yaml

@@ -85,7 +85,7 @@ relatedPaths:
 detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/cloudformation_edges.py#L109-L132
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L152
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L60
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L169
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/cloudformation/cloudformation-002.yaml

@@ -187,6 +187,7 @@ learningEnvironments:
     description: Deploy Terraform into your own AWS account and practice individual exploitation paths (requires CloudFormation non-free module, ~$0.40/month)
 detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/cloudformation_edges.py#L149
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L174
 attackVisualization:
   nodes:
   - id: start

data/paths/cloudformation/cloudformation-003.yaml

@@ -5,6 +5,8 @@ services:
 - iam
 - cloudformation
 
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L175
 permissions:
   required:
   - permission: iam:PassRole

data/paths/cloudformation/cloudformation-004.yaml

@@ -5,6 +5,8 @@ services:
 - iam
 - cloudformation
 
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L181
 permissions:
   required:
   - permission: iam:PassRole

data/paths/cloudformation/cloudformation-005.yaml

@@ -172,6 +172,7 @@ relatedPaths:
 - cloudformation-004
 detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/cloudformation_edges.py#L188-L210
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L186
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/codebuild/codebuild-001.yaml

@@ -92,6 +92,7 @@ relatedPaths:
 - cloudformation-001
 detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/codebuild_edges.py#L216
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L203
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/codebuild/codebuild-002.yaml

@@ -82,6 +82,7 @@ relatedPaths:
 - iam-002
 detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/codebuild_edges.py#L165-L173
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L214
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/codebuild/codebuild-003.yaml

@@ -103,6 +103,7 @@ relatedPaths:
 - iam-002
 detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/codebuild_edges.py#L186
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L216
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/codebuild/codebuild-004.yaml

@@ -76,6 +76,7 @@ references:
   url: https://cloud.hacktricks.wiki/en/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc/index.html#codebuildstartbuild--codebuildstartbuildbatch
 detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/codebuild_edges.py#L186
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L208
 relatedPaths:
 - codebuild-001
 - codebuild-003

data/paths/datapipeline/datapipeline-001.yaml

@@ -108,7 +108,7 @@ permissions:
   - permission: iam:GetRole
     resourceConstraints: Useful for viewing role trust policies and attached permissions
 detectionTools:
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L64
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L191
 attackVisualization:
   nodes:
   - id: start

data/paths/ec2-instance-connect/ec2instanceconnect-003.yaml

@@ -98,6 +98,8 @@ relatedPaths:
 - ec2-001
 - ec2-002
 - ssm-001
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L98
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/ec2/ec2-001.yaml

@@ -91,7 +91,7 @@ detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/ec2_edges.py#L73-L127
   pacu: https://github.com/RhinoSecurityLabs/pacu/blob/50e7ad2d885b7ab4bc130f44b798ca85ed4d7a91/pacu/modules/iam__privesc_scan/main.py#L600
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L128
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L26-L30
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L77
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/ec2/ec2-002.yaml

@@ -64,6 +64,8 @@ references:
   url: https://bishopfox.com/blog/privilege-escalation-in-aws
 - title: HackTricks - AWS - EC2 Privesc
   url: https://cloud.hacktricks.wiki/en/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ec2-privesc/index.html#ec2modifyinstanceattribute
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L86
 permissions:
   required:
   - permission: ec2:ModifyInstanceAttribute

data/paths/ec2/ec2-003.yaml

@@ -4,6 +4,8 @@ category: new-passrole
 services:
 - iam
 - ec2
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L81
 permissions:
   required:
   - permission: iam:PassRole

data/paths/ec2/ec2-004.yaml

@@ -5,6 +5,8 @@ services:
 - ec2
 - iam
 
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L92
 permissions:
   required:
   - permission: "ec2:CreateLaunchTemplateVersion"

data/paths/ecs/ecs-001.yaml

@@ -8,6 +8,8 @@ services:
 - iam
 - ecs
 
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L230
 permissions:
   required:
   - permission: iam:PassRole

data/paths/ecs/ecs-002.yaml

@@ -8,6 +8,8 @@ services:
 - iam
 - ecs
 
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L235
 permissions:
   required:
   - permission: iam:PassRole

data/paths/ecs/ecs-003.yaml

@@ -123,6 +123,8 @@ relatedPaths:
 - lambda-001
 - ecs-001
 - ecs-002
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L230
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/ecs/ecs-004.yaml

@@ -100,6 +100,8 @@ references:
 - title: "HackTricks - AWS - ECS Privesc"
   url: "https://cloud.hacktricks.wiki/en/pentesting-cloud/aws-security/aws-privilege-escalation/aws-ecs-privesc/index.html#iampassrole-ecsregistertaskdefinition-ecsruntask"
 
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L235
 permissions:
   required:
   - permission: iam:PassRole

data/paths/ecs/ecs-005.yaml

@@ -110,6 +110,8 @@ relatedPaths:
 - lambda-001
 - codebuild-001
 - cloudformation-001
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L240
 permissions:
   required:
   - permission: iam:PassRole

data/paths/glue/glue-001.yaml

@@ -88,7 +88,7 @@ relatedPaths:
 - lambda-001
 detectionTools:
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L147-L150
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L50
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L140
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/glue/glue-002.yaml

@@ -79,7 +79,7 @@ relatedPaths:
 detectionTools:
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L159
   pacu: https://github.com/RhinoSecurityLabs/pacu/blob/50e7ad2d885b7ab4bc130f44b798ca85ed4d7a91/pacu/modules/iam__privesc_scan/main.py#L468
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L69
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L145
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/glue/glue-003.yaml

@@ -5,6 +5,8 @@ services:
 - iam
 - glue
 
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L146
 permissions:
   required:
   - permission: "iam:PassRole"

data/paths/glue/glue-004.yaml

@@ -5,6 +5,8 @@ services:
 - iam
 - glue
 
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L151
 permissions:
   required:
   - permission: "iam:PassRole"

data/paths/glue/glue-005.yaml

@@ -5,6 +5,8 @@ services:
 - iam
 - glue
 
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L157
 permissions:
   required:
   - permission: "iam:PassRole"

data/paths/glue/glue-006.yaml

@@ -4,6 +4,8 @@ category: new-passrole
 services:
 - iam
 - glue
+detectionTools:
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L163
 permissions:
   required:
   - permission: iam:PassRole

data/paths/iam/iam-001.yaml

@@ -46,7 +46,7 @@ relatedPaths:
 detectionTools:
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L117
   pacu: https://github.com/RhinoSecurityLabs/pacu/blob/50e7ad2d885b7ab4bc130f44b798ca85ed4d7a91/pacu/modules/iam__privesc_scan/main.py#L273
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L25
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L27
 detectionRules:
 - platform: CloudSIEM
   url: https://docs.datadoghq.com/security/default_rules/7b6-2a8-df9/

data/paths/iam/iam-002.yaml

@@ -57,7 +57,7 @@ detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/iam_edges.py#L70
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L112
   pacu: https://github.com/RhinoSecurityLabs/pacu/blob/50e7ad2d885b7ab4bc130f44b798ca85ed4d7a91/pacu/modules/iam__privesc_scan/main.py#L218
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L86
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L29
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/iam/iam-003.yaml

@@ -52,6 +52,7 @@ relatedPaths:
 - iam-002
 detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/iam_edges.py#L63-L85
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L41
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/iam/iam-004.yaml

@@ -70,7 +70,7 @@ detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/iam_edges.py#L116
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L113
   pacu: https://github.com/RhinoSecurityLabs/pacu/blob/50e7ad2d885b7ab4bc130f44b798ca85ed4d7a91/pacu/modules/iam__privesc_scan/main.py#L256
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L87
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L30
 attackVisualization:
   nodes:
   - id: start

data/paths/iam/iam-005.yaml

@@ -90,7 +90,7 @@ relatedPaths:
 detectionTools:
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L124
   pacu: https://github.com/RhinoSecurityLabs/pacu/blob/50e7ad2d885b7ab4bc130f44b798ca85ed4d7a91/pacu/modules/iam__privesc_scan/main.py#L423
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L94
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L36
 learningEnvironments:
   pathfinding-labs:
     type: open-source

data/paths/iam/iam-006.yaml

@@ -70,7 +70,7 @@ detectionTools:
   pmapper: https://github.com/nccgroup/PMapper/blob/91d2e60102bdadf346d77b60d90ddaa4a678f037/principalmapper/graphing/iam_edges.py#L108
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L114
   pacu: https://github.com/RhinoSecurityLabs/pacu/blob/50e7ad2d885b7ab4bc130f44b798ca85ed4d7a91/pacu/modules/iam__privesc_scan/main.py#L479
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L88
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L31
 attackVisualization:
   nodes:
   - id: start

data/paths/iam/iam-007.yaml

@@ -43,7 +43,7 @@ relatedPaths:
 detectionTools:
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L122
   pacu: https://github.com/RhinoSecurityLabs/pacu/blob/50e7ad2d885b7ab4bc130f44b798ca85ed4d7a91/pacu/modules/iam__privesc_scan/main.py#L437
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L96
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L37
 detectionRules:
 - platform: CloudSIEM
   url: https://docs.datadoghq.com/security/default_rules/7b6-2a8-df9/

data/paths/iam/iam-008.yaml

@@ -43,7 +43,7 @@ relatedPaths:
 detectionTools:
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L119
   pacu: https://github.com/RhinoSecurityLabs/pacu/blob/50e7ad2d885b7ab4bc130f44b798ca85ed4d7a91/pacu/modules/iam__privesc_scan/main.py#L190
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L89
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L32
 detectionRules:
 - platform: CloudSIEM
   url: https://docs.datadoghq.com/security/default_rules/7b6-2a8-df9/

data/paths/iam/iam-009.yaml

@@ -42,7 +42,7 @@ relatedPaths:
 detectionTools:
   cloudsplaining: https://github.com/salesforce/cloudsplaining/blob/7f82e7ab0a1a714d20a69b1d0b892e4702754e6b/cloudsplaining/shared/constants.py#L121
   pacu: https://github.com/RhinoSecurityLabs/pacu/blob/50e7ad2d885b7ab4bc130f44b798ca85ed4d7a91/pacu/modules/iam__privesc_scan/main.py#L176
-  prowler: https://github.com/prowler-cloud/prowler/blob/49c75cc4180e2304747d8fe4bd1b16dd38929d07/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L91
+  prowler: https://github.com/prowler-cloud/prowler/blob/eabe4884379070c72e07103f239bac70d31f6320/prowler/providers/aws/services/iam/lib/privilege_escalation.py#L34
 detectionRules:
 - platform: CloudSIEM
   url: https://docs.datadoghq.com/security/default_rules/7b6-2a8-df9/