Add more global variables

duo-labs · Sep 6, 2022 · 1d7b436 · 1d7b436
1 parent f44aac8
commit 1d7b436
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/parliament/statement.py b/parliament/statement.py
@@ -147,12 +147,16 @@ def is_valid_account_id(str):
     "aws:CalledViaLast": "String",
     "aws:CurrentTime": "Date",
     "aws:EpochTime": "Date",  # This needs to accept Date or Numeric
+    "aws:FederatedProvider": "String",
     "aws:MultiFactorAuthAge": "Numeric",
     "aws:MultiFactorAuthPresent": "Bool",
     "aws:PrincipalAccount": "String",
     "aws:PrincipalOrgID": "String",
     "aws:PrincipalArn": "Arn",
+    "aws:PrincipalIsAWSService": "Bool",
     "aws:PrincipalOrgPaths": "String",
+    "aws:PrincipalServiceName": "String",
+    "aws:PrincipalServiceNamesList": "String",
     "aws:PrincipalTag": "String",
     "aws:PrincipalType": "String",
     "aws:RequestedRegion": "String",
@@ -162,11 +166,16 @@ def is_valid_account_id(str):
     "aws:PrincipalTag/*": "String",
     "aws:PrincipalType": "String",
     "aws:Referer": "String",
+    "aws:RequestedRegion": "String",
     "aws:RequestTag/*": "String",
+    "aws:ResourceAccount": "String",
+    "aws:ResourceOrgID": "String",
+    "aws:ResourceOrgPaths": "String",
     "aws:ResourceTag/*": "String",
     "aws:SecureTransport": "Bool",
     "aws:SourceAccount": "String",
     "aws:SourceArn": "Arn",
+    "aws:SourceIdentity": "String",
     "aws:SourceIp": "Ip",
     "aws:SourceVpc": "String",
     "aws:SourceVpce": "String",