SG-036: IAM Wildcard

Severity: HIGH

IAM policy wildcards on Allow

Fires when

• An IAM policy sets Action to '*' (or lists '*' among its actions)
• An IAM policy sets Resource to '*'
• An IAM policy uses a wildcard service action such as iam:* or s3:*
• An Allow effect is paired with a wildcard Action or Resource

Remediation

No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.