fix duo-labs#671 by handling kms exceptions on collect

andrewkrug · Mar 2, 2020 · fe96652 · fe96652
1 parent 79a7d52
commit fe96652
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/commands/collect.py b/commands/collect.py
@@ -153,6 +153,18 @@ def call_function(outputfile, handler, method_to_call, parameters, check, summar
             and call_summary["action"] == "list_key_policies"
         ):
             print("  - Denied, which should mean this KMS has restricted access")
+        elif (
+            "AccessDeniedException" in str(e)
+            and call_summary["service"] == "kms"
+            and call_summary["action"] == "list_grants"
+        ):
+            print("  - Denied, which should mean this KMS has restricted access")
+        elif (
+            "AccessDeniedException" in str(e)
+            and call_summary["service"] == "kms"
+            and call_summary["action"] == "get_key_policy"
+        ):
+            print("  - Denied, which should mean this KMS has restricted access")
         elif (
             "AccessDeniedException" in str(e)
             and call_summary["service"] == "kms"