Hacker News new | ask | show | jobs
by WatchDog 1960 days ago
It's mentioned in the readme, but CSM doesn't provide any information as to the resources being accessed, just the service and action, so the best this tool can do is generate policy with wildcard resources.

Not ideal, but I guess it's better than running your system with a wide open policy.