iac/iam/iam-aws-wildcard-resource

AWS IAM policy grants wildcard resource (*)

mediumCloud IAMiac-iam

What it detects

A statement with `"Resource": "*"` applies to every resource in the account, removing any blast-radius boundary on the granted actions.

Remediation

Scope the statement to specific ARNs (a bucket, a table) instead of `*`.

How it runs

Run against JSON/YAML/source files. AWS IAM rules require a policy-document context (Statement + Effect); GCP primitive roles are matched anywhere. HCL is left to the Terraform layer.

Found a false positive or want this rule tuned? File an issue. You can also suppress per-repo via a .repoguardignore line.