# IAM condition allows every address

An IpAddress or aws:SourceIp value of 0.0.0.0/0, ::/0, or * on a standalone IAM policy or a Serverless iamRoleStatements entry.

Area: Security

## What you need to supply

The policy JSON or the Serverless iamRoleStatements entry. Other condition operators are not evaluated.

## If it reports a finding

High severity. The suggested next step is to restrict the source address to an approved range.

## What this does not prove

A condition of 10.0.0.0/8 or a specific address is not this finding. An Effect of Deny is not this finding.

## Condition that this check is written to notice

```
Condition:
  IpAddress:
    aws:SourceIp: 0.0.0.0/0
```

Reading this page does not submit infrastructure. The HTML page is https://skaleagents.com/checks/iam-condition-allows-every-address.