2021-07-06 13:00:41 +00:00
|
|
|
package aws
|
|
|
|
|
|
|
|
import (
|
|
|
|
"fmt"
|
2022-07-18 12:19:12 +00:00
|
|
|
|
2022-06-28 07:23:29 +00:00
|
|
|
"github.com/snyk/driftctl/enumeration/alerter"
|
|
|
|
"github.com/snyk/driftctl/enumeration/remote/alerts"
|
|
|
|
"github.com/snyk/driftctl/enumeration/remote/aws/repository"
|
|
|
|
"github.com/snyk/driftctl/enumeration/remote/common"
|
|
|
|
remoteerror "github.com/snyk/driftctl/enumeration/remote/error"
|
|
|
|
tf "github.com/snyk/driftctl/enumeration/remote/terraform"
|
2021-07-06 13:00:41 +00:00
|
|
|
|
|
|
|
"github.com/sirupsen/logrus"
|
2022-06-28 07:23:29 +00:00
|
|
|
"github.com/snyk/driftctl/enumeration/resource"
|
|
|
|
"github.com/snyk/driftctl/enumeration/resource/aws"
|
2021-07-06 13:00:41 +00:00
|
|
|
)
|
|
|
|
|
|
|
|
type S3BucketAnalyticEnumerator struct {
|
|
|
|
repository repository.S3Repository
|
|
|
|
factory resource.ResourceFactory
|
|
|
|
providerConfig tf.TerraformProviderConfig
|
2021-08-03 10:34:36 +00:00
|
|
|
alerter alerter.AlerterInterface
|
2021-07-06 13:00:41 +00:00
|
|
|
}
|
|
|
|
|
2021-08-03 10:34:36 +00:00
|
|
|
func NewS3BucketAnalyticEnumerator(repo repository.S3Repository, factory resource.ResourceFactory, providerConfig tf.TerraformProviderConfig, alerter alerter.AlerterInterface) *S3BucketAnalyticEnumerator {
|
2021-07-06 13:00:41 +00:00
|
|
|
return &S3BucketAnalyticEnumerator{
|
|
|
|
repository: repo,
|
|
|
|
factory: factory,
|
|
|
|
providerConfig: providerConfig,
|
2021-08-03 10:34:36 +00:00
|
|
|
alerter: alerter,
|
2021-07-06 13:00:41 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func (e *S3BucketAnalyticEnumerator) SupportedType() resource.ResourceType {
|
|
|
|
return aws.AwsS3BucketAnalyticsConfigurationResourceType
|
|
|
|
}
|
|
|
|
|
2021-08-09 14:03:04 +00:00
|
|
|
func (e *S3BucketAnalyticEnumerator) Enumerate() ([]*resource.Resource, error) {
|
2021-07-06 13:00:41 +00:00
|
|
|
buckets, err := e.repository.ListAllBuckets()
|
|
|
|
if err != nil {
|
2021-08-03 10:34:36 +00:00
|
|
|
return nil, remoteerror.NewResourceListingErrorWithType(err, string(e.SupportedType()), aws.AwsS3BucketResourceType)
|
2021-07-06 13:00:41 +00:00
|
|
|
}
|
|
|
|
|
2021-10-27 09:30:47 +00:00
|
|
|
results := make([]*resource.Resource, 0, len(buckets))
|
2021-07-06 13:00:41 +00:00
|
|
|
|
|
|
|
for _, bucket := range buckets {
|
|
|
|
region, err := e.repository.GetBucketLocation(*bucket.Name)
|
|
|
|
if err != nil {
|
2021-08-03 10:34:36 +00:00
|
|
|
alerts.SendEnumerationAlert(common.RemoteAWSTerraform, e.alerter, remoteerror.NewResourceScanningError(err, string(e.SupportedType()), *bucket.Name))
|
|
|
|
continue
|
2021-07-06 13:00:41 +00:00
|
|
|
}
|
|
|
|
if region == "" || region != e.providerConfig.DefaultAlias {
|
|
|
|
logrus.WithFields(logrus.Fields{
|
|
|
|
"region": region,
|
|
|
|
"bucket": *bucket.Name,
|
|
|
|
}).Debug("Skipped bucket analytic")
|
|
|
|
continue
|
|
|
|
}
|
|
|
|
|
|
|
|
analyticsConfigurationList, err := e.repository.ListBucketAnalyticsConfigurations(bucket, region)
|
|
|
|
if err != nil {
|
2021-08-03 10:34:36 +00:00
|
|
|
return nil, remoteerror.NewResourceListingError(err, string(e.SupportedType()))
|
2021-07-06 13:00:41 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
for _, analytics := range analyticsConfigurationList {
|
|
|
|
id := fmt.Sprintf("%s:%s", *bucket.Name, *analytics.Id)
|
|
|
|
results = append(
|
|
|
|
results,
|
|
|
|
e.factory.CreateAbstractResource(
|
|
|
|
string(e.SupportedType()),
|
|
|
|
id,
|
|
|
|
map[string]interface{}{
|
2022-07-18 12:19:12 +00:00
|
|
|
"alias": region,
|
2021-07-06 13:00:41 +00:00
|
|
|
},
|
|
|
|
),
|
|
|
|
)
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return results, err
|
|
|
|
}
|