62 lines
1.9 KiB
Go
62 lines
1.9 KiB
Go
|
package middlewares
|
||
|
|
|
||
|
|
import (
|
||
|
|
"github.com/cloudskiff/driftctl/pkg/resource"
|
||
|
|
"github.com/cloudskiff/driftctl/pkg/resource/aws"
|
||
|
|
"github.com/sirupsen/logrus"
|
||
|
|
)
|
||
|
|
|
||
|
|
// SQS queues from AWS have a weird behaviour when we fetch them.
|
||
|
|
// By default they have a Policy attached with only an ID
|
||
|
|
// "arn:aws:sqs:eu-west-3:XXXXXXXXXXXX:foobar/SQSDefaultPolicy" but on fetch
|
||
|
|
// the SDK return an empty policy (e.g. policy = "").
|
||
|
|
// We need to ignore those policy from unmanaged resources if they are not managed
|
||
|
|
// by IaC.
|
||
|
|
type AwsDefaultSqsQueuePolicy struct{}
|
||
|
|
|
||
|
|
func NewAwsDefaultSqsQueuePolicy() AwsDefaultSqsQueuePolicy {
|
||
|
|
return AwsDefaultSqsQueuePolicy{}
|
||
|
|
}
|
||
|
|
|
||
|
|
func (m AwsDefaultSqsQueuePolicy) Execute(remoteResources, resourcesFromState *[]resource.Resource) error {
|
||
|
|
newRemoteResources := make([]resource.Resource, 0)
|
||
|
|
for _, res := range *remoteResources {
|
||
|
|
// Ignore all resources other than sqs_queue_policy
|
||
|
|
if res.TerraformType() != aws.AwsSqsQueuePolicyResourceType {
|
||
|
|
newRemoteResources = append(newRemoteResources, res)
|
||
|
|
continue
|
||
|
|
}
|
||
|
|
|
||
|
|
policy, _ := res.(*aws.AwsSqsQueuePolicy)
|
||
|
|
|
||
|
|
// Ignore all non-default queue policy
|
||
|
|
if policy.Policy != nil && *policy.Policy != "" {
|
||
|
|
newRemoteResources = append(newRemoteResources, policy)
|
||
|
|
continue
|
||
|
|
}
|
||
|
|
|
||
|
|
// Check if queue policy is managed by IaC
|
||
|
|
existInState := false
|
||
|
|
for _, stateResource := range *resourcesFromState {
|
||
|
|
if resource.IsSameResource(res, stateResource) {
|
||
|
|
existInState = true
|
||
|
|
break
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// Include resource if it's managed in IaC
|
||
|
|
if existInState {
|
||
|
|
newRemoteResources = append(newRemoteResources, res)
|
||
|
|
continue
|
||
|
|
}
|
||
|
|
|
||
|
|
// Else, resource is not added to newRemoteResources slice so it will be ignored
|
||
|
|
logrus.WithFields(logrus.Fields{
|
||
|
|
"id": res.TerraformId(),
|
||
|
|
"type": res.TerraformType(),
|
||
|
|
}).Debug("Ignoring default queue policy as it is not managed by IaC")
|
||
|
|
}
|
||
|
|
*remoteResources = newRemoteResources
|
||
|
|
return nil
|
||
|
|
}
|