73 lines
2.4 KiB
Go
73 lines
2.4 KiB
Go
|
package middlewares
|
||
|
|
|
||
|
|
import (
|
||
|
|
"github.com/cloudskiff/driftctl/pkg/resource"
|
||
|
|
"github.com/cloudskiff/driftctl/pkg/resource/aws"
|
||
|
|
)
|
||
|
|
|
||
|
|
/**
|
||
|
|
When listing policy attachment from aws we retrieve only user_policy_attachment or role_policy_attachment thus making it
|
||
|
|
impossible to compare with policy_attachment that could exist in terraform.
|
||
|
|
We decided to transform all attachments to policy_attachment so we can find which attachments are managed.
|
||
|
|
*/
|
||
|
|
|
||
|
|
type IamPolicyAttachmentTransformer struct {
|
||
|
|
resourceFactory resource.ResourceFactory
|
||
|
|
}
|
||
|
|
|
||
|
|
func NewIamPolicyAttachmentTransformer(resourceFactory resource.ResourceFactory) IamPolicyAttachmentTransformer {
|
||
|
|
return IamPolicyAttachmentTransformer{
|
||
|
|
resourceFactory,
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
func (m IamPolicyAttachmentTransformer) Execute(remoteResources, resourcesFromState *[]resource.Resource) error {
|
||
|
|
*remoteResources = m.transform(remoteResources)
|
||
|
|
*resourcesFromState = m.transform(resourcesFromState)
|
||
|
|
return nil
|
||
|
|
}
|
||
|
|
|
||
|
|
func (m IamPolicyAttachmentTransformer) transform(resources *[]resource.Resource) []resource.Resource {
|
||
|
|
var newResources []resource.Resource
|
||
|
|
for _, res := range *resources {
|
||
|
|
if res.TerraformType() != aws.AwsIamUserPolicyAttachmentResourceType &&
|
||
|
|
res.TerraformType() != aws.AwsIamRolePolicyAttachmentResourceType {
|
||
|
|
newResources = append(newResources, res)
|
||
|
|
continue
|
||
|
|
}
|
||
|
|
|
||
|
|
if res.TerraformType() == aws.AwsIamUserPolicyAttachmentResourceType {
|
||
|
|
attrs := *res.Attributes()
|
||
|
|
policyAttachmentData := resource.Attributes{
|
||
|
|
"id": res.TerraformId(),
|
||
|
|
"policy_arn": attrs["policy_arn"],
|
||
|
|
"users": []interface{}{attrs["user"]},
|
||
|
|
"groups": []interface{}{},
|
||
|
|
"roles": []interface{}{},
|
||
|
|
}
|
||
|
|
|
||
|
|
policyAttachment := m.resourceFactory.CreateAbstractResource(aws.AwsIamPolicyAttachmentResourceType, res.TerraformId(), policyAttachmentData)
|
||
|
|
|
||
|
|
newResources = append(newResources, policyAttachment)
|
||
|
|
continue
|
||
|
|
}
|
||
|
|
|
||
|
|
if res.TerraformType() == aws.AwsIamRolePolicyAttachmentResourceType {
|
||
|
|
attrs := *res.Attributes()
|
||
|
|
policyAttachmentData := resource.Attributes{
|
||
|
|
"id": res.TerraformId(),
|
||
|
|
"policy_arn": attrs["policy_arn"],
|
||
|
|
"users": []interface{}{},
|
||
|
|
"groups": []interface{}{},
|
||
|
|
"roles": []interface{}{attrs["role"]},
|
||
|
|
}
|
||
|
|
|
||
|
|
policyAttachment := m.resourceFactory.CreateAbstractResource(aws.AwsIamPolicyAttachmentResourceType, res.TerraformId(), policyAttachmentData)
|
||
|
|
|
||
|
|
newResources = append(newResources, policyAttachment)
|
||
|
|
continue
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return newResources
|
||
|
|
}
|