79 lines
2.4 KiB
Go
79 lines
2.4 KiB
Go
package aws
|
|
|
|
import (
|
|
"github.com/sirupsen/logrus"
|
|
"github.com/snyk/driftctl/enumeration/alerter"
|
|
"github.com/snyk/driftctl/enumeration/remote/alerts"
|
|
"github.com/snyk/driftctl/enumeration/remote/aws/repository"
|
|
"github.com/snyk/driftctl/enumeration/remote/common"
|
|
remoteerror "github.com/snyk/driftctl/enumeration/remote/error"
|
|
tf "github.com/snyk/driftctl/enumeration/remote/terraform"
|
|
"github.com/snyk/driftctl/enumeration/resource"
|
|
"github.com/snyk/driftctl/enumeration/resource/aws"
|
|
)
|
|
|
|
type S3BucketPolicyEnumerator struct {
|
|
repository repository.S3Repository
|
|
factory resource.ResourceFactory
|
|
providerConfig tf.TerraformProviderConfig
|
|
alerter alerter.AlerterInterface
|
|
}
|
|
|
|
func NewS3BucketPolicyEnumerator(repo repository.S3Repository, factory resource.ResourceFactory, providerConfig tf.TerraformProviderConfig, alerter alerter.AlerterInterface) *S3BucketPolicyEnumerator {
|
|
return &S3BucketPolicyEnumerator{
|
|
repository: repo,
|
|
factory: factory,
|
|
providerConfig: providerConfig,
|
|
alerter: alerter,
|
|
}
|
|
}
|
|
|
|
func (e *S3BucketPolicyEnumerator) SupportedType() resource.ResourceType {
|
|
return aws.AwsS3BucketPolicyResourceType
|
|
}
|
|
|
|
func (e *S3BucketPolicyEnumerator) Enumerate() ([]*resource.Resource, error) {
|
|
buckets, err := e.repository.ListAllBuckets()
|
|
if err != nil {
|
|
return nil, remoteerror.NewResourceListingErrorWithType(err, string(e.SupportedType()), aws.AwsS3BucketResourceType)
|
|
}
|
|
|
|
results := make([]*resource.Resource, 0, len(buckets))
|
|
|
|
for _, bucket := range buckets {
|
|
region, err := e.repository.GetBucketLocation(*bucket.Name)
|
|
if err != nil {
|
|
alerts.SendEnumerationAlert(common.RemoteAWSTerraform, e.alerter, remoteerror.NewResourceScanningError(err, string(e.SupportedType()), *bucket.Name))
|
|
continue
|
|
}
|
|
if region == "" || region != e.providerConfig.DefaultAlias {
|
|
logrus.WithFields(logrus.Fields{
|
|
"region": region,
|
|
"bucket": *bucket.Name,
|
|
}).Debug("Skipped bucket policy")
|
|
continue
|
|
}
|
|
|
|
policy, err := e.repository.GetBucketPolicy(*bucket.Name, region)
|
|
if err != nil {
|
|
alerts.SendEnumerationAlert(common.RemoteAWSTerraform, e.alerter, remoteerror.NewResourceScanningError(err, string(e.SupportedType()), *bucket.Name))
|
|
continue
|
|
}
|
|
|
|
if policy != nil {
|
|
results = append(
|
|
results,
|
|
e.factory.CreateAbstractResource(
|
|
string(e.SupportedType()),
|
|
*bucket.Name,
|
|
map[string]interface{}{
|
|
"alias": region,
|
|
},
|
|
),
|
|
)
|
|
}
|
|
}
|
|
|
|
return results, err
|
|
}
|