70 lines
1.9 KiB
Go
70 lines
1.9 KiB
Go
package aws
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/aws/aws-sdk-go/service/iam"
|
|
"github.com/cloudskiff/driftctl/pkg/remote/aws/repository"
|
|
remoteerror "github.com/cloudskiff/driftctl/pkg/remote/error"
|
|
"github.com/cloudskiff/driftctl/pkg/resource"
|
|
resourceaws "github.com/cloudskiff/driftctl/pkg/resource/aws"
|
|
)
|
|
|
|
type IamRolePolicyAttachmentEnumerator struct {
|
|
repository repository.IAMRepository
|
|
factory resource.ResourceFactory
|
|
}
|
|
|
|
func NewIamRolePolicyAttachmentEnumerator(repository repository.IAMRepository, factory resource.ResourceFactory) *IamRolePolicyAttachmentEnumerator {
|
|
return &IamRolePolicyAttachmentEnumerator{
|
|
repository,
|
|
factory,
|
|
}
|
|
}
|
|
|
|
func (e *IamRolePolicyAttachmentEnumerator) SupportedType() resource.ResourceType {
|
|
return resourceaws.AwsIamRolePolicyAttachmentResourceType
|
|
}
|
|
|
|
func (e *IamRolePolicyAttachmentEnumerator) Enumerate() ([]resource.Resource, error) {
|
|
roles, err := e.repository.ListAllRoles()
|
|
if err != nil {
|
|
return nil, remoteerror.NewResourceEnumerationErrorWithType(err, string(e.SupportedType()), resourceaws.AwsIamRoleResourceType)
|
|
}
|
|
|
|
results := make([]resource.Resource, 0)
|
|
rolesNotIgnored := make([]*iam.Role, 0)
|
|
|
|
for _, role := range roles {
|
|
if role.RoleName != nil && awsIamRoleShouldBeIgnored(*role.RoleName) {
|
|
continue
|
|
}
|
|
rolesNotIgnored = append(rolesNotIgnored, role)
|
|
}
|
|
|
|
if len(rolesNotIgnored) == 0 {
|
|
return results, nil
|
|
}
|
|
|
|
policyAttachments, err := e.repository.ListAllRolePolicyAttachments(rolesNotIgnored)
|
|
if err != nil {
|
|
return nil, remoteerror.NewResourceEnumerationError(err, string(e.SupportedType()))
|
|
}
|
|
|
|
for _, attachedPol := range policyAttachments {
|
|
results = append(
|
|
results,
|
|
e.factory.CreateAbstractResource(
|
|
string(e.SupportedType()),
|
|
fmt.Sprintf("%s-%s", *attachedPol.PolicyName, attachedPol.RoleName),
|
|
map[string]interface{}{
|
|
"role": attachedPol.RoleName,
|
|
"policy_arn": *attachedPol.PolicyArn,
|
|
},
|
|
),
|
|
)
|
|
}
|
|
|
|
return results, nil
|
|
}
|