attestation

Documentation

Index

• func GetECSTaskId() string
• type AttestationData
  • func GetAttestationData(opts *options.Options, sysLogger io.Writer) ([]*AttestationData, error)
  • func New(opts *options.Options, service string, sysLogger io.Writer) (*AttestationData, error)

Functions

func GetECSTaskId

func GetECSTaskId() string

Types

type AttestationData

type AttestationData struct {
	Role      string `json:"role,omitempty"`      //the IAM role. This must match the athenz service identity
	Access    string `json:"access,omitempty"`    //the temp creds access key id
	Secret    string `json:"secret,omitempty"`    //the temp creds secret key
	Token     string `json:"token,omitempty"`     //the temp creds session token
	Document  string `json:"document,omitempty"`  //for EC2 instance document
	Signature string `json:"signature,omitempty"` //for EC2 instance document pkcs7 signature
}

func GetAttestationData

func GetAttestationData(opts *options.Options, sysLogger io.Writer) ([]*AttestationData, error)

GetAttestationData fetches attestation data for all the services mentioned in the config file

func New

func New(opts *options.Options, service string, sysLogger io.Writer) (*AttestationData, error)

New creates a new AttestationData with values fed to it and from the result of STS Assume Role. This requires an identity document along with its signature. The aws account and region will be extracted from the identity document.