policy

Documentation

Index

• Constants
• type Actions
  • func (a *Actions) UnmarshalJSON(b []byte) error
• type NoPermissions
  • func (NoPermissions) Actions() []string
• type Permissions
  • func ValidatePermissions(permissionName string) (Permissions, error)
• type PolicyDocument
  • func BuildPolicy(maybeExistingPolicy string, statement Statement) (PolicyDocument, error)
  • func RemoveUserFromPolicy(existingPolicy string, userArnSuffix string) (PolicyDocument, error)
• type Principal
• type PublicBucketPermissions
  • func (PublicBucketPermissions) Actions() []string
• type ReadOnlyPermissions
  • func (ReadOnlyPermissions) Actions() []string
• type ReadWritePermissions
  • func (ReadWritePermissions) Actions() []string
• type Statement
  • func BuildStatement(bucketName string, iamUser iam.User, permissions Permissions) Statement

Constants

const (
	ReadOnlyPermissionsName  = "read-only"
	ReadWritePermissionsName = "read-write"
)

Types

type Actions

type Actions []string

We alias Actions as []string here and implement the UnmarshalJSON interface because AWS IAM policies with a single action are returned with a string, instead of an array with a single element, and Go's type system is no expressive enough to support that.

func (*Actions) UnmarshalJSON

func (a *Actions) UnmarshalJSON(b []byte) error

type NoPermissions

type NoPermissions struct{}

func (NoPermissions) Actions

func (NoPermissions) Actions() []string

type Permissions

type Permissions interface {
	Actions() []string
}

func ValidatePermissions

func ValidatePermissions(permissionName string) (Permissions, error)

type PolicyDocument

type PolicyDocument struct {
	Version   string      `json:"Version"`
	Statement []Statement `json:"Statement"`
}

func BuildPolicy

func BuildPolicy(maybeExistingPolicy string, statement Statement) (PolicyDocument, error)

func RemoveUserFromPolicy

func RemoveUserFromPolicy(existingPolicy string, userArnSuffix string) (PolicyDocument, error)

type Principal

type Principal struct {
	AWS string `json:"AWS"`
}

type PublicBucketPermissions

type PublicBucketPermissions struct{}

func (PublicBucketPermissions) Actions

func (PublicBucketPermissions) Actions() []string

type ReadOnlyPermissions

type ReadOnlyPermissions struct{}

func (ReadOnlyPermissions) Actions

func (ReadOnlyPermissions) Actions() []string

type ReadWritePermissions

type ReadWritePermissions struct{}

func (ReadWritePermissions) Actions

func (ReadWritePermissions) Actions() []string

type Statement

type Statement struct {
	Effect    string    `json:"Effect"`
	Action    Actions   `json:"Action"`
	Resource  []string  `json:"Resource"`
	Principal Principal `json:"Principal"`
}

func BuildStatement

func BuildStatement(bucketName string, iamUser iam.User, permissions Permissions) Statement