ec2

Documentation

Index

• Constants
• type BlockDevice
• type DefaultVPC
• type EC2
• type Encryption
• type Instance
  • func NewInstance(metadata defsecTypes.Metadata) *Instance
  • func (i *Instance) HasHTTPEndpointDisabled() bool
  • func (i *Instance) HasSensitiveInformationInUserData() bool
  • func (i *Instance) RequiresIMDSToken() bool
• type LaunchConfiguration
  • func (i *LaunchConfiguration) HasHTTPEndpointDisabled() bool
  • func (i *LaunchConfiguration) RequiresIMDSToken() bool
• type LaunchTemplate
• type MetadataOptions
• type NetworkACL
• type NetworkACLRule
• type SecurityGroup
• type SecurityGroupRule
• type Volume

Constants

const (
	TypeIngress = "ingress"
	TypeEgress  = "egress"
)

const (
	ActionAllow = "allow"
	ActionDeny  = "deny"
)

Types

type BlockDevice

type BlockDevice struct {
	defsecTypes.Metadata
	Encrypted defsecTypes.BoolValue
}

type DefaultVPC

type DefaultVPC struct {
	defsecTypes.Metadata
}

type EC2

type EC2 struct {
	Instances            []Instance
	LaunchConfigurations []LaunchConfiguration
	LaunchTemplates      []LaunchTemplate
	DefaultVPCs          []DefaultVPC
	SecurityGroups       []SecurityGroup
	NetworkACLs          []NetworkACL
	Volumes              []Volume
}

type Encryption

type Encryption struct {
	defsecTypes.Metadata
	Enabled  defsecTypes.BoolValue
	KMSKeyID defsecTypes.StringValue
}

type Instance

type Instance struct {
	defsecTypes.Metadata
	MetadataOptions MetadataOptions
	UserData        defsecTypes.StringValue
	SecurityGroups  []SecurityGroup
	RootBlockDevice *BlockDevice
	EBSBlockDevices []*BlockDevice
}

func NewInstance

func NewInstance(metadata defsecTypes.Metadata) *Instance

func (*Instance) HasHTTPEndpointDisabled

func (i *Instance) HasHTTPEndpointDisabled() bool

func (*Instance) HasSensitiveInformationInUserData

func (i *Instance) HasSensitiveInformationInUserData() bool

func (*Instance) RequiresIMDSToken

func (i *Instance) RequiresIMDSToken() bool

type LaunchConfiguration

type LaunchConfiguration struct {
	defsecTypes.Metadata
	Name              defsecTypes.StringValue
	AssociatePublicIP defsecTypes.BoolValue
	RootBlockDevice   *BlockDevice
	EBSBlockDevices   []*BlockDevice
	MetadataOptions   MetadataOptions
	UserData          defsecTypes.StringValue
}

func (*LaunchConfiguration) HasHTTPEndpointDisabled

func (i *LaunchConfiguration) HasHTTPEndpointDisabled() bool

func (*LaunchConfiguration) RequiresIMDSToken

func (i *LaunchConfiguration) RequiresIMDSToken() bool

type LaunchTemplate

type LaunchTemplate struct {
	defsecTypes.Metadata
	Instance
}

type MetadataOptions

type MetadataOptions struct {
	defsecTypes.Metadata
	HttpTokens   defsecTypes.StringValue
	HttpEndpoint defsecTypes.StringValue
}

type NetworkACL

type NetworkACL struct {
	defsecTypes.Metadata
	Rules         []NetworkACLRule
	IsDefaultRule defsecTypes.BoolValue
}

type NetworkACLRule

type NetworkACLRule struct {
	defsecTypes.Metadata
	Type     defsecTypes.StringValue
	Action   defsecTypes.StringValue
	Protocol defsecTypes.StringValue
	CIDRs    []defsecTypes.StringValue
}

type SecurityGroup

type SecurityGroup struct {
	defsecTypes.Metadata
	Description  defsecTypes.StringValue
	IngressRules []SecurityGroupRule
	EgressRules  []SecurityGroupRule
}

type SecurityGroupRule

type SecurityGroupRule struct {
	defsecTypes.Metadata
	Description defsecTypes.StringValue
	CIDRs       []defsecTypes.StringValue
}

type Volume

type Volume struct {
	defsecTypes.Metadata
	Encryption Encryption
}