iam

Documentation

Index

• func IsWildcardAllowed(actions ...string) (bool, string)
• type AccessKey
• type Document
  • func (d Document) MetadataFromIamGo(r ...iamgo.Range) defsecTypes.Metadata
  • func (d Document) ToRego() interface{}
• type Group
• type IAM
• type MFADevice
• type PasswordPolicy
• type Policy
• type Role
• type ServerCertificate
• type User
  • func (u *User) HasLoggedIn() bool

Functions

func IsWildcardAllowed

func IsWildcardAllowed(actions ...string) (bool, string)

Types

type AccessKey

type AccessKey struct {
	defsecTypes.Metadata
	AccessKeyId  defsecTypes.StringValue
	Active       defsecTypes.BoolValue
	CreationDate defsecTypes.TimeValue
	LastAccess   defsecTypes.TimeValue
}

type Document

type Document struct {
	defsecTypes.Metadata
	Parsed   iamgo.Document
	IsOffset bool
	HasRefs  bool
}

func (Document) MetadataFromIamGo

func (d Document) MetadataFromIamGo(r ...iamgo.Range) defsecTypes.Metadata

func (Document) ToRego

func (d Document) ToRego() interface{}

type Group

type Group struct {
	defsecTypes.Metadata
	Name     defsecTypes.StringValue
	Users    []User
	Policies []Policy
}

type IAM

type IAM struct {
	PasswordPolicy     PasswordPolicy
	Policies           []Policy
	Groups             []Group
	Users              []User
	Roles              []Role
	ServerCertificates []ServerCertificate
}

type MFADevice

type MFADevice struct {
	defsecTypes.Metadata
	IsVirtual defsecTypes.BoolValue
}

type PasswordPolicy

type PasswordPolicy struct {
	defsecTypes.Metadata
	ReusePreventionCount defsecTypes.IntValue
	RequireLowercase     defsecTypes.BoolValue
	RequireUppercase     defsecTypes.BoolValue
	RequireNumbers       defsecTypes.BoolValue
	RequireSymbols       defsecTypes.BoolValue
	MaxAgeDays           defsecTypes.IntValue
	MinimumLength        defsecTypes.IntValue
}

type Policy

type Policy struct {
	defsecTypes.Metadata
	Name     defsecTypes.StringValue
	Document Document
	Builtin  defsecTypes.BoolValue
}

type Role

type Role struct {
	defsecTypes.Metadata
	Name     defsecTypes.StringValue
	Policies []Policy
}

type ServerCertificate

type ServerCertificate struct {
	defsecTypes.Metadata
	Expiration defsecTypes.TimeValue
}

type User

type User struct {
	defsecTypes.Metadata
	Name       defsecTypes.StringValue
	Groups     []Group
	Policies   []Policy
	AccessKeys []AccessKey
	MFADevices []MFADevice
	LastAccess defsecTypes.TimeValue
}

func (*User) HasLoggedIn

func (u *User) HasLoggedIn() bool