iam

Documentation

Index

• func CanAssumeRole(roleArn string, serviceName string) (bool, error)
• func CheckPolicyDocument(doc *yaml.Node) (bool, error)
• func GetCallerArn(config awsgo.Config) (string, error)
• func GetRoleNameFromArn(roleArn string) (string, error)
• func PrincipalExists(principal string) (bool, error)
• func RoleExists(roleArn string) bool
• func Simulate(actions []string, resource string, roleArn string, ...) (bool, []string)
• func TransformCallerArn(stsResArn string) string

Functions

func CanAssumeRole

func CanAssumeRole(roleArn string, serviceName string) (bool, error)

CanAssumeRole checks if a service can assume a role

func CheckPolicyDocument

func CheckPolicyDocument(doc *yaml.Node) (bool, error)

CheckPolicyDocument checks a PolicyDocument to make sure it will not result in failures

func GetCallerArn

func GetCallerArn(config awsgo.Config) (string, error)

GetCallerArn gets the role arn of the caller based on the aws config

func GetRoleNameFromArn

func GetRoleNameFromArn(roleArn string) (string, error)

func PrincipalExists

func PrincipalExists(principal string) (bool, error)

PrincipalExists checks to see if the principal exists in the account

func RoleExists

func RoleExists(roleArn string) bool

RoleExists checks to see if a role exists in the account

func Simulate

func Simulate(
	actions []string,
	resource string,
	roleArn string,
	spinnerCallback func(string)) (bool, []string)

Simulate actions on a resource. The role arg is optional, if not provided, the current aws config will be used.

func TransformCallerArn

func TransformCallerArn(stsResArn string) string