aws_config_server

Documentation

Index

• func GetActiveAccountList(ctx context.Context, svc organizationsiface.OrganizationsAPI) ([]*organizations.Account, error)
• func GetRouter(ctx context.Context, config *RouterConfig) *httprouter.Router
• func Health(w http.ResponseWriter, r *http.Request, _ httprouter.Params)
• func Index(awsGenerationParams *AWSConfigGenerationParams, ...) httprouter.Handle
• func MapClientIDRoleARN(ctx context.Context, acctName, oidcProvider string, svc iamiface.IAMAPI, ...) error
• type AWSConfigGenerationParams
• type Action
  • func (s *Action) UnmarshalJSON(data []byte) error
• type CachedGetClientIDToProfiles
  • func NewCachedGetClientIDToProfiles(ctx context.Context, configParams *AWSConfigGenerationParams, ...) (*CachedGetClientIDToProfiles, error)
  • func (c *CachedGetClientIDToProfiles) Get(ctx context.Context) (map[string][]ConfigProfile, error)
• type ClientIDToAWSRoles
• type Condition
• type ConfigProfile
• type PolicyDocument
• type Principal
• type RouterConfig
• type StatementEntry

Functions

func GetActiveAccountList

func GetActiveAccountList(ctx context.Context, svc organizationsiface.OrganizationsAPI) ([]*organizations.Account, error)

func GetRouter

func GetRouter(
	ctx context.Context,
	config *RouterConfig,
) *httprouter.Router

func Health

func Health(w http.ResponseWriter, r *http.Request, _ httprouter.Params)

func Index

func Index(
	awsGenerationParams *AWSConfigGenerationParams,
	cachedClientIDtoProfiles *CachedGetClientIDToProfiles,
	oktaClient okta.AppResource,
) httprouter.Handle

func MapClientIDRoleARN

func MapClientIDRoleARN(ctx context.Context, acctName, oidcProvider string, svc iamiface.IAMAPI, clientRoleMapping map[string][]ConfigProfile) error

Types

type AWSConfigGenerationParams

type AWSConfigGenerationParams struct {
	OIDCProvider   string
	AWSWorkerRole  string
	AWSMasterRoles []string
}

type Action

type Action []string

func (*Action) UnmarshalJSON

func (s *Action) UnmarshalJSON(data []byte) error

type CachedGetClientIDToProfiles

type CachedGetClientIDToProfiles struct {
	// contains filtered or unexported fields
}

func NewCachedGetClientIDToProfiles

func NewCachedGetClientIDToProfiles(
	ctx context.Context,
	configParams *AWSConfigGenerationParams,
	awsSession *session.Session,
) (*CachedGetClientIDToProfiles, error)

func (*CachedGetClientIDToProfiles) Get

func (c *CachedGetClientIDToProfiles) Get(ctx context.Context) (map[string][]ConfigProfile, error)

Get returns the cached values

type ClientIDToAWSRoles

type ClientIDToAWSRoles struct {
	// contains filtered or unexported fields
}

type Condition

type Condition struct {
	StringEquals map[string]string `json:"StringEquals"`
}

We only care about the "StringEquals" field in Condition

type ConfigProfile

type ConfigProfile struct {
	// contains filtered or unexported fields
}

type PolicyDocument

type PolicyDocument struct {
	Version    string           `json:"Version"`
	Statements []StatementEntry `json:"Statement"`
}

type Principal

type Principal struct {
	Federated string `json:"Federated"`
}

We only care about the "Federated" field in Principal

type RouterConfig

type RouterConfig struct {
	Verifier              oidcVerifier
	AwsGenerationParams   *AWSConfigGenerationParams
	OktaAppClient         okta.AppResource
	GetClientIDToProfiles *CachedGetClientIDToProfiles
}

type StatementEntry

type StatementEntry struct {
	Effect    string    `json:"Effect"`
	Action    Action    `json:"Action"`
	Sid       string    `json:"Sid"`
	Principal Principal `json:"Principal"`
	Condition Condition `json:"Condition"`
}