Documentation
¶
Index ¶
- Variables
- func BuildIAMRoleSnapshot(iamSvc iamiface.IAMAPI, role *iam.Role) (*awsmodels.IAMRole, error)
- func GetRegionsToScan(pollerInput *awsmodels.ResourcePollerInput, resourceType string) (regions []*string, err error)
- func GetServiceRegions(pollerInput *awsmodels.ResourcePollerInput, resourceType string) ([]*string, error)
- func Poll(scanRequest *pollermodels.ScanEntry) (generatedEvents []resourcesapimodels.AddResourceEntry, err error)
- func PollACMCertificate(pollerInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollAcmCertificates(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollCloudFormationStack(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollCloudFormationStacks(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollCloudTrailTrail(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollCloudTrails(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollCloudWatchLogsLogGroup(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (resource interface{}, err error)
- func PollCloudWatchLogsLogGroups(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollConfigService(pollerResourceInput *awsmodels.ResourcePollerInput, ...) (interface{}, error)
- func PollConfigServices(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollDynamoDBTable(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollDynamoDBTables(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollEC2Image(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollEC2Instance(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollEC2NetworkACL(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollEC2SecurityGroup(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollEC2VPC(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollEC2Volume(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollECSCluster(pollerInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollEKSCluster(pollerInput *awsmodels.ResourcePollerInput, ...) (interface{}, error)
- func PollELBV2LoadBalancer(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollEc2Amis(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollEc2Instances(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollEc2NetworkAcls(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollEc2SecurityGroups(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollEc2Volumes(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollEc2Vpcs(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollEcsClusters(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollEksClusters(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollElbv2ApplicationLoadBalancers(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollGuardDutyDetector(pollerResourceInput *awsmodels.ResourcePollerInput, ...) (interface{}, error)
- func PollGuardDutyDetectors(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollIAMGroup(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollIAMPolicy(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollIAMRole(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollIAMRoles(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollIAMRootUser(pollerResourceInput *awsmodels.ResourcePollerInput, _ arn.ARN, ...) (interface{}, error)
- func PollIAMUser(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollIAMUsers(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollIamGroups(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollIamPolicies(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollKMSKey(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollKmsKeys(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollLambdaFunction(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollLambdaFunctions(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollPasswordPolicy(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollPasswordPolicyResource(pollerResourceInput *awsmodels.ResourcePollerInput, _ *utils.ParsedResourceID, ...) (interface{}, error)
- func PollRDSInstance(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollRDSInstances(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollRedshiftCluster(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollRedshiftClusters(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollS3Bucket(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollS3Buckets(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollWAFRegionalWebACL(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollWAFWebACL(pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, ...) (interface{}, error)
- func PollWafRegionalWebAcls(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func PollWafWebAcls(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
- func Setup()
Constants ¶
This section is empty.
Variables ¶
var ( // These are exported so the top-level unit tests can mock them out. // AssumeRoleFunc is the function to return valid AWS credentials. AssumeRoleFunc = assumeRole VerifyAssumedCredsFunc = verifyAssumedCreds GetServiceRegionsFunc = GetServiceRegions // Used to remember resource IDs that have recently been rate limited so we avoid re-scanning them RateLimitTracker *lru.ARCCache )
var ( DynamoDBClientFunc = setupDynamoDBClient ApplicationAutoScalingClientFunc = setupApplicationAutoScalingClient )
Set as variables to be overridden in testing
var ( // Exported for top-level unit tests to mock out AuditRoleName = os.Getenv("AUDIT_ROLE_NAME") // IndividualARNResourcePollers maps resource types to their corresponding individual polling // functions for resources whose ID is their ARN. IndividualARNResourcePollers = map[string]func( input *awsmodels.ResourcePollerInput, arn arn.ARN, entry *pollermodels.ScanEntry) (interface{}, error){ awsmodels.AcmCertificateSchema: PollACMCertificate, awsmodels.CloudFormationStackSchema: PollCloudFormationStack, awsmodels.CloudTrailSchema: PollCloudTrailTrail, awsmodels.CloudWatchLogGroupSchema: PollCloudWatchLogsLogGroup, awsmodels.DynamoDBTableSchema: PollDynamoDBTable, awsmodels.Ec2AmiSchema: PollEC2Image, awsmodels.Ec2InstanceSchema: PollEC2Instance, awsmodels.Ec2NetworkAclSchema: PollEC2NetworkACL, awsmodels.Ec2SecurityGroupSchema: PollEC2SecurityGroup, awsmodels.Ec2VolumeSchema: PollEC2Volume, awsmodels.Ec2VpcSchema: PollEC2VPC, awsmodels.EcsClusterSchema: PollECSCluster, awsmodels.Elbv2LoadBalancerSchema: PollELBV2LoadBalancer, awsmodels.IAMGroupSchema: PollIAMGroup, awsmodels.IAMPolicySchema: PollIAMPolicy, awsmodels.IAMRoleSchema: PollIAMRole, awsmodels.IAMUserSchema: PollIAMUser, awsmodels.IAMRootUserSchema: PollIAMRootUser, awsmodels.KmsKeySchema: PollKMSKey, awsmodels.LambdaFunctionSchema: PollLambdaFunction, awsmodels.RDSInstanceSchema: PollRDSInstance, awsmodels.RedshiftClusterSchema: PollRedshiftCluster, awsmodels.S3BucketSchema: PollS3Bucket, awsmodels.WafWebAclSchema: PollWAFWebACL, awsmodels.WafRegionalWebAclSchema: PollWAFRegionalWebACL, } // IndividualResourcePollers maps resource types to their corresponding individual polling // functions for resources whose ID is not their ARN. IndividualResourcePollers = map[string]func( input *awsmodels.ResourcePollerInput, id *utils.ParsedResourceID, entry *pollermodels.ScanEntry) (interface{}, error){ awsmodels.ConfigServiceSchema: PollConfigService, awsmodels.EksClusterSchema: PollEKSCluster, awsmodels.GuardDutySchema: PollGuardDutyDetector, awsmodels.PasswordPolicySchema: PollPasswordPolicyResource, } // ServicePollers maps a resource type to its Poll function ServicePollers = map[string]resourcePoller{ awsmodels.AcmCertificateSchema: {"ACMCertificate", PollAcmCertificates}, awsmodels.CloudFormationStackSchema: {"CloudFormationStack", PollCloudFormationStacks}, awsmodels.CloudTrailSchema: {"CloudTrail", PollCloudTrails}, awsmodels.CloudWatchLogGroupSchema: {"CloudWatchLogGroup", PollCloudWatchLogsLogGroups}, awsmodels.ConfigServiceSchema: {"ConfigService", PollConfigServices}, awsmodels.DynamoDBTableSchema: {"DynamoDBTable", PollDynamoDBTables}, awsmodels.Ec2AmiSchema: {"EC2AMI", PollEc2Amis}, awsmodels.Ec2InstanceSchema: {"EC2Instance", PollEc2Instances}, awsmodels.Ec2NetworkAclSchema: {"EC2NetworkACL", PollEc2NetworkAcls}, awsmodels.Ec2SecurityGroupSchema: {"EC2SecurityGroup", PollEc2SecurityGroups}, awsmodels.Ec2VolumeSchema: {"EC2Volume", PollEc2Volumes}, awsmodels.Ec2VpcSchema: {"EC2VPC", PollEc2Vpcs}, awsmodels.EcsClusterSchema: {"ECSCluster", PollEcsClusters}, awsmodels.EksClusterSchema: {"EKSCluster", PollEksClusters}, awsmodels.Elbv2LoadBalancerSchema: {"ELBV2LoadBalancer", PollElbv2ApplicationLoadBalancers}, awsmodels.GuardDutySchema: {"GuardDutyDetector", PollGuardDutyDetectors}, awsmodels.IAMGroupSchema: {"IAMGroups", PollIamGroups}, awsmodels.IAMPolicySchema: {"IAMPolicies", PollIamPolicies}, awsmodels.IAMRoleSchema: {"IAMRoles", PollIAMRoles}, awsmodels.IAMUserSchema: {"IAMUser", PollIAMUsers}, awsmodels.KmsKeySchema: {"KMSKey", PollKmsKeys}, awsmodels.LambdaFunctionSchema: {"LambdaFunctions", PollLambdaFunctions}, awsmodels.PasswordPolicySchema: {"PasswordPolicy", PollPasswordPolicy}, awsmodels.RDSInstanceSchema: {"RDSInstance", PollRDSInstances}, awsmodels.RedshiftClusterSchema: {"RedshiftCluster", PollRedshiftClusters}, awsmodels.S3BucketSchema: {"S3Bucket", PollS3Buckets}, awsmodels.WafWebAclSchema: {"WAFWebAcl", PollWafWebAcls}, awsmodels.WafRegionalWebAclSchema: {"WAFRegionalWebAcl", PollWafRegionalWebAcls}, } )
var ( // Functions to initialize the WAF and WAF Regional client functions WafRegionalClientFunc = setupWafRegionalClient WafClientFunc = setupWafClient )
Set as variables to be overridden in testing
var (
AcmClientFunc = setupAcmClient
)
Set as variables to be overridden in testing
var (
// Set as variables to be overridden in testing
CloudFormationClientFunc = setupCloudFormationClient
)
var (
// CloudTrailClientFunc is the function it setup the CloudTrail client.
CloudTrailClientFunc = setupCloudTrailClient
)
var (
CloudWatchLogsClientFunc = setupCloudWatchLogsClient
)
Set as variables to be overridden in testing
var (
ConfigServiceClientFunc = setupConfigServiceClient
)
Set as variables to be overridden in testing
var EC2ClientFunc = setupEC2Client
var EcsClientFunc = setupEcsClient
Set as variables to be overridden in testing
var EksClientFunc = setupEksClient
Set as variables to be overridden in testing
var (
Elbv2ClientFunc = setupElbv2Client
)
Set as variables to be overridden in testing
var (
GuardDutyClientFunc = setupGuardDutyClient
)
Set as variables to be overridden in testing
var (
IAMClientFunc = setupIAMClient
)
Set as variables to be overridden in testing
var (
KmsClientFunc = setupKmsClient
)
Set as variables to be overridden in testing
var (
LambdaClientFunc = setupLambdaClient
)
Set as variables to be overridden in testing
var (
RDSClientFunc = setupRDSClient
)
Set as variables to be overridden in testing
var (
RedshiftClientFunc = setupRedshiftClient
)
Set as variables to be overridden in testing
var (
// S3ClientFunc is the function to initialize the S3 Client.
S3ClientFunc = setupS3Client
)
Functions ¶
func BuildIAMRoleSnapshot ¶
BuildIAMRoleSnapshot builds an IAMRoleSnapshot for a given IAM Role
func GetRegionsToScan ¶ added in v1.8.0
func GetRegionsToScan(pollerInput *awsmodels.ResourcePollerInput, resourceType string) (regions []*string, err error)
GetRegionsToScan determines what regions need to be scanned in order to perform a full account scan for a given resource type
func GetServiceRegions ¶ added in v1.8.0
func GetServiceRegions(pollerInput *awsmodels.ResourcePollerInput, resourceType string) ([]*string, error)
GetServiceRegions determines what regions are both enabled in the account and are supported by AWS for the given resource type.
func Poll ¶
func Poll(scanRequest *pollermodels.ScanEntry) ( generatedEvents []resourcesapimodels.AddResourceEntry, err error)
Poll coordinates AWS generatedEvents gathering across all relevant resources for compliance monitoring.
func PollACMCertificate ¶
func PollACMCertificate( pollerInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollACMCertificate a single ACM certificate resource
func PollAcmCertificates ¶
func PollAcmCertificates(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollAcmCertificates gathers information on each ACM Certificate for an AWS account.
func PollCloudFormationStack ¶
func PollCloudFormationStack( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollCloudFormationStack polls a single CloudFormation stack resource
func PollCloudFormationStacks ¶
func PollCloudFormationStacks(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollCloudFormationStacks gathers information on each CloudFormation Stack for an AWS account.
This scanner is a beast, tread carefully.
func PollCloudTrailTrail ¶
func PollCloudTrailTrail( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollCloudTrailTrail polls a single CloudTrail trail resource
func PollCloudTrails ¶
func PollCloudTrails(pollerInput *awsmodels.ResourcePollerInput) ( []apimodels.AddResourceEntry, *string, error)
PollCloudTrails gathers information on all CloudTrails in an AWS account.
func PollCloudWatchLogsLogGroup ¶
func PollCloudWatchLogsLogGroup( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry) (resource interface{}, err error)
PollCloudWatchLogsLogGroup polls a single CloudWatchLogs LogGroup resource
func PollCloudWatchLogsLogGroups ¶
func PollCloudWatchLogsLogGroups(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollCloudWatchLogsLogGroups gathers information on each CloudWatchLogs LogGroup for an AWS account
func PollConfigService ¶
func PollConfigService( pollerResourceInput *awsmodels.ResourcePollerInput, parsedResourceID *utils.ParsedResourceID, scanRequest *pollermodels.ScanEntry) (interface{}, error)
PollConfigService polls a single AWS Config resource
func PollConfigServices ¶
func PollConfigServices(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollConfigServices gathers information on each config service for an AWS account.
func PollDynamoDBTable ¶
func PollDynamoDBTable( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, _ *pollermodels.ScanEntry, ) (interface{}, error)
PollDynamoDBTable polls a single DynamoDB Table resource
func PollDynamoDBTables ¶
func PollDynamoDBTables(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollDynamoDBTables gathers information on each Dynamo DB Table for an AWS account.
func PollEC2Image ¶
func PollEC2Image( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollEC2Image polls a single EC2 Image resource
func PollEC2Instance ¶
func PollEC2Instance( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollEC2Instance polls a single EC2 Instance resource
func PollEC2NetworkACL ¶
func PollEC2NetworkACL( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollEC2NetworkACL polls a single EC2 Network ACL resource
func PollEC2SecurityGroup ¶
func PollEC2SecurityGroup( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollEC2SecurityGroup polls a single EC2 Security Group resource
func PollEC2VPC ¶
func PollEC2VPC( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollEC2VPC polls a single EC2 VPC resource
func PollEC2Volume ¶
func PollEC2Volume( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry) (interface{}, error)
PollEC2Volume polls a single EC2 Volume resource
func PollECSCluster ¶ added in v0.3.0
func PollECSCluster( pollerInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollECSCluster polls a single ECS cluster resource
func PollEKSCluster ¶ added in v1.11.0
func PollEKSCluster( pollerInput *awsmodels.ResourcePollerInput, parsedResourceID *utils.ParsedResourceID, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollEKSCluster polls a single EKS cluster resource
func PollELBV2LoadBalancer ¶
func PollELBV2LoadBalancer( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollELBV2 LoadBalancer polls a single ELBV2 Application Load Balancer resource
func PollEc2Amis ¶
func PollEc2Amis(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollEc2Amis gathers information on each EC2 AMI in an AWS account.
func PollEc2Instances ¶
func PollEc2Instances(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollEc2Instances gathers information on each EC2 instance in an AWS account.
func PollEc2NetworkAcls ¶
func PollEc2NetworkAcls(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollEc2NetworkAcls gathers information on each Network ACL in an AWS account.
func PollEc2SecurityGroups ¶
func PollEc2SecurityGroups(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollEc2SecurityGroups gathers information on each Security Group in an AWS account.
func PollEc2Volumes ¶
func PollEc2Volumes(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollEc2Volumes gathers information on each EC2 Volume for an AWS account.
func PollEc2Vpcs ¶
func PollEc2Vpcs(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollEc2Vpcs gathers information on each VPC in an AWS account.
func PollEcsClusters ¶ added in v0.3.0
func PollEcsClusters(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollEcsCluster gathers information on each ECS Cluster for an AWS account.
func PollEksClusters ¶ added in v1.11.0
func PollEksClusters(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollEksCluster gathers information on each EKS Cluster for an AWS account.
func PollElbv2ApplicationLoadBalancers ¶
func PollElbv2ApplicationLoadBalancers(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollElbv2ApplicationLoadBalancers gathers information on each application load balancer for an AWS account.
func PollGuardDutyDetector ¶
func PollGuardDutyDetector( pollerResourceInput *awsmodels.ResourcePollerInput, parsedResourceID *utils.ParsedResourceID, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollGuardDutyDetector polls a single AWS Config resource
func PollGuardDutyDetectors ¶
func PollGuardDutyDetectors(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollGuardDutyDetectors gathers information on each GuardDuty detector for an AWS account.
func PollIAMGroup ¶
func PollIAMGroup( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollIAMGroup polls a single IAM Group resource
func PollIAMPolicy ¶
func PollIAMPolicy( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollIAMPolicy polls a single IAM Policy resource
func PollIAMRole ¶
func PollIAMRole( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollIAMRole polls a single IAM Role resource
func PollIAMRoles ¶
func PollIAMRoles(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollIAMRoles generates a snapshot for each IAM Role.
func PollIAMRootUser ¶
func PollIAMRootUser( pollerResourceInput *awsmodels.ResourcePollerInput, _ arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollIAMUser polls a single IAM User resource
func PollIAMUser ¶
func PollIAMUser( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollIAMUser polls a single IAM User resource
func PollIAMUsers ¶
func PollIAMUsers(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollIAMUsers generates a snapshot for each IAM User.
func PollIamGroups ¶
func PollIamGroups(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollIamGroups gathers information on each IAM Group for an AWS account.
func PollIamPolicies ¶
func PollIamPolicies(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollIamPolicies gathers information on each IAM policy for an AWS account.
func PollKMSKey ¶
func PollKMSKey( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollKMSKey polls a single KMS Key resource
func PollKmsKeys ¶
func PollKmsKeys(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollKmsKeys gathers information on each KMS key for an AWS account.
func PollLambdaFunction ¶
func PollLambdaFunction( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollLambdaFunction polls a single Lambda Function resource
func PollLambdaFunctions ¶
func PollLambdaFunctions(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollLambdaFunctions gathers information on each Lambda Function for an AWS account.
func PollPasswordPolicy ¶
func PollPasswordPolicy(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollPasswordPolicy gathers information on all PasswordPolicy in an AWS account.
func PollPasswordPolicyResource ¶
func PollPasswordPolicyResource( pollerResourceInput *awsmodels.ResourcePollerInput, _ *utils.ParsedResourceID, _ *pollermodels.ScanEntry, ) (interface{}, error)
PollPasswordPolicyResource polls a password policy and returns it as a resource
func PollRDSInstance ¶
func PollRDSInstance( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollRDSInstance polls a single RDS DB Instance resource
func PollRDSInstances ¶
func PollRDSInstances(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollRDSInstances gathers information on each RDS DB Instance for an AWS account.
func PollRedshiftCluster ¶
func PollRedshiftCluster( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollRedshiftCluster polls a single Redshift Cluster resource
func PollRedshiftClusters ¶
func PollRedshiftClusters(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollRedshiftClusters gathers information on each Redshift Cluster for an AWS account.
func PollS3Bucket ¶
func PollS3Bucket( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, scanRequest *pollermodels.ScanEntry, ) (interface{}, error)
PollS3Bucket polls a single S3 Bucket resource
func PollS3Buckets ¶
func PollS3Buckets(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollS3Buckets gathers information on each S3 bucket for an AWS account.
func PollWAFRegionalWebACL ¶
func PollWAFRegionalWebACL( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, _ *pollermodels.ScanEntry, ) (interface{}, error)
PollWAFRegionalWebACL polls a single WAF Regional WebACL resource
func PollWAFWebACL ¶
func PollWAFWebACL( pollerResourceInput *awsmodels.ResourcePollerInput, resourceARN arn.ARN, _ *pollermodels.ScanEntry, ) (interface{}, error)
PollWAFWebACL polls a single WAF WebACL resource
func PollWafRegionalWebAcls ¶
func PollWafRegionalWebAcls(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
func PollWafWebAcls ¶
func PollWafWebAcls(pollerInput *awsmodels.ResourcePollerInput) ([]apimodels.AddResourceEntry, *string, error)
PollWafWebAcls gathers information on each Web ACL for an AWS account.
Types ¶
This section is empty.
Source Files
¶
- acm_certificate.go
- clients.go
- cloudformation_stack.go
- cloudtrail.go
- cloudwatchlogs_log_group.go
- configservice.go
- dynamodb_table.go
- ec2_ami.go
- ec2_instance.go
- ec2_network_acl.go
- ec2_security_group.go
- ec2_volume.go
- ec2_vpc.go
- ecs_cluster.go
- eks_cluster.go
- elbv2_application_load_balancer.go
- guardduty_detector.go
- iam_group.go
- iam_policy.go
- iam_role.go
- iam_user.go
- kms_key.go
- lambda_function.go
- password_policy.go
- poll.go
- rds_instance.go
- redshift_cluster.go
- s3_bucket.go
- waf_web_acl.go