coriam

Documentation

Index

• Constants
• type IAMClient
  • func NewIAMClient() *IAMClient
  • func (iamClient *IAMClient) DeletePermissions(roleName string) error
  • func (iamClient *IAMClient) DeployPermissions(roleName string) (roleARN string, err error)

Constants

const AssumePolicyDocument = `` /* 232-byte string literal not displayed */

AssumePolicyDocument is the policy document used in the role that coriam creates

const AttachPolicyDocument = `` /* 1058-byte string literal not displayed */

AttachPolicyDocument is the policy document used in the policy that coriam attaches to the created role

Types

type IAMClient

type IAMClient struct {
	iamiface.IAMAPI
}

IAMClient manages deploying IAM credentials for corral

func NewIAMClient

func NewIAMClient() *IAMClient

NewIAMClient initializes a new IAMClient

func (*IAMClient) DeletePermissions

func (iamClient *IAMClient) DeletePermissions(roleName string) error

DeletePermissions deletes corral's IA role policy and IAM role.

func (*IAMClient) DeployPermissions

func (iamClient *IAMClient) DeployPermissions(roleName string) (roleARN string, err error)

DeployPermissions creates/updates IAM permissions for corral lambda functions. It creates/updates an IAM role and inline policy to allow corral lambda functions to access S3, invoke lambda functions, and write logs to CloudWatch.