amper

Documentation

Index

• Constants
• type Account
• type AccountLimits
• type AmperConfig
• type Attachment
  • func (a Attachment) String() string
• type ByPolicySize
  • func (a ByPolicySize) Len() int
  • func (a ByPolicySize) Less(i, j int) bool
  • func (a ByPolicySize) Swap(i, j int)
• type Container
  • func (c *Container) AddAttachment(policyTemplateID string, accountName string, vars map[string]string) (*Attachment, error)
  • func (c *Container) AddPolicyTemplate(pt *PolicyTemplate) error
  • func (c *Container) Policy() (_ *Policy, err error, missing []*Attachment)
• type IAMPolicyDoc
  • func (d IAMPolicyDoc) MarshalJSON() ([]byte, error)
  • func (s *IAMPolicyDoc) Size() int
• type IAMPolicyDocRaw
• type IAMPolicyStatement
  • func (s *IAMPolicyStatement) Size() int
• type Kernel
  • func NewKernel(config *AmperConfig) *Kernel
  • func (a *Kernel) AddAccount(account *Account) error
  • func (a *Kernel) AddPolicyTemplate(containerID string, pt *PolicyTemplate) error
  • func (a *Kernel) NewContainer(id string) (*Container, error)
• type Policy
• type PolicyTemplate
• type ServiceRolePolicy
• type ServiceRoleTemplate
• type StringList
  • func (l StringList) MarshalJSON() ([]byte, error)
  • func (p *StringList) UnmarshalJSON(data []byte) (err error)

Constants

const DefaultManagedPoliciesPerRole = 10

const DefaultManagedPolicySize = 6144

const IAMPolicyVersion = "2012-10-17"

Types

type Account

type Account struct {
	ID        string
	Name      string
	ShortName string

	Limits AccountLimits
}

type AccountLimits

type AccountLimits struct {
	ManagedPolicySize      int
	ManagedPoliciesPerRole int
}

type AmperConfig

type AmperConfig struct {
	S3          *s3.S3
	StateBucket string
	KeyFormat   string
}

type Attachment

type Attachment struct {
	// contains filtered or unexported fields
}

func (Attachment) String

func (a Attachment) String() string

type ByPolicySize

type ByPolicySize []*IAMPolicyStatement

func (ByPolicySize) Len

func (a ByPolicySize) Len() int

func (ByPolicySize) Less

func (a ByPolicySize) Less(i, j int) bool

func (ByPolicySize) Swap

func (a ByPolicySize) Swap(i, j int)

type Container

type Container struct {
	sync.RWMutex

	ID string
	// contains filtered or unexported fields
}

func (*Container) AddAttachment

func (c *Container) AddAttachment(policyTemplateID string, accountName string, vars map[string]string) (*Attachment, error)

func (*Container) AddPolicyTemplate

func (c *Container) AddPolicyTemplate(pt *PolicyTemplate) error

func (*Container) Policy

func (c *Container) Policy() (_ *Policy, err error, missing []*Attachment)

type IAMPolicyDoc

type IAMPolicyDoc IAMPolicyDocRaw

func (IAMPolicyDoc) MarshalJSON

func (d IAMPolicyDoc) MarshalJSON() ([]byte, error)

func (*IAMPolicyDoc) Size

func (s *IAMPolicyDoc) Size() int

type IAMPolicyDocRaw

type IAMPolicyDocRaw struct {
	Version string `json:",omitempty"`
	Id      string `json:",omitempty"`

	Statements []*IAMPolicyStatement `json:"Statement"`
}

type IAMPolicyStatement

type IAMPolicyStatement struct {
	Sid          string
	Effect       string     `json:",omitempty"`
	Actions      StringList `json:"Action,omitempty"`
	NotActions   StringList `json:"NotAction,omitempty"`
	Resources    StringList `json:"Resource,omitempty"`
	NotResources StringList `json:"NotResource,omitempty"`

	Principals    map[string]StringList `json:"Principal,omitempty"`
	NotPrincipals map[string]StringList `json:"NotPrincipal,omitempty"`

	Conditions map[string]map[string]StringList `json:"Condition,omitempty"`
	// contains filtered or unexported fields
}

func (*IAMPolicyStatement) Size

func (s *IAMPolicyStatement) Size() int

type Kernel

type Kernel struct {
	sync.RWMutex

	StateBucket string
	S3          *s3.S3

	KeyFormat string
	// contains filtered or unexported fields
}

func NewKernel

func NewKernel(config *AmperConfig) *Kernel

func (*Kernel) AddAccount

func (a *Kernel) AddAccount(account *Account) error

func (*Kernel) AddPolicyTemplate

func (a *Kernel) AddPolicyTemplate(containerID string, pt *PolicyTemplate) error

func (*Kernel) NewContainer

func (a *Kernel) NewContainer(id string) (*Container, error)

type Policy

type Policy struct {
	AccountPolicies     map[string][]*IAMPolicyDoc
	AccountRolePolicies map[string][]*IAMPolicyDoc

	ServiceRolePolicies map[string]map[string]*ServiceRolePolicy
	// contains filtered or unexported fields
}

type PolicyTemplate

type PolicyTemplate struct {
	sync.Mutex

	// Key is the uniqie identifier of policy template
	Key string

	// Template is pointer to template's content.
	// If it's nil, template will be fetched from StateBucket
	Template *string

	// Vars contains list of required variables for rendering this template
	Vars []string

	// Consts contains list of constants.
	Consts map[string]interface{}

	// Scope defines AWS IAM services, covered by this template.
	// Formate is same, as for Action field in IAM Policy Statement.
	Scope []string

	ServiceRole *ServiceRoleTemplate
	// contains filtered or unexported fields
}

type ServiceRolePolicy

type ServiceRolePolicy struct {
	Policy           *IAMPolicyDoc
	AssumeRolePolicy *IAMPolicyDoc
}

type ServiceRoleTemplate

type ServiceRoleTemplate struct {
	Name               string
	Template           *string
	AssumeRoleTemplate *string
}

type StringList

type StringList []string

func (StringList) MarshalJSON

func (l StringList) MarshalJSON() ([]byte, error)

func (*StringList) UnmarshalJSON

func (p *StringList) UnmarshalJSON(data []byte) (err error)