arn

Documentation

Index

• func StripPath(arn string) (string, error)
• type PrincipalType
  • func Canonicalize(arn string) (PrincipalType, string, error)

Functions

func StripPath

func StripPath(arn string) (string, error)

TODO: add strip path functionality Canonicalize after testing it in all mappers - this can be used to support role paths in the configmap

Types

type PrincipalType

type PrincipalType int

const (
	// Supported principals
	NONE PrincipalType = iota
	ROLE
	USER
	ROOT
	FEDERATED_USER
	ASSUMED_ROLE
)

func Canonicalize

func Canonicalize(arn string) (PrincipalType, string, error)

Canonicalize validates IAM resources are appropriate for the authenticator and converts STS assumed roles into the IAM role resource.

Supported IAM resources are:

• AWS root user: arn:aws:iam::123456789012:root
• IAM user: arn:aws:iam::123456789012:user/Bob
• IAM role: arn:aws:iam::123456789012:role/S3Access
• IAM Assumed role: arn:aws:sts::123456789012:assumed-role/Accounting-Role/Mary (converted to IAM role)
• Federated user: arn:aws:sts::123456789012:federated-user/Bob