arn

Documentation

Index

• func ArnLike(arn, pattern string) (bool, error)
• func Canonicalize(arn string) (string, error)

Functions

func ArnLike

func ArnLike(arn, pattern string) (bool, error)

ArnLike takes an ARN and returns true if it is matched by the pattern. Each component of the ARN is matched individually as per https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN

func Canonicalize

func Canonicalize(arn string) (string, error)

Canonicalize validates IAM resources are appropriate for the authenticator and converts STS assumed roles into the IAM role resource.

Supported IAM resources are:

• AWS account: arn:aws:iam::123456789012:root
• IAM user: arn:aws:iam::123456789012:user/Bob
• IAM role: arn:aws:iam::123456789012:role/S3Access
• IAM Assumed role: arn:aws:sts::123456789012:assumed-role/Accounting-Role/Mary (converted to IAM role)
• Federated user: arn:aws:sts::123456789012:federated-user/Bob