iam

Documentation

Overview

Package iam provides functions and data structures to interact with Azure IAM resources.

Package iam provides functions and data structures to interact with Azure IAM resources.

Package iam provides functions and data structures to interact with Azure IAM resources.

Package iam provides functions and data structures to interact with Azure IAM resources.

Index

• type AzureResourceReport
  • func EnumerateIAMResources(ctx context.Context, cfg config.AzureConfig) (*AzureResourceReport, error)
• type AzureResources
• type RoleAssignmentDetails
• type RoleDetails

Types

type AzureResourceReport

type AzureResourceReport struct {
	Resources AzureResources `json:"resources" yaml:"resources"`
	Errors    []string       `json:"errors" yaml:"errors"`
}

AzureResourceReport contains the AzureResources and any non-fatal errors encountered during enumeration.

func EnumerateIAMResources

func EnumerateIAMResources(ctx context.Context, cfg config.AzureConfig) (*AzureResourceReport, error)

EnumerateIAMResources enumerates all IAM related resources in the subscription, returning a report of the resources and any non-fatal errors encountered.

type AzureResources

type AzureResources struct {
	SubscriptionID  string                  `json:"subscription_id" yaml:"subscription_id"`
	TenantID        string                  `json:"tenant_id" yaml:"tenant_id"`
	Roles           []RoleDetails           `json:"roles" yaml:"roles"`
	RoleAssignments []RoleAssignmentDetails `json:"role_assignments" yaml:"role_assignments"`
}

AzureResources contains details about all IAM related resources in the subscription.

type RoleAssignmentDetails

type RoleAssignmentDetails struct {
	ID             string                          `json:"id" yaml:"id"`
	RoleAssignment armauthorization.RoleAssignment `json:"role_assignment" yaml:"role_assignment"`
}

RoleAssignmentDetails contains details about a single Azure role assignment

type RoleDetails

type RoleDetails struct {
	ID             string                          `json:"id" yaml:"id"`
	Name           string                          `json:"name" yaml:"name"`
	RoleDefinition armauthorization.RoleDefinition `json:"role_definition" yaml:"role_definition"`
}

RoleDetails contains details about a single Azure role definition