iam

Documentation

Overview

Package iam implements various IAM components.

Index

• func Validate(lg *zap.Logger, iamAPI iamiface.IAMAPI, roleName string, requiredSPs []string, ...) error
• func ValidateV2(lg *zap.Logger, iamAPIV2 *aws_iam_v2.Client, roleName string, ...) error
• type AssumeRolePolicyDocument
• type AssumeRolePolicyDocumentSingle
• type AssumeRolePolicyDocumentStatement
• type AssumeRolePolicyDocumentStatementSingle
• type PolicyDocument
• type PrincipalEntry
• type PrincipalEntrySingle
• type StatementEntry

Functions

func Validate

func Validate(
	lg *zap.Logger,
	iamAPI iamiface.IAMAPI,
	roleName string,
	requiredSPs []string,
	requiredPolicyARNs []string,
) error

Validate validates IAM role.

func ValidateV2

func ValidateV2(
	lg *zap.Logger,
	iamAPIV2 *aws_iam_v2.Client,
	roleName string,
	requiredSPs []string,
	requiredPolicyARNs []string,
) error

Validate validates IAM role.

Types

type AssumeRolePolicyDocument

type AssumeRolePolicyDocument struct {
	Version   string                               `json:"Version"`
	Statement []*AssumeRolePolicyDocumentStatement `json:"Statement"`
}

type AssumeRolePolicyDocumentSingle

type AssumeRolePolicyDocumentSingle struct {
	Version   string                                     `json:"Version"`
	Statement []*AssumeRolePolicyDocumentStatementSingle `json:"Statement"`
}

type AssumeRolePolicyDocumentStatement

type AssumeRolePolicyDocumentStatement struct {
	Effect    string          `json:"Effect"`
	Principal *PrincipalEntry `json:"Principal,omitempty"`
}

type AssumeRolePolicyDocumentStatementSingle

type AssumeRolePolicyDocumentStatementSingle struct {
	Effect    string                `json:"Effect"`
	Principal *PrincipalEntrySingle `json:"Principal,omitempty"`
}

type PolicyDocument

type PolicyDocument struct {
	Version   string
	Statement []StatementEntry
}

PolicyDocument is the IAM policy document.

type PrincipalEntry

type PrincipalEntry struct {
	Service []string `json:"Service,omitempty"`
}

PrincipalEntry represents the policy document Principal.

type PrincipalEntrySingle

type PrincipalEntrySingle struct {
	Service string `json:"Service,omitempty"`
}

PrincipalEntrySingle represents the policy document Principal.

type StatementEntry

type StatementEntry struct {
	Effect    string          `json:"Effect,omitempty"`
	Action    []string        `json:"Action,omitempty"`
	Resource  string          `json:"Resource,omitempty"`
	Principal *PrincipalEntry `json:"Principal,omitempty"`
}

StatementEntry is the entry in IAM policy document "Statement" field.