aws

Documentation

Index

• Constants
• func NewAWS(ctx context.Context, req *datasource.AnalyzeAttackFlowRequest, ...) (attackflow.CSP, error)
• type AWS
  • func (a *AWS) GetInitialServiceAnalyzer(ctx context.Context, req *datasource.AnalyzeAttackFlowRequest) (attackflow.CloudServiceAnalyzer, error)
• type CloudFrontMetadata
• type S3Metadata
• type SnsSubscription

Constants

const (
	// region
	REGION_US_EAST_1 = "us-east-1"

	// service
	SERVICE_CLOUDFRONT   = "cloudfront"
	SERVICE_S3           = "s3"
	SERVICE_LAMBDA       = "lambda"
	SERVICE_SQS          = "sqs"
	SERVICE_SNS          = "sns"
	SERVICE_EVENT_BRIDGE = "events"
	SERVICE_IAM          = "iam"
	SERVICE_API_GATEWAY  = "apigateway"
	SERVICE_EC2          = "ec2"
	SERVICE_ELB          = "elasticloadbalancing"
	SERVICE_APP_RUNNER   = "apprunner"
	SERVICE_ECR_PUBLIC   = "ecr-public"
	SERVICE_ECR          = "ecr"

	RETRY_MAX_ATTEMPT = 10
)

const MAX_RETRY = 3

Functions

func NewAWS

func NewAWS(
	ctx context.Context,
	req *datasource.AnalyzeAttackFlowRequest,
	awsrepo db.AWSRepoInterface,
	logger logging.Logger,
) (attackflow.CSP, error)

Types

type AWS

type AWS struct {
	// contains filtered or unexported fields
}

func (*AWS) GetInitialServiceAnalyzer

func (a *AWS) GetInitialServiceAnalyzer(ctx context.Context, req *datasource.AnalyzeAttackFlowRequest) (
	attackflow.CloudServiceAnalyzer, error,
)

type CloudFrontMetadata

type CloudFrontMetadata struct {
	DistributionID    string    `json:"distribution_id"`
	Description       string    `json:"description"`
	Status            string    `json:"status"` // Deployed or InProgress
	Enabled           bool      `json:"enabled"`
	DomainName        string    `json:"domain_name"`
	DefaultRootObject string    `json:"default_root_object"`
	Aliases           []string  `json:"aliases"`
	Origins           []*origin `json:"origins"`
	GeoRestriction    []string  `json:"geo_restriction"`
	Logging           string    `json:"logging"`
	WebACLId          string    `json:"web_acl_id"`
}

type S3Metadata

type S3Metadata struct {
	Encryption string `json:"encryption"`
	IsPublic   bool   `json:"is_public"`
	Versioning bool   `json:"versioning"`

	// S3 Notification
	LambdaConfiguration      []string `json:"lambda_configuration"`
	SQSConfiguration         []string `json:"sqs_configuration"`
	SNSConfiguration         []string `json:"sns_configuration"`
	EventBridgeConfiguration string   `json:"event_bridge_configuration"`
}

type SnsSubscription

type SnsSubscription struct {
	Endpoint        string `json:"endpoint"`
	Owner           string `json:"owner"`
	Protocol        string `json:"protocol"`
	SubscriptionArn string `json:"subscription_arn"`
}