revoke

Documentation

Overview

Package revoke provides the implementation of automated actions.

Index

• func Execute(ctx context.Context, values *Values, services *Services) error
• type Services
• type Values

Functions

func Execute

func Execute(ctx context.Context, values *Values, services *Services) error

Execute is the entry point for the IAM revoker Cloud Function.

This automation will remove users from a project's policy if: - The users are believed to be external as reported from the finding provider. - The project where the external users were found are within the set configured resources. - The users do not match the list of allowed domains.

Types

type Services

type Services struct {
	Resource *services.Resource
	Logger   *services.Logger
}

Services contains the services needed for this function.

type Values

type Values struct {
	ProjectID       string
	ExternalMembers []string
	AllowDomains    []string
	DryRun          bool
}

Values contains the required values needed for this function.