-
Notifications
You must be signed in to change notification settings - Fork 1.4k
/
partition.go
51 lines (43 loc) · 1.53 KB
/
partition.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
package builder
import (
"fmt"
gfnt "github.com/weaveworks/goformation/v4/cloudformation/types"
)
var servicePrincipalPartitionMappings = map[string]map[string]string{
"aws": {
"EC2": "ec2.amazonaws.com",
"EKS": "eks.amazonaws.com",
"EKSFargatePods": "eks-fargate-pods.amazonaws.com",
},
"aws-us-gov": {
"EC2": "ec2.amazonaws.com",
"EKS": "eks.amazonaws.com",
"EKSFargatePods": "eks-fargate-pods.amazonaws.com",
},
"aws-cn": {
"EC2": "ec2.amazonaws.com.cn",
"EKS": "eks.amazonaws.com",
"EKSFargatePods": "eks-fargate-pods.amazonaws.com",
},
}
const servicePrincipalPartitionMapName = "ServicePrincipalPartitionMap"
// MakeServiceRef returns a reference to an intrinsic map function that looks up the servicePrincipalName
// in servicePrincipalPartitionMappings
func MakeServiceRef(servicePrincipalName string) *gfnt.Value {
return gfnt.MakeFnFindInMap(
gfnt.NewString(servicePrincipalPartitionMapName), gfnt.RefPartition, gfnt.NewString(servicePrincipalName),
)
}
func makePolicyARN(policyName string) *gfnt.Value {
return gfnt.MakeFnSubString(fmt.Sprintf("arn:${%s}:iam::aws:policy/%s", gfnt.Partition, policyName))
}
func makePolicyARNs(policyNames ...string) []*gfnt.Value {
policyARNs := make([]*gfnt.Value, len(policyNames))
for i, policy := range policyNames {
policyARNs[i] = makePolicyARN(policy)
}
return policyARNs
}
func addARNPartitionPrefix(s string) *gfnt.Value {
return gfnt.MakeFnSubString(fmt.Sprintf("arn:${%s}:%s", gfnt.Partition, s))
}