access_keys.go

package iam

import (
	"fmt"

	"github.com/aws/aws-sdk-go/aws"
	awsiam "github.com/aws/aws-sdk-go/service/iam"
)

//go:generate faux --interface accessKeysClient --output fakes/access_keys_client.go
type accessKeysClient interface {
	ListAccessKeys(*awsiam.ListAccessKeysInput) (*awsiam.ListAccessKeysOutput, error)
	DeleteAccessKey(*awsiam.DeleteAccessKeyInput) (*awsiam.DeleteAccessKeyOutput, error)
}

//go:generate faux --interface accessKeys --output fakes/access_keys.go
type accessKeys interface {
	Delete(userName string) error
}

type AccessKeys struct {
	client accessKeysClient
	logger logger
}

func NewAccessKeys(client accessKeysClient, logger logger) AccessKeys {
	return AccessKeys{
		client: client,
		logger: logger,
	}
}

func (k AccessKeys) Delete(userName string) error {
	accessKeys, err := k.client.ListAccessKeys(&awsiam.ListAccessKeysInput{UserName: aws.String(userName)})
	if err != nil {
		return fmt.Errorf("List IAM Access Keys: %s", err)
	}

	for _, a := range accessKeys.AccessKeyMetadata {
		n := *a.AccessKeyId

		_, err = k.client.DeleteAccessKey(&awsiam.DeleteAccessKeyInput{
			UserName:    aws.String(userName),
			AccessKeyId: a.AccessKeyId,
		})
		if err == nil {
			k.logger.Printf("[IAM User: %s] Deleted access key %s \n", userName, n)
		} else {
			k.logger.Printf("[IAM User: %s] Delete access key %s: %s \n", userName, n, err)
		}
	}

	return nil
}