aws.go

// Copyright © 2019 Matt Konda <mkonda@Jemurai.com>
//
package cmd

import (
	"encoding/json"
	"fmt"

	"github.com/spf13/viper"

	"github.com/aws/aws-sdk-go/aws"
	"github.com/aws/aws-sdk-go/aws/session"
	"github.com/aws/aws-sdk-go/service/iam"
	"github.com/spf13/cobra"
)

// awsCmd represents the aws command
var awsCmd = &cobra.Command{
	Use:   "aws",
	Short: "Get basic audit info from AWS",
	Long: `Get information about users and 
	policies from AWS to support an audit.`,
	Run: func(cmd *cobra.Command, args []string) {
		sess, err := session.NewSession(&aws.Config{})
		if err != nil {
			fmt.Println("Got error creating session:")
			fmt.Println(err.Error())
		}
		fmt.Println(viper.GetString("AWS_REGION"))
		checkUsers(sess)
	},
}

func checkUsers(sess *session.Session) {
	svc := iam.New(sess)
	result, err := svc.ListUsers(&iam.ListUsersInput{
		MaxItems: aws.Int64(100),
	})
	if err != nil {
		fmt.Println("Error", err)
		return
	}
	for i, user := range result.Users {
		if user == nil {
			continue
		}
		visitIAMUser(i, user)
		keys, err := svc.ListAccessKeys(&iam.ListAccessKeysInput{
			UserName: user.UserName,
		})
		if err != nil {
			fmt.Println("Error", err)
			return
		}
		visitAWSKeys(keys.AccessKeyMetadata)
	}
}

func visitAWSKeys(keys []*iam.AccessKeyMetadata) {
	for _, key := range keys {
		if key == nil {
			continue
		}
		m := map[string]interface{}{
			"user":      *key.UserName,
			"status":    *key.Status,
			"createdAt": *key.CreateDate,
			"id":        *key.AccessKeyId,
		}
		b, err := json.MarshalIndent(m, "", " ")
		if err != nil {
			fmt.Println("error:", err)
		}
		fmt.Print(string(b))
	}
}

func visitIAMUser(i int, user *iam.User) {
	fmt.Printf("%d user %s created %v and pass last used %v\n", i, *user.UserName, user.CreateDate, user.PasswordLastUsed)
}

func init() {
	rootCmd.AddCommand(awsCmd)
}