forked from rebuy-de/aws-nuke
/
iam-service-specific-credentials.go
80 lines (69 loc) · 1.92 KB
/
iam-service-specific-credentials.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
package resources
import (
"github.com/aws/aws-sdk-go/aws/session"
"github.com/aws/aws-sdk-go/service/iam"
"github.com/rebuy-de/aws-nuke/pkg/types"
"github.com/sirupsen/logrus"
)
type IAMServiceSpecificCredential struct {
svc *iam.IAM
name string
serviceName string
id string
userName string
}
func init() {
register("IAMServiceSpecificCredential", ListServiceSpecificCredentials)
}
func ListServiceSpecificCredentials(sess *session.Session) ([]Resource, error) {
svc := iam.New(sess)
users, usersErr := ListIAMUsers(sess)
if usersErr != nil {
return nil, usersErr
}
resources := make([]Resource, 0)
for _, userResource := range users {
user, ok := userResource.(*IAMUser)
if !ok {
logrus.Errorf("Unable to cast IAMUser.")
continue
}
params := &iam.ListServiceSpecificCredentialsInput{
UserName: &user.name,
}
serviceCredentials, err := svc.ListServiceSpecificCredentials(params)
if err != nil {
return nil, err
}
for _, credential := range serviceCredentials.ServiceSpecificCredentials {
resources = append(resources, &IAMServiceSpecificCredential{
svc: svc,
name: *credential.ServiceUserName,
serviceName: *credential.ServiceName,
id: *credential.ServiceSpecificCredentialId,
userName: user.name,
})
}
}
return resources, nil
}
func (e *IAMServiceSpecificCredential) Remove() error {
params := &iam.DeleteServiceSpecificCredentialInput{
ServiceSpecificCredentialId: &e.id,
UserName: &e.userName,
}
_, err := e.svc.DeleteServiceSpecificCredential(params)
if err != nil {
return err
}
return nil
}
func (e *IAMServiceSpecificCredential) Properties() types.Properties {
properties := types.NewProperties()
properties.Set("ServiceName", e.serviceName)
properties.Set("ID", e.id)
return properties
}
func (e *IAMServiceSpecificCredential) String() string {
return e.userName + " -> " + e.name
}