forked from rebuy-de/aws-nuke
-
Notifications
You must be signed in to change notification settings - Fork 0
/
waf-webacl-rule-attachements.go
94 lines (72 loc) · 1.84 KB
/
waf-webacl-rule-attachements.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
package resources
import (
"fmt"
"github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/aws/session"
"github.com/aws/aws-sdk-go/service/waf"
)
type WAFWebACLRuleAttachment struct {
svc *waf.WAF
webACLID *string
activatedRule *waf.ActivatedRule
}
func init() {
register("WAFWebACLRuleAttachment", ListWAFWebACLRuleAttachments)
}
func ListWAFWebACLRuleAttachments(sess *session.Session) ([]Resource, error) {
svc := waf.New(sess)
resources := []Resource{}
webACLs := []*waf.WebACLSummary{}
params := &waf.ListWebACLsInput{
Limit: aws.Int64(50),
}
//List All Web ACL's
for {
resp, err := svc.ListWebACLs(params)
if err != nil {
return nil, err
}
for _, webACL := range resp.WebACLs {
webACLs = append(webACLs, webACL)
}
if resp.NextMarker == nil {
break
}
params.NextMarker = resp.NextMarker
}
webACLParams := &waf.GetWebACLInput{}
for _, webACL := range webACLs {
webACLParams.WebACLId = webACL.WebACLId
resp, err := svc.GetWebACL(webACLParams)
if err != nil {
return nil, err
}
for _, webACLRule := range resp.WebACL.Rules {
resources = append(resources, &WAFWebACLRuleAttachment{
svc: svc,
webACLID: webACL.WebACLId,
activatedRule: webACLRule,
})
}
}
return resources, nil
}
func (f *WAFWebACLRuleAttachment) Remove() error {
tokenOutput, err := f.svc.GetChangeToken(&waf.GetChangeTokenInput{})
if err != nil {
return err
}
webACLUpdate := &waf.WebACLUpdate{
Action: aws.String("DELETE"),
ActivatedRule: f.activatedRule,
}
_, err = f.svc.UpdateWebACL(&waf.UpdateWebACLInput{
WebACLId: f.webACLID,
ChangeToken: tokenOutput.ChangeToken,
Updates: []*waf.WebACLUpdate{webACLUpdate},
})
return err
}
func (f *WAFWebACLRuleAttachment) String() string {
return fmt.Sprintf("%s -> %s", *f.webACLID, *f.activatedRule.RuleId)
}