-
Notifications
You must be signed in to change notification settings - Fork 720
/
wafregional-rate-based-rule-predicates.go
91 lines (76 loc) · 2.02 KB
/
wafregional-rate-based-rule-predicates.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
package resources
import (
"github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/aws/session"
"github.com/aws/aws-sdk-go/service/waf"
"github.com/aws/aws-sdk-go/service/wafregional"
"github.com/rebuy-de/aws-nuke/pkg/types"
)
type WAFRegionalRateBasedRulePredicate struct {
svc *wafregional.WAFRegional
ruleID *string
predicate *waf.Predicate
rateLimit *int64
}
func init() {
register("WAFRegionalRateBasedRulePredicate", ListWAFRegionalRateBasedRulePredicates)
}
func ListWAFRegionalRateBasedRulePredicates(sess *session.Session) ([]Resource, error) {
svc := wafregional.New(sess)
resources := []Resource{}
params := &waf.ListRateBasedRulesInput{
Limit: aws.Int64(50),
}
for {
resp, err := svc.ListRateBasedRules(params)
if err != nil {
return nil, err
}
for _, rule := range resp.Rules {
details, err := svc.GetRateBasedRule(&waf.GetRateBasedRuleInput{
RuleId: rule.RuleId,
})
if err != nil {
return nil, err
}
for _, predicate := range details.Rule.MatchPredicates {
resources = append(resources, &WAFRegionalRateBasedRulePredicate{
svc: svc,
ruleID: rule.RuleId,
rateLimit: details.Rule.RateLimit,
predicate: predicate,
})
}
}
if resp.NextMarker == nil {
break
}
params.NextMarker = resp.NextMarker
}
return resources, nil
}
func (r *WAFRegionalRateBasedRulePredicate) Remove() error {
tokenOutput, err := r.svc.GetChangeToken(&waf.GetChangeTokenInput{})
if err != nil {
return err
}
_, err = r.svc.UpdateRateBasedRule(&waf.UpdateRateBasedRuleInput{
ChangeToken: tokenOutput.ChangeToken,
RuleId: r.ruleID,
RateLimit: r.rateLimit,
Updates: []*waf.RuleUpdate{
&waf.RuleUpdate{
Action: aws.String("DELETE"),
Predicate: r.predicate,
},
},
})
return err
}
func (r *WAFRegionalRateBasedRulePredicate) Properties() types.Properties {
return types.NewProperties().
Set("RuleID", r.ruleID).
Set("Type", r.predicate.Type).
Set("Negated", r.predicate.Negated).
Set("DataID", r.predicate.DataId)
}