-
Notifications
You must be signed in to change notification settings - Fork 719
/
wafregional-ip-set-ips.go
88 lines (72 loc) · 1.79 KB
/
wafregional-ip-set-ips.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
package resources
import (
"github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/aws/session"
"github.com/aws/aws-sdk-go/service/waf"
"github.com/aws/aws-sdk-go/service/wafregional"
"github.com/rebuy-de/aws-nuke/pkg/types"
)
type WAFRegionalIPSetIP struct {
svc *wafregional.WAFRegional
ipSetid *string
descriptor *waf.IPSetDescriptor
}
func init() {
register("WAFRegionalIPSetIP", ListWAFRegionalIPSetIPs)
}
func ListWAFRegionalIPSetIPs(sess *session.Session) ([]Resource, error) {
svc := wafregional.New(sess)
resources := []Resource{}
params := &waf.ListIPSetsInput{
Limit: aws.Int64(50),
}
for {
resp, err := svc.ListIPSets(params)
if err != nil {
return nil, err
}
for _, set := range resp.IPSets {
details, err := svc.GetIPSet(&waf.GetIPSetInput{
IPSetId: set.IPSetId,
})
if err != nil {
return nil, err
}
for _, descriptor := range details.IPSet.IPSetDescriptors {
resources = append(resources, &WAFRegionalIPSetIP{
svc: svc,
ipSetid: set.IPSetId,
descriptor: descriptor,
})
}
}
if resp.NextMarker == nil {
break
}
params.NextMarker = resp.NextMarker
}
return resources, nil
}
func (r *WAFRegionalIPSetIP) Remove() error {
tokenOutput, err := r.svc.GetChangeToken(&waf.GetChangeTokenInput{})
if err != nil {
return err
}
_, err = r.svc.UpdateIPSet(&waf.UpdateIPSetInput{
ChangeToken: tokenOutput.ChangeToken,
IPSetId: r.ipSetid,
Updates: []*waf.IPSetUpdate{
&waf.IPSetUpdate{
Action: aws.String("DELETE"),
IPSetDescriptor: r.descriptor,
},
},
})
return err
}
func (r *WAFRegionalIPSetIP) Properties() types.Properties {
return types.NewProperties().
Set("IPSetID", r.ipSetid).
Set("Type", r.descriptor.Type).
Set("Value", r.descriptor.Value)
}