ram_group_detail.sp

dashboard "ram_group_detail" {

  title         = "AliCloud RAM Group Detail"
  documentation = file("./dashboards/ram/docs/ram_group_detail.md")


  tags = merge(local.ram_common_tags, {
    type = "Detail"
  })

  input "group_arn" {
    title = "Select a group:"
    query = query.ram_group_input
    width = 4
  }

  container {

    card {
      width = 3
      query = query.ram_groups_users_count
      args  = [self.input.group_arn.value]
    }

    card {
      width = 3
      query = query.ram_groups_policies_count
      args  = [self.input.group_arn.value]
    }

  }

  with "ram_policies_for_ram_group" {
    query = query.ram_policies_for_ram_group
    args  = [self.input.group_arn.value]
  }

  with "ram_users_for_ram_group" {
    query = query.ram_users_for_ram_group
    args  = [self.input.group_arn.value]
  }

  container {

    graph {
      title = "Relationships"
      type  = "graph"

      node {
        base = node.ram_group
        args = {
          ram_group_arns = [self.input.group_arn.value]
        }
      }

      node {
        base = node.ram_policy
        args = {
          ram_policy_names = with.ram_policies_for_ram_group.rows[*].policy_name
        }
      }

      node {
        base = node.ram_user
        args = {
          ram_user_arns = with.ram_users_for_ram_group.rows[*].user_arn
        }
      }

      edge {
        base = edge.ram_group_to_ram_policy
        args = {
          ram_group_arns = [self.input.group_arn.value]
        }
      }

      edge {
        base = edge.ram_group_to_ram_user
        args = {
          ram_group_arns = [self.input.group_arn.value]
        }
      }

    }
  }
  container {

    container {

      title = "Overview"

      table {
        type  = "line"
        width = 6
        query = query.ram_group_overview
        args  = [self.input.group_arn.value]

      }

    }

  }

  container {

    title = "AliCloud RAM Group Analysis"

    table {
      title = "Users"
      width = 6
      column "User Name" {
        href = "${dashboard.ram_user_detail.url_path}?input.user_arn={{.'User ARN' | @uri}}"
      }

      query = query.ram_users_for_group
      args  = [self.input.group_arn.value]

      column "User ARN" {
        display = "none"
      }

    }

    table {
      title = "Policies"
      width = 6
      query = query.ram_all_policies_for_group
      args  = [self.input.group_arn.value]
    }

  }

}

# Input queries

query "ram_group_input" {
  sql = <<-EOQ
    select
      title as label,
      arn as value,
      json_build_object(
        'account_id', account_id
      ) as tags
    from
      alicloud_ram_group
    order by
      title;
  EOQ
}

# With queries

query "ram_policies_for_ram_group" {
  sql = <<-EOQ
    select
      p.policy_name
    from
      alicloud_ram_group as g,
      alicloud_ram_policy as p,
      jsonb_array_elements(g.attached_policy) as policy
    where
      g.arn = $1
      and p.account_id = g.account_id
      and policy ->> 'PolicyName' = p.policy_name;
  EOQ
}

query "ram_users_for_ram_group" {
  sql = <<-EOQ
    select
      u.arn as user_arn
    from
      alicloud_ram_user as u,
      alicloud_ram_group as g,
      jsonb_array_elements(users) as member
    where
      g.arn = $1
      and member ->> 'UserName' = u.name
      and u.account_id = g.account_id;
  EOQ
}

# Card queries

query "ram_groups_users_count" {
  sql = <<-EOQ
    select
      jsonb_array_length(users) as value,
      'Users' as label,
      case when jsonb_array_length(users) > 0 then 'ok' else 'alert' end as type
    from
      alicloud_ram_group
    where
      arn = $1
      and account_id = split_part($1,':',4);
  EOQ
}

query "ram_groups_policies_count" {
  sql = <<-EOQ
    select
      jsonb_array_length(attached_policy) as value,
      'Policies' as label,
      case when jsonb_array_length(attached_policy) > 0 then 'ok' else 'alert' end as type
    from
      alicloud_ram_group
    where
      arn = $1
      and account_id = split_part($1,':',4);
  EOQ
}

# Other detail page queries

query "ram_group_overview" {
  sql = <<-EOQ
    select
      name as "Name",
      title as "Title",
      create_date as "Create Date",
      account_id as "Account ID"
    from
      alicloud_ram_group
    where
      arn = $1
      and account_id = split_part($1,':',4);
  EOQ
}

query "ram_users_for_group" {
  sql = <<-EOQ
    select
      u ->> 'UserName' as "User Name",
      'acs:ram::' || account_id || ':user/' || (u ->> 'UserName') as "User ARN",
      u ->> 'DisplayName' as "Display Name",
      u ->> 'JoinDate' as "Join Date"
    from
      alicloud_ram_group as g,
      jsonb_array_elements(users) as u
    where
      arn = $1
      and account_id = split_part($1,':',4);
  EOQ
}

query "ram_all_policies_for_group" {
  sql = <<-EOQ
    select
      policies ->> 'PolicyName' as "Name",
      policies ->> 'PolicyType' as "Type",
      policies ->> 'DefaultVersion' as "Default Version",
      policies ->> 'AttachDate' as "Attachment Date"
    from
      alicloud_ram_group,
      jsonb_array_elements(attached_policy) as policies
    where
      arn = $1
      and account_id = split_part($1,':',4);
  EOQ
}