ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 14:55:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(core): AWS Role Assumption support (#1199)

Browse Source 
* chore(assuming role): assume role logic and exceptions demo

* chore(exceptions): Exception handling

* fix(get_caller_identity): Deleted duplicate get_caller_identity and add info entries

* chore(creds renewal): Added support to credential renewal

* chore(assume options): Added condition for -I/-T options

* fix(typo/comments): Deleted f in logger config and comments

* chore(session_duration): limits for -T option

* fix(log messages): Changed -A/-R log messages

* fix(critical error): Errors in input options are critical

* fix(ClientError): IAM service ClientError exception support
This commit is contained in:
Nacho Rivera
2022-06-16 12:00:46 +02:00
committed by GitHub
parent eb679f50f1
commit 33c6801501
6 changed files with 326 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files

47
providers/aws/services/iam/iam_service.py
View File

@@ -1,7 +1,5 @@
import botocore
from boto3 import session
from providers.aws.aws_provider import session
from lib.logger import logger
from providers.aws.aws_provider import aws_session
################## IAM
@@ -26,7 +24,12 @@ class IAM:
try:
get_roles_paginator = self.client.get_paginator("list_roles")
except botocore.exceptions.ClientError as error:
raise error
logger.error(
f"{error.response['Error']['Code']} -- {error.response['Error']['Message']}"
)
except Exception as error:
logger.critical(f"{error.__class__.__name__} -- {error}")
quit()
else:
roles = []
for page in get_roles_paginator.paginate():
@@ -41,7 +44,12 @@ class IAM:
try:
report_status = self.client.generate_credential_report()
except botocore.exceptions.ClientError as error:
raise error
logger.error(
f"{error.response['Error']['Code']} -- {error.response['Error']['Message']}"
)
except Exception as error:
logger.critical(f"{error.__class__.__name__} -- {error}")
quit()
else:
if report_status["State"] == "COMPLETE":
report_is_completed = True
@@ -52,7 +60,12 @@ class IAM:
try:
get_groups_paginator = self.client.get_paginator("list_groups")
except botocore.exceptions.ClientError as error:
raise error
logger.error(
f"{error.response['Error']['Code']} -- {error.response['Error']['Message']}"
)
except Exception as error:
logger.critical(f"{error.__class__.__name__} -- {error}")
quit()
else:
groups = []
for page in get_groups_paginator.paginate():
@@ -67,7 +80,12 @@ class IAM:
"list_policies"
)
except botocore.exceptions.ClientError as error:
raise error
logger.error(
f"{error.response['Error']['Code']} -- {error.response['Error']['Message']}"
)
except Exception as error:
logger.critical(f"{error.__class__.__name__} -- {error}")
quit()
else:
customer_managed_policies = []
for page in get_customer_managed_policies_paginator.paginate(Scope="Local"):
@@ -80,7 +98,12 @@ class IAM:
try:
get_users_paginator = self.client.get_paginator("list_users")
except botocore.exceptions.ClientError as error:
raise error
logger.error(
f"{error.response['Error']['Code']} -- {error.response['Error']['Message']}"
)
except Exception as error:
logger.critical(f"{error.__class__.__name__} -- {error}")
quit()
else:
users = []
for page in get_users_paginator.paginate():
@@ -90,4 +113,8 @@ class IAM:
return users
iam_client = IAM(session)
try:
iam_client = IAM(aws_session)
except Exception as error:
logger.critical(f"{error.__class__.__name__} -- {error}")
quit()