mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 14:55:00 +00:00
feat(secretsmanager): Service and check (#1483)
This commit is contained in:
@@ -0,0 +1,56 @@
|
||||
import threading
|
||||
|
||||
from pydantic import BaseModel
|
||||
|
||||
from lib.logger import logger
|
||||
from providers.aws.aws_provider import generate_regional_clients
|
||||
|
||||
|
||||
################## SecretsManager
|
||||
class SecretsManager:
|
||||
def __init__(self, audit_info):
|
||||
self.service = "secretsmanager"
|
||||
self.session = audit_info.audit_session
|
||||
self.audited_account = audit_info.audited_account
|
||||
self.regional_clients = generate_regional_clients(self.service, audit_info)
|
||||
self.secrets = {}
|
||||
self.__threading_call__(self.__list_secrets__)
|
||||
|
||||
def __get_session__(self):
|
||||
return self.session
|
||||
|
||||
def __threading_call__(self, call):
|
||||
threads = []
|
||||
for regional_client in self.regional_clients.values():
|
||||
threads.append(threading.Thread(target=call, args=(regional_client,)))
|
||||
for t in threads:
|
||||
t.start()
|
||||
for t in threads:
|
||||
t.join()
|
||||
|
||||
def __list_secrets__(self, regional_client):
|
||||
logger.info("SecretsManager - Listing Secrets...")
|
||||
try:
|
||||
list_secrets_paginator = regional_client.get_paginator("list_secrets")
|
||||
for page in list_secrets_paginator.paginate():
|
||||
for secret in page["SecretList"]:
|
||||
self.secrets[secret["Name"]] = Secret(
|
||||
arn=secret["ARN"],
|
||||
name=secret["Name"],
|
||||
region=regional_client.region,
|
||||
rotation_enabled=secret["RotationEnabled"],
|
||||
)
|
||||
|
||||
except Exception as error:
|
||||
logger.error(
|
||||
f"{regional_client.region} --"
|
||||
f" {error.__class__.__name__}[{error.__traceback__.tb_lineno}]:"
|
||||
f" {error}"
|
||||
)
|
||||
|
||||
|
||||
class Secret(BaseModel):
|
||||
arn: str
|
||||
name: str
|
||||
region: str
|
||||
rotation_enabled: bool
|
||||
Reference in New Issue
Block a user