mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-13 00:05:04 +00:00
feat(Audit_Info): Unifying import set audit info for different providers (#1538)
This commit is contained in:
Nacho Rivera
@@ -38,13 +38,12 @@ from prowler.lib.outputs.outputs import (
|
||||
display_summary_table,
|
||||
send_to_s3_bucket,
|
||||
)
|
||||
from prowler.providers.aws.aws_provider import aws_provider_set_session
|
||||
from prowler.providers.aws.lib.allowlist.allowlist import parse_allowlist_file
|
||||
from prowler.providers.aws.lib.quick_inventory.quick_inventory import quick_inventory
|
||||
from prowler.providers.aws.lib.security_hub.security_hub import (
|
||||
resolve_security_hub_previous_findings,
|
||||
)
|
||||
from prowler.providers.azure.azure_provider import azure_provider_set_session
|
||||
from prowler.providers.common.common import set_provider_audit_info
|
||||
|
||||
|
||||
def prowler():
|
||||
@@ -298,17 +297,6 @@ def prowler():
|
||||
sp_env_auth = args.sp_env_auth
|
||||
browser_auth = args.browser_auth
|
||||
managed_entity_auth = args.managed_identity_auth
|
||||
if provider == "azure":
|
||||
if (
|
||||
not az_cli_auth
|
||||
and not sp_env_auth
|
||||
and not browser_auth
|
||||
and not managed_entity_auth
|
||||
):
|
||||
logger.critical(
|
||||
"If you are using Azure provider you need to set one of the following options: --az-cli-auth, --sp-env-auth, --browser-auth, --managed-identity-auth"
|
||||
)
|
||||
sys.exit()
|
||||
|
||||
# We treat the compliance framework as another output format
|
||||
if compliance_framework:
|
||||
@@ -417,20 +405,20 @@ def prowler():
|
||||
if output_modes:
|
||||
mkdir(output_directory)
|
||||
|
||||
if provider == "aws":
|
||||
# Set global session
|
||||
audit_info = aws_provider_set_session(
|
||||
args.profile,
|
||||
args.role,
|
||||
args.session_duration,
|
||||
args.external_id,
|
||||
args.filter_region,
|
||||
args.organizations_role,
|
||||
)
|
||||
elif provider == "azure":
|
||||
audit_info = azure_provider_set_session(
|
||||
subscriptions, az_cli_auth, sp_env_auth, browser_auth, managed_entity_auth
|
||||
)
|
||||
arguments = {
|
||||
"profile": args.profile,
|
||||
"role": args.role,
|
||||
"session_duration": args.session_duration,
|
||||
"external_id": args.external_id,
|
||||
"regions": args.filter_region,
|
||||
"organizations_role": args.organizations_role,
|
||||
"subscriptions": subscriptions,
|
||||
"az_cli_auth": az_cli_auth,
|
||||
"sp_env_auth": sp_env_auth,
|
||||
"browser_auth": browser_auth,
|
||||
"managed_entity_auth": managed_entity_auth,
|
||||
}
|
||||
audit_info = set_provider_audit_info(provider, arguments)
|
||||
|
||||
# Check if custom output filename was input, if not, set the default
|
||||
if not output_filename:
|
||||
|
||||
@@ -1,22 +1,14 @@
|
||||
import os
|
||||
import sys
|
||||
|
||||
from arnparse import arnparse
|
||||
from boto3 import client, session
|
||||
from boto3 import session
|
||||
from botocore.credentials import RefreshableCredentials
|
||||
from botocore.session import get_session
|
||||
from colorama import Fore, Style
|
||||
|
||||
from prowler.config.config import aws_services_json_file
|
||||
from prowler.lib.logger import logger
|
||||
from prowler.lib.utils.utils import open_file, parse_json_file
|
||||
from prowler.providers.aws.lib.arn.arn import arn_parsing
|
||||
from prowler.providers.aws.lib.audit_info.audit_info import current_audit_info
|
||||
from prowler.providers.aws.lib.audit_info.models import (
|
||||
AWS_Audit_Info,
|
||||
AWS_Credentials,
|
||||
AWS_Organizations_Info,
|
||||
)
|
||||
from prowler.providers.aws.lib.audit_info.models import AWS_Audit_Info
|
||||
|
||||
|
||||
################## AWS PROVIDER
|
||||
@@ -84,147 +76,6 @@ class AWS_Provider:
|
||||
return refreshed_credentials
|
||||
|
||||
|
||||
def aws_provider_set_session(
|
||||
input_profile,
|
||||
input_role,
|
||||
input_session_duration,
|
||||
input_external_id,
|
||||
input_regions,
|
||||
organizations_role_arn,
|
||||
):
|
||||
# Assumed AWS session
|
||||
assumed_session = None
|
||||
|
||||
# Setting session
|
||||
current_audit_info.profile = input_profile
|
||||
current_audit_info.audited_regions = input_regions
|
||||
|
||||
logger.info("Generating original session ...")
|
||||
# Create an global original session using only profile/basic credentials info
|
||||
current_audit_info.original_session = AWS_Provider(current_audit_info).get_session()
|
||||
logger.info("Validating credentials ...")
|
||||
# Verificate if we have valid credentials
|
||||
caller_identity = validate_credentials(current_audit_info.original_session)
|
||||
|
||||
logger.info("Credentials validated")
|
||||
logger.info(f"Original caller identity UserId : {caller_identity['UserId']}")
|
||||
logger.info(f"Original caller identity ARN : {caller_identity['Arn']}")
|
||||
|
||||
current_audit_info.audited_account = caller_identity["Account"]
|
||||
current_audit_info.audited_identity_arn = caller_identity["Arn"]
|
||||
current_audit_info.audited_user_id = caller_identity["UserId"]
|
||||
current_audit_info.audited_partition = arnparse(caller_identity["Arn"]).partition
|
||||
|
||||
logger.info("Checking if organizations role assumption is needed ...")
|
||||
if organizations_role_arn:
|
||||
current_audit_info.assumed_role_info.role_arn = organizations_role_arn
|
||||
current_audit_info.assumed_role_info.session_duration = input_session_duration
|
||||
|
||||
# Check if role arn is valid
|
||||
try:
|
||||
# this returns the arn already parsed, calls arnparse, into a dict to be used when it is needed to access its fields
|
||||
role_arn_parsed = arn_parsing(current_audit_info.assumed_role_info.role_arn)
|
||||
|
||||
except Exception as error:
|
||||
logger.critical(f"{error.__class__.__name__} -- {error}")
|
||||
sys.exit()
|
||||
|
||||
else:
|
||||
logger.info(
|
||||
f"Getting organizations metadata for account {organizations_role_arn}"
|
||||
)
|
||||
assumed_credentials = assume_role(current_audit_info)
|
||||
current_audit_info.organizations_metadata = get_organizations_metadata(
|
||||
current_audit_info.audited_account, assumed_credentials
|
||||
)
|
||||
logger.info("Organizations metadata retrieved")
|
||||
|
||||
logger.info("Checking if role assumption is needed ...")
|
||||
if input_role:
|
||||
current_audit_info.assumed_role_info.role_arn = input_role
|
||||
current_audit_info.assumed_role_info.session_duration = input_session_duration
|
||||
current_audit_info.assumed_role_info.external_id = input_external_id
|
||||
|
||||
# Check if role arn is valid
|
||||
try:
|
||||
# this returns the arn already parsed, calls arnparse, into a dict to be used when it is needed to access its fields
|
||||
role_arn_parsed = arn_parsing(current_audit_info.assumed_role_info.role_arn)
|
||||
|
||||
except Exception as error:
|
||||
logger.critical(f"{error.__class__.__name__} -- {error}")
|
||||
sys.exit()
|
||||
|
||||
else:
|
||||
logger.info(
|
||||
f"Assuming role {current_audit_info.assumed_role_info.role_arn}"
|
||||
)
|
||||
# Assume the role
|
||||
assumed_role_response = assume_role(current_audit_info)
|
||||
logger.info("Role assumed")
|
||||
# Set the info needed to create a session with an assumed role
|
||||
current_audit_info.credentials = AWS_Credentials(
|
||||
aws_access_key_id=assumed_role_response["Credentials"]["AccessKeyId"],
|
||||
aws_session_token=assumed_role_response["Credentials"]["SessionToken"],
|
||||
aws_secret_access_key=assumed_role_response["Credentials"][
|
||||
"SecretAccessKey"
|
||||
],
|
||||
expiration=assumed_role_response["Credentials"]["Expiration"],
|
||||
)
|
||||
assumed_session = AWS_Provider(current_audit_info).get_session()
|
||||
|
||||
if assumed_session:
|
||||
logger.info("Audit session is the new session created assuming role")
|
||||
current_audit_info.audit_session = assumed_session
|
||||
current_audit_info.audited_account = role_arn_parsed.account_id
|
||||
current_audit_info.audited_partition = role_arn_parsed.partition
|
||||
else:
|
||||
logger.info("Audit session is the original one")
|
||||
current_audit_info.audit_session = current_audit_info.original_session
|
||||
|
||||
# Setting default region of session
|
||||
if current_audit_info.audit_session.region_name:
|
||||
current_audit_info.profile_region = current_audit_info.audit_session.region_name
|
||||
else:
|
||||
current_audit_info.profile_region = "us-east-1"
|
||||
|
||||
print_audit_credentials(current_audit_info)
|
||||
return current_audit_info
|
||||
|
||||
|
||||
def print_audit_credentials(audit_info: AWS_Audit_Info):
|
||||
# Beautify audited regions, set "all" if there is no filter region
|
||||
regions = (
|
||||
", ".join(audit_info.audited_regions)
|
||||
if audit_info.audited_regions is not None
|
||||
else "all"
|
||||
)
|
||||
# Beautify audited profile, set "default" if there is no profile set
|
||||
profile = audit_info.profile if audit_info.profile is not None else "default"
|
||||
|
||||
report = f"""
|
||||
This report is being generated using credentials below:
|
||||
|
||||
AWS-CLI Profile: {Fore.YELLOW}[{profile}]{Style.RESET_ALL} AWS Filter Region: {Fore.YELLOW}[{regions}]{Style.RESET_ALL}
|
||||
AWS Account: {Fore.YELLOW}[{audit_info.audited_account}]{Style.RESET_ALL} UserId: {Fore.YELLOW}[{audit_info.audited_user_id}]{Style.RESET_ALL}
|
||||
Caller Identity ARN: {Fore.YELLOW}[{audit_info.audited_identity_arn}]{Style.RESET_ALL}
|
||||
"""
|
||||
# If -A is set, print Assumed Role ARN
|
||||
if audit_info.assumed_role_info.role_arn is not None:
|
||||
report += f"Assumed Role ARN: {Fore.YELLOW}[{audit_info.assumed_role_info.role_arn}]{Style.RESET_ALL}"
|
||||
print(report)
|
||||
|
||||
|
||||
def validate_credentials(validate_session: session) -> dict:
|
||||
try:
|
||||
validate_credentials_client = validate_session.client("sts")
|
||||
caller_identity = validate_credentials_client.get_caller_identity()
|
||||
except Exception as error:
|
||||
logger.critical(f"{error.__class__.__name__} -- {error}")
|
||||
sys.exit()
|
||||
else:
|
||||
return caller_identity
|
||||
|
||||
|
||||
def assume_role(audit_info: AWS_Audit_Info) -> dict:
|
||||
try:
|
||||
# set the info to assume the role from the partition, account and role name
|
||||
@@ -252,40 +103,6 @@ def assume_role(audit_info: AWS_Audit_Info) -> dict:
|
||||
return assumed_credentials
|
||||
|
||||
|
||||
def get_organizations_metadata(
|
||||
metadata_account: str, assumed_credentials: dict
|
||||
) -> AWS_Organizations_Info:
|
||||
try:
|
||||
organizations_client = client(
|
||||
"organizations",
|
||||
aws_access_key_id=assumed_credentials["Credentials"]["AccessKeyId"],
|
||||
aws_secret_access_key=assumed_credentials["Credentials"]["SecretAccessKey"],
|
||||
aws_session_token=assumed_credentials["Credentials"]["SessionToken"],
|
||||
)
|
||||
organizations_metadata = organizations_client.describe_account(
|
||||
AccountId=metadata_account
|
||||
)
|
||||
list_tags_for_resource = organizations_client.list_tags_for_resource(
|
||||
ResourceId=metadata_account
|
||||
)
|
||||
except Exception as error:
|
||||
logger.critical(f"{error.__class__.__name__} -- {error}")
|
||||
sys.exit()
|
||||
else:
|
||||
# Convert Tags dictionary to String
|
||||
account_details_tags = ""
|
||||
for tag in list_tags_for_resource["Tags"]:
|
||||
account_details_tags += tag["Key"] + ":" + tag["Value"] + ","
|
||||
organizations_info = AWS_Organizations_Info(
|
||||
account_details_email=organizations_metadata["Account"]["Email"],
|
||||
account_details_name=organizations_metadata["Account"]["Name"],
|
||||
account_details_arn=organizations_metadata["Account"]["Arn"],
|
||||
account_details_org=organizations_metadata["Account"]["Arn"].split("/")[1],
|
||||
account_details_tags=account_details_tags,
|
||||
)
|
||||
return organizations_info
|
||||
|
||||
|
||||
def generate_regional_clients(service: str, audit_info: AWS_Audit_Info) -> dict:
|
||||
regional_clients = {}
|
||||
# Get json locally
|
||||
|
||||
@@ -6,11 +6,7 @@ from azure.mgmt.subscription import SubscriptionClient
|
||||
from msgraph.core import GraphClient
|
||||
|
||||
from prowler.lib.logger import logger
|
||||
from prowler.providers.azure.lib.audit_info.audit_info import azure_audit_info
|
||||
from prowler.providers.azure.lib.audit_info.models import (
|
||||
Azure_Audit_Info,
|
||||
Azure_Identity_Info,
|
||||
)
|
||||
from prowler.providers.azure.lib.audit_info.models import Azure_Identity_Info
|
||||
|
||||
|
||||
class Azure_Provider:
|
||||
@@ -183,21 +179,3 @@ class Azure_Provider:
|
||||
|
||||
def get_identity(self):
|
||||
return self.identity
|
||||
|
||||
|
||||
def azure_provider_set_session(
|
||||
subscription_ids: list,
|
||||
az_cli_auth: bool,
|
||||
sp_env_auth: bool,
|
||||
browser_auth: bool,
|
||||
managed_entity_auth: bool,
|
||||
) -> Azure_Audit_Info:
|
||||
logger.info("Setting Azure session ...")
|
||||
|
||||
azure_provider = Azure_Provider(
|
||||
az_cli_auth, sp_env_auth, browser_auth, managed_entity_auth, subscription_ids
|
||||
)
|
||||
azure_audit_info.credentials = azure_provider.get_credentials()
|
||||
azure_audit_info.identity = azure_provider.get_identity()
|
||||
|
||||
return azure_audit_info
|
||||
|
||||
@@ -20,4 +20,3 @@ class Azure_Audit_Info:
|
||||
def __init__(self, credentials, identity):
|
||||
self.credentials = credentials
|
||||
self.identity = identity
|
||||
self.is_azure = True
|
||||
|
||||
0
prowler/providers/common/__init__.py
Normal file
0
prowler/providers/common/__init__.py
Normal file
255
prowler/providers/common/common.py
Normal file
255
prowler/providers/common/common.py
Normal file
@@ -0,0 +1,255 @@
|
||||
import importlib
|
||||
import sys
|
||||
|
||||
from arnparse import arnparse
|
||||
from boto3 import client, session
|
||||
from colorama import Fore, Style
|
||||
|
||||
from prowler.lib.logger import logger
|
||||
from prowler.providers.aws.aws_provider import AWS_Provider, assume_role
|
||||
from prowler.providers.aws.lib.arn.arn import arn_parsing
|
||||
from prowler.providers.aws.lib.audit_info.audit_info import current_audit_info
|
||||
from prowler.providers.aws.lib.audit_info.models import (
|
||||
AWS_Audit_Info,
|
||||
AWS_Credentials,
|
||||
AWS_Organizations_Info,
|
||||
)
|
||||
from prowler.providers.azure.azure_provider import Azure_Provider
|
||||
from prowler.providers.azure.lib.audit_info.audit_info import azure_audit_info
|
||||
from prowler.providers.azure.lib.audit_info.models import Azure_Audit_Info
|
||||
|
||||
|
||||
class Audit_Info:
|
||||
def __init__(self):
|
||||
logger.info("Instantiating audit info")
|
||||
|
||||
def validate_credentials(self, validate_session: session) -> dict:
|
||||
try:
|
||||
validate_credentials_client = validate_session.client("sts")
|
||||
caller_identity = validate_credentials_client.get_caller_identity()
|
||||
except Exception as error:
|
||||
logger.critical(f"{error.__class__.__name__} -- {error}")
|
||||
sys.exit()
|
||||
else:
|
||||
return caller_identity
|
||||
|
||||
def print_audit_credentials(self, audit_info: AWS_Audit_Info):
|
||||
# Beautify audited regions, set "all" if there is no filter region
|
||||
regions = (
|
||||
", ".join(audit_info.audited_regions)
|
||||
if audit_info.audited_regions is not None
|
||||
else "all"
|
||||
)
|
||||
# Beautify audited profile, set "default" if there is no profile set
|
||||
profile = audit_info.profile if audit_info.profile is not None else "default"
|
||||
|
||||
report = f"""
|
||||
This report is being generated using credentials below:
|
||||
|
||||
AWS-CLI Profile: {Fore.YELLOW}[{profile}]{Style.RESET_ALL} AWS Filter Region: {Fore.YELLOW}[{regions}]{Style.RESET_ALL}
|
||||
AWS Account: {Fore.YELLOW}[{audit_info.audited_account}]{Style.RESET_ALL} UserId: {Fore.YELLOW}[{audit_info.audited_user_id}]{Style.RESET_ALL}
|
||||
Caller Identity ARN: {Fore.YELLOW}[{audit_info.audited_identity_arn}]{Style.RESET_ALL}
|
||||
"""
|
||||
# If -A is set, print Assumed Role ARN
|
||||
if audit_info.assumed_role_info.role_arn is not None:
|
||||
report += f"Assumed Role ARN: {Fore.YELLOW}[{audit_info.assumed_role_info.role_arn}]{Style.RESET_ALL}"
|
||||
print(report)
|
||||
|
||||
def get_organizations_metadata(
|
||||
self, metadata_account: str, assumed_credentials: dict
|
||||
) -> AWS_Organizations_Info:
|
||||
try:
|
||||
organizations_client = client(
|
||||
"organizations",
|
||||
aws_access_key_id=assumed_credentials["Credentials"]["AccessKeyId"],
|
||||
aws_secret_access_key=assumed_credentials["Credentials"][
|
||||
"SecretAccessKey"
|
||||
],
|
||||
aws_session_token=assumed_credentials["Credentials"]["SessionToken"],
|
||||
)
|
||||
organizations_metadata = organizations_client.describe_account(
|
||||
AccountId=metadata_account
|
||||
)
|
||||
list_tags_for_resource = organizations_client.list_tags_for_resource(
|
||||
ResourceId=metadata_account
|
||||
)
|
||||
except Exception as error:
|
||||
logger.critical(f"{error.__class__.__name__} -- {error}")
|
||||
sys.exit()
|
||||
else:
|
||||
# Convert Tags dictionary to String
|
||||
account_details_tags = ""
|
||||
for tag in list_tags_for_resource["Tags"]:
|
||||
account_details_tags += tag["Key"] + ":" + tag["Value"] + ","
|
||||
organizations_info = AWS_Organizations_Info(
|
||||
account_details_email=organizations_metadata["Account"]["Email"],
|
||||
account_details_name=organizations_metadata["Account"]["Name"],
|
||||
account_details_arn=organizations_metadata["Account"]["Arn"],
|
||||
account_details_org=organizations_metadata["Account"]["Arn"].split("/")[
|
||||
1
|
||||
],
|
||||
account_details_tags=account_details_tags,
|
||||
)
|
||||
return organizations_info
|
||||
|
||||
def set_aws_audit_info(self, arguments):
|
||||
input_profile = arguments["profile"]
|
||||
input_role = arguments["role"]
|
||||
input_session_duration = arguments["session_duration"]
|
||||
input_external_id = arguments["external_id"]
|
||||
input_regions = arguments["regions"]
|
||||
organizations_role_arn = arguments["organizations_role"]
|
||||
# Assumed AWS session
|
||||
assumed_session = None
|
||||
|
||||
# Setting session
|
||||
current_audit_info.profile = input_profile
|
||||
current_audit_info.audited_regions = input_regions
|
||||
|
||||
logger.info("Generating original session ...")
|
||||
# Create an global original session using only profile/basic credentials info
|
||||
current_audit_info.original_session = AWS_Provider(
|
||||
current_audit_info
|
||||
).get_session()
|
||||
logger.info("Validating credentials ...")
|
||||
# Verificate if we have valid credentials
|
||||
caller_identity = self.validate_credentials(current_audit_info.original_session)
|
||||
|
||||
logger.info("Credentials validated")
|
||||
logger.info(f"Original caller identity UserId : {caller_identity['UserId']}")
|
||||
logger.info(f"Original caller identity ARN : {caller_identity['Arn']}")
|
||||
|
||||
current_audit_info.audited_account = caller_identity["Account"]
|
||||
current_audit_info.audited_identity_arn = caller_identity["Arn"]
|
||||
current_audit_info.audited_user_id = caller_identity["UserId"]
|
||||
current_audit_info.audited_partition = arnparse(
|
||||
caller_identity["Arn"]
|
||||
).partition
|
||||
|
||||
logger.info("Checking if organizations role assumption is needed ...")
|
||||
if organizations_role_arn:
|
||||
current_audit_info.assumed_role_info.role_arn = organizations_role_arn
|
||||
current_audit_info.assumed_role_info.session_duration = (
|
||||
input_session_duration
|
||||
)
|
||||
|
||||
# Check if role arn is valid
|
||||
try:
|
||||
# this returns the arn already parsed, calls arnparse, into a dict to be used when it is needed to access its fields
|
||||
role_arn_parsed = arn_parsing(
|
||||
current_audit_info.assumed_role_info.role_arn
|
||||
)
|
||||
|
||||
except Exception as error:
|
||||
logger.critical(f"{error.__class__.__name__} -- {error}")
|
||||
sys.exit()
|
||||
|
||||
else:
|
||||
logger.info(
|
||||
f"Getting organizations metadata for account {organizations_role_arn}"
|
||||
)
|
||||
assumed_credentials = assume_role(current_audit_info)
|
||||
current_audit_info.organizations_metadata = (
|
||||
self.get_organizations_metadata(
|
||||
current_audit_info.audited_account, assumed_credentials
|
||||
)
|
||||
)
|
||||
logger.info("Organizations metadata retrieved")
|
||||
|
||||
logger.info("Checking if role assumption is needed ...")
|
||||
if input_role:
|
||||
current_audit_info.assumed_role_info.role_arn = input_role
|
||||
current_audit_info.assumed_role_info.session_duration = (
|
||||
input_session_duration
|
||||
)
|
||||
current_audit_info.assumed_role_info.external_id = input_external_id
|
||||
|
||||
# Check if role arn is valid
|
||||
try:
|
||||
# this returns the arn already parsed, calls arnparse, into a dict to be used when it is needed to access its fields
|
||||
role_arn_parsed = arn_parsing(
|
||||
current_audit_info.assumed_role_info.role_arn
|
||||
)
|
||||
|
||||
except Exception as error:
|
||||
logger.critical(f"{error.__class__.__name__} -- {error}")
|
||||
sys.exit()
|
||||
|
||||
else:
|
||||
logger.info(
|
||||
f"Assuming role {current_audit_info.assumed_role_info.role_arn}"
|
||||
)
|
||||
# Assume the role
|
||||
assumed_role_response = self.assume_role(current_audit_info)
|
||||
logger.info("Role assumed")
|
||||
# Set the info needed to create a session with an assumed role
|
||||
current_audit_info.credentials = AWS_Credentials(
|
||||
aws_access_key_id=assumed_role_response["Credentials"][
|
||||
"AccessKeyId"
|
||||
],
|
||||
aws_session_token=assumed_role_response["Credentials"][
|
||||
"SessionToken"
|
||||
],
|
||||
aws_secret_access_key=assumed_role_response["Credentials"][
|
||||
"SecretAccessKey"
|
||||
],
|
||||
expiration=assumed_role_response["Credentials"]["Expiration"],
|
||||
)
|
||||
assumed_session = AWS_Provider(current_audit_info).get_session()
|
||||
|
||||
if assumed_session:
|
||||
logger.info("Audit session is the new session created assuming role")
|
||||
current_audit_info.audit_session = assumed_session
|
||||
current_audit_info.audited_account = role_arn_parsed.account_id
|
||||
current_audit_info.audited_partition = role_arn_parsed.partition
|
||||
else:
|
||||
logger.info("Audit session is the original one")
|
||||
current_audit_info.audit_session = current_audit_info.original_session
|
||||
|
||||
# Setting default region of session
|
||||
if current_audit_info.audit_session.region_name:
|
||||
current_audit_info.profile_region = (
|
||||
current_audit_info.audit_session.region_name
|
||||
)
|
||||
else:
|
||||
current_audit_info.profile_region = "us-east-1"
|
||||
|
||||
self.print_audit_credentials(current_audit_info)
|
||||
return current_audit_info
|
||||
|
||||
def set_azure_audit_info(self, arguments) -> Azure_Audit_Info:
|
||||
logger.info("Setting Azure session ...")
|
||||
subscription_ids = arguments["subscriptions"]
|
||||
az_cli_auth = arguments["az_cli_auth"]
|
||||
sp_env_auth = arguments["sp_env_auth"]
|
||||
browser_auth = arguments["browser_auth"]
|
||||
managed_entity_auth = arguments["managed_entity_auth"]
|
||||
|
||||
azure_provider = Azure_Provider(
|
||||
az_cli_auth,
|
||||
sp_env_auth,
|
||||
browser_auth,
|
||||
managed_entity_auth,
|
||||
subscription_ids,
|
||||
)
|
||||
azure_audit_info.credentials = azure_provider.get_credentials()
|
||||
azure_audit_info.identity = azure_provider.get_identity()
|
||||
|
||||
return azure_audit_info
|
||||
|
||||
|
||||
def set_provider_audit_info(provider: str, arguments: dict):
|
||||
try:
|
||||
provider_set_audit_info = f"set_{provider}_audit_info"
|
||||
provider_audit_info = getattr(Audit_Info(), provider_set_audit_info)(arguments)
|
||||
except Exception as error:
|
||||
logger.error(
|
||||
f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
|
||||
)
|
||||
else:
|
||||
return provider_audit_info
|
||||
|
||||
|
||||
def import_lib(path: str):
|
||||
lib = importlib.import_module(path)
|
||||
return lib
|
||||
Reference in New Issue
Block a user