mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 14:55:00 +00:00
79 lines
2.6 KiB
Python
79 lines
2.6 KiB
Python
import json
|
|
import threading
|
|
|
|
from pydantic import BaseModel
|
|
|
|
from lib.logger import logger
|
|
from providers.aws.aws_provider import generate_regional_clients
|
|
|
|
|
|
################## Glacier
|
|
class Glacier:
|
|
def __init__(self, audit_info):
|
|
self.service = "glacier"
|
|
self.session = audit_info.audit_session
|
|
self.audited_account = audit_info.audited_account
|
|
self.regional_clients = generate_regional_clients(self.service, audit_info)
|
|
self.vaults = {}
|
|
self.__threading_call__(self.__list_vaults__)
|
|
self.__threading_call__(self.__get_vault_access_policy__)
|
|
|
|
def __get_session__(self):
|
|
return self.session
|
|
|
|
def __threading_call__(self, call):
|
|
threads = []
|
|
for regional_client in self.regional_clients.values():
|
|
threads.append(threading.Thread(target=call, args=(regional_client,)))
|
|
for t in threads:
|
|
t.start()
|
|
for t in threads:
|
|
t.join()
|
|
|
|
def __list_vaults__(self, regional_client):
|
|
logger.info("Glacier - Listing Vaults...")
|
|
try:
|
|
list_vaults_paginator = regional_client.get_paginator("list_vaults")
|
|
for page in list_vaults_paginator.paginate():
|
|
for vault in page["VaultList"]:
|
|
vault_name = vault["VaultName"]
|
|
vault_arn = vault["VaultARN"]
|
|
self.vaults[vault_name] = Vault(
|
|
name=vault_name,
|
|
arn=vault_arn,
|
|
region=regional_client.region,
|
|
)
|
|
|
|
except Exception as error:
|
|
logger.error(
|
|
f"{regional_client.region} --"
|
|
f" {error.__class__.__name__}[{error.__traceback__.tb_lineno}]:"
|
|
f" {error}"
|
|
)
|
|
|
|
def __get_vault_access_policy__(self, regional_client):
|
|
logger.info("Glacier - Getting Vault Access Policy...")
|
|
try:
|
|
for vault in self.vaults.values():
|
|
if vault.region == regional_client.region:
|
|
vault_access_policy = regional_client.get_vault_access_policy(
|
|
vaultName=vault.name
|
|
)
|
|
self.vaults[vault.name].access_policy = json.loads(
|
|
vault_access_policy["policy"]["Policy"]
|
|
)
|
|
|
|
except Exception as error:
|
|
logger.error(
|
|
f"{regional_client.region} --"
|
|
f" {error.__class__.__name__}[{error.__traceback__.tb_lineno}]:"
|
|
f" {error}"
|
|
)
|
|
|
|
|
|
class Vault(BaseModel):
|
|
name: str
|
|
arn: str
|
|
region: str
|
|
access_policy: dict = {}
|