mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 14:55:00 +00:00
94 lines
2.9 KiB
Python
94 lines
2.9 KiB
Python
import botocore
|
|
from boto3 import session
|
|
|
|
from providers.aws.aws_provider import session
|
|
|
|
|
|
################## IAM
|
|
class IAM:
|
|
def __init__(self, session):
|
|
self.service = "iam"
|
|
self.session = session
|
|
self.client = session.client(self.service)
|
|
self.users = self.__get_users__()
|
|
self.roles = self.__get_roles__()
|
|
self.customer_managed_policies = self.__get_customer_managed_policies__()
|
|
self.credential_report = self.__get_credential_report__()
|
|
self.groups = self.__get_groups__()
|
|
|
|
def __get_client__(self):
|
|
return self.client
|
|
|
|
def __get_session__(self):
|
|
return self.session
|
|
|
|
def __get_roles__(self):
|
|
try:
|
|
get_roles_paginator = self.client.get_paginator("list_roles")
|
|
except botocore.exceptions.ClientError as error:
|
|
raise error
|
|
else:
|
|
roles = []
|
|
for page in get_roles_paginator.paginate():
|
|
for role in page["Roles"]:
|
|
roles.append(role)
|
|
|
|
return roles
|
|
|
|
def __get_credential_report__(self):
|
|
report_is_completed = False
|
|
while not report_is_completed:
|
|
try:
|
|
report_status = self.client.generate_credential_report()
|
|
except botocore.exceptions.ClientError as error:
|
|
raise error
|
|
else:
|
|
if report_status["State"] == "COMPLETE":
|
|
report_is_completed = True
|
|
|
|
return self.client.get_credential_report()
|
|
|
|
def __get_groups__(self):
|
|
try:
|
|
get_groups_paginator = self.client.get_paginator("list_groups")
|
|
except botocore.exceptions.ClientError as error:
|
|
raise error
|
|
else:
|
|
groups = []
|
|
for page in get_groups_paginator.paginate():
|
|
for group in page["Groups"]:
|
|
groups.append(group)
|
|
|
|
return groups
|
|
|
|
def __get_customer_managed_policies__(self):
|
|
try:
|
|
get_customer_managed_policies_paginator = self.client.get_paginator(
|
|
"list_policies"
|
|
)
|
|
except botocore.exceptions.ClientError as error:
|
|
raise error
|
|
else:
|
|
customer_managed_policies = []
|
|
for page in get_customer_managed_policies_paginator.paginate(Scope="Local"):
|
|
for customer_managed_policy in page["Policies"]:
|
|
customer_managed_policies.append(customer_managed_policy)
|
|
|
|
return customer_managed_policies
|
|
|
|
def __get_users__(self):
|
|
try:
|
|
get_users_paginator = self.client.get_paginator("list_users")
|
|
except botocore.exceptions.ClientError as error:
|
|
raise error
|
|
else:
|
|
users = []
|
|
for page in get_users_paginator.paginate():
|
|
for user in page["Users"]:
|
|
users.append(user)
|
|
|
|
return users
|
|
|
|
|
|
iam_client = IAM(session)
|