mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 06:45:08 +00:00
b89b883741
* feat(filter-regions): Added -f and ebs encryption check. * feat(filter-regions): Added -f and ebs encryption check. * feat(regional_clients): add regional_clients. * fix(global variables): created global variables * chore(role option): Mixed -A/-R option including error handling * fix(arn): import errors from error.py file * fix(review_comments): Review PR comments. Co-authored-by: sergargar <sergio@verica.io> Co-authored-by: n4ch04 <nachor1992@gmail.com>
46 lines
1.5 KiB
Python
46 lines
1.5 KiB
Python
from arnparse import arnparse
|
|
|
|
from lib.arn.error import (
|
|
RoleArnParsingEmptyResource,
|
|
RoleArnParsingFailedMissingFields,
|
|
RoleArnParsingIAMRegionNotEmpty,
|
|
RoleArnParsingInvalidAccountID,
|
|
RoleArnParsingInvalidResourceType,
|
|
RoleArnParsingPartitionEmpty,
|
|
RoleArnParsingServiceNotIAM,
|
|
)
|
|
|
|
|
|
def arn_parsing(arn):
|
|
# check for number of fields, must be six
|
|
if len(arn.split(":")) != 6:
|
|
raise RoleArnParsingFailedMissingFields
|
|
else:
|
|
arn_parsed = arnparse(arn)
|
|
# First check if region is empty (in IAM arns region is always empty)
|
|
if arn_parsed.region != None:
|
|
raise RoleArnParsingIAMRegionNotEmpty
|
|
else:
|
|
# check if needed fields are filled:
|
|
# - partition
|
|
# - service
|
|
# - account_id
|
|
# - resource_type
|
|
# - resource
|
|
if arn_parsed.partition == None:
|
|
raise RoleArnParsingPartitionEmpty
|
|
elif arn_parsed.service != "iam":
|
|
raise RoleArnParsingServiceNotIAM
|
|
elif (
|
|
arn_parsed.account_id == None
|
|
or len(arn_parsed.account_id) != 12
|
|
or not arn_parsed.account_id.isnumeric()
|
|
):
|
|
raise RoleArnParsingInvalidAccountID
|
|
elif arn_parsed.resource_type != "role":
|
|
raise RoleArnParsingInvalidResourceType
|
|
elif arn_parsed.resource == "":
|
|
raise RoleArnParsingEmptyResource
|
|
else:
|
|
return arn_parsed
|