File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/boto_cloudtrail.cpython-310.pyc
Back
o ;j�9 � @ s: d Z ddlZddlZddlZe�e�ZzddlZddl Z ddl m Z e�d�� ej � dZW n ey9 dZY nw dd� Zd d � Zd%d d �Z d&d d�Zd%dd�Zd%dd�Zd%dd�Zd%dd�Z d&dd�Zd%dd�Zd%dd �Zd%d d �Zd%d d �Z d%d!d"�Z d%d#d$�Z dS )'aN Connection module for Amazon CloudTrail .. versionadded:: 2016.3.0 :depends: - boto - boto3 The dependencies listed above can be installed via package or pip. :configuration: This module accepts explicit Lambda credentials but can also utilize IAM roles assigned to the instance through Instance Profiles. Dynamic credentials are then automatically obtained from AWS API and no further configuration is necessary. More Information available at: .. code-block:: text http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html If IAM roles are not used you need to specify them either in a pillar or in the minion's config file: .. code-block:: yaml cloudtrail.keyid: GKTADJGHEIQSXMKKRBJ08H cloudtrail.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs A region may also be specified in the configuration: .. code-block:: yaml cloudtrail.region: us-east-1 If a region is not specified, the default is us-east-1. It's also possible to specify key, keyid and region via a profile, either as a passed in dict, or as a string to pull from pillars or minion config: .. code-block:: yaml myprofile: keyid: GKTADJGHEIQSXMKKRBJ08H key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs region: us-east-1 � N)� ClientError�boto3TFc C s t jjjdd�S )zg Only load if boto libraries exist and if boto libraries are greater than a given version. z1.2.5)Z boto3_ver)�salt�utilsZversionsZcheck_boto_reqs� r r �P/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/boto_cloudtrail.py� __virtual__M s r c C s t r td td� d S d S )Nzboto3.assign_funcsZ cloudtrail)�HAS_BOTO� __utils__�__name__)�optsr r r �__init__X s �r c C s� zt ||||d�}|j| d� ddiW S tyE } z&td |�}|j�di ��d�dkr7dd iW Y d }~S d |iW Y d }~S d }~ww ) a Given a trail name, check to see if the given trail exists. Returns True if the given trail exists and returns False if the given trail does not exist. CLI Example: .. code-block:: bash salt myminion boto_cloudtrail.exists mytrail ��region�key�keyid�profile��Name�existsT�boto3.get_error�Error�Code�TrailNotFoundExceptionFN�error�� _get_connZget_trail_statusr r �response�get)r r r r r �conn�e�errr r r r ] s ��r c C � zDt | | | | d�}i }dD ]}t� | dur t� | ||< q |jd| |d�|��}|r;t�d|d � d|d d�W S t�d � d d iW S ty_ } zd td |�d �W Y d}~S d}~ww )a Given a valid config, create a trail. Returns {created: true} if the trail was created and returns {created: False} if the trail was not created. CLI Example: .. code-block:: bash salt myminion boto_cloudtrail.create my_trail my_bucket r �� S3KeyPrefix� SnsTopicName�IncludeGlobalServiceEvents�IsMultiRegionTrail�EnableLogFileValidation�CloudWatchLogsLogGroupArn�CloudWatchLogsRoleArn�KmsKeyIdN�r � S3BucketNamez"The newly created trail name is %sr T)�created�name�Trail was not createdr. Fr )r. r r )r �localsZ create_trail�log�info�warningr r �r r- r$ r% r& r' r( r) r* r+ r r r r r �kwargs�arg�trailr r r r �createw �" � ��r9 c C �^ zt ||||d�}|j| d� ddiW S ty. } zdtd |�d�W Y d}~S d}~ww ) a Given a trail name, delete it. Returns {deleted: true} if the trail was deleted and returns {deleted: false} if the trail was not deleted. CLI Example: .. code-block:: bash salt myminion boto_cloudtrail.delete mytrail r r �deletedTFr )r< r N)r Z delete_trailr r �r r r r r r r r r r �delete� � ��r> c s� z/t ||||d�}|j| gd�}|r+|�d�r+d}|d �� � d� fdd�|D �iW S ddiW S tye } z*td |�} |j�d i ��d �d krSddiW Y d}~S d td |�iW Y d}~S d}~ww )�� Given a trail name describe its properties. Returns a dictionary of interesting properties. CLI Example: .. code-block:: bash salt myminion boto_cloudtrail.describe mytrail r )Z trailNameList� trailList) r r- r$ r% r& r' Z HomeRegionZTrailARNZLogFileValidationEnabledr) r* r+ r8 c � i | ]}|� � |��qS r �r ��.0�k�r8 r r � <dictcomp>� � z describe.<locals>.<dictcomp>Nr r r r r )r �describe_trailsr �popr r r ) r r r r r r �trails�keysr r! r rG r �describe� s ��rN c s� z#t ||||d�}|j| d�� � r d}d� fdd�|D �iW S ddiW S tyY } z*td |�}|j�d i ��d �d krGddiW Y d}~S d td |�iW Y d}~S d}~ww ) r@ r r )Z IsLoggingZLatestDeliveryErrorZLatestNotificationErrorZLatestDeliveryTimeZLatestNotificationTimeZStartLoggingTimeZStopLoggingTimeZ!LatestCloudWatchLogsDeliveryErrorZ LatestCloudWatchLogsDeliveryTimeZLatestDigestDeliveryTimeZLatestDigestDeliveryErrorZLatestDeliveryAttemptTimeZ LatestNotificationAttemptTimeZ"LatestNotificationAttemptSucceededZ LatestDeliveryAttemptSucceededZTimeLoggingStartedZTimeLoggingStoppedr8 c rB r rC rD rG r r rH rI zstatus.<locals>.<dictcomp>Nr r r r r r ) r r r r r r rM r r! r rG r �status� s ��rO c C sx z!t | |||d�}|�� }t|�d��st�d� d|�dg �iW S ty; } zdtd |�iW Y d}~S d}~ww )z� List all trails Returns list of trails CLI Example: .. code-block:: yaml policies: - {...} - {...} r rA zNo trails foundrL r r N)r rJ �boolr r2 r4 r r )r r r r r rL r r r r �list! s ��rQ c C r" )a Given a valid config, update a trail. Returns {created: true} if the trail was created and returns {created: False} if the trail was not created. CLI Example: .. code-block:: bash salt myminion boto_cloudtrail.update my_trail my_bucket r r# Nr, z The updated trail name is %sr T)�updatedr/ r0 rR Fr )rR r r )r r1 Z update_trailr2 r3 r4 r r r5 r r r �update: r: rS c C r; ) a Start logging for a trail Returns {started: true} if the trail was started and returns {started: False} if the trail was not started. CLI Example: .. code-block:: bash salt myminion boto_cloudtrail.start_logging my_trail r r �startedTFr )rT r N)r � start_loggingr r r= r r r rU s r? rU c C r; ) a Stop logging for a trail Returns {stopped: true} if the trail was stopped and returns {stopped: False} if the trail was not stopped. CLI Example: .. code-block:: bash salt myminion boto_cloudtrail.stop_logging my_trail r r �stoppedTFr )rV r N)r � stop_loggingr r r= r r r rW � r? rW c C sX | � d�r| S td ||||d�}|rd|v r|d }|d u r!d}d|� d|� d| � �S )Nzarn:aws:cloudtrail:zboto_iam.get_account_idr r z us-east-1�:z:trail/)� startswithZ__salt__)r/ r r r r Z account_idr r r �_get_trail_arn� s � rZ c K � z:t ||||d�}g }|�� D ]\}} t|��d�rq|�t|�t| �d�� q|jt| ||||d�|d� ddiW S tyU } zdtd | �d �W Y d } ~ S d } ~ ww ) a Add tags to a trail Returns {tagged: true} if the trail was tagged and returns {tagged: False} if the trail was not tagged. CLI Example: .. code-block:: bash salt myminion boto_cloudtrail.add_tags my_trail tag_a=tag_value tag_b=tag_value r �__��Key�Value�Z ResourceId�TagsList�taggedTFr �rb r N) r �items�strrY �append�add_tagsrZ r r � r r r r r r6 r ZtagslistrF �vr r r r rg � �$ �� ��rg c K r[ ) a Remove tags from a trail Returns {tagged: true} if the trail was tagged and returns {tagged: False} if the trail was not tagged. CLI Example: .. code-block:: bash salt myminion boto_cloudtrail.remove_tags my_trail tag_a=tag_value tag_b=tag_value r r\ r] r` rb TFr rc N) r rd re rY rf � remove_tagsrZ r r rh r r r rk � rj rk c C s� z9t ||||d�}t| ||||d�}|j|gd�}|�dg ��� �d�}i } |D ] } | �d�| | �d�< q(d| iW S tyS } zdtd | �iW Y d } ~ S d } ~ ww ) z� List tags of a trail Returns: tags: - {...} - {...} CLI Example: .. code-block:: bash salt myminion boto_cloudtrail.list_tags my_trail r )ZResourceIdListZResourceTagListra r_ r^ �tagsr r N)r rZ � list_tagsr rK r r ) r r r r r r Zrid�retZtlistZtagdict�tagr r r r rm � s ��rm )NNNN) NNNNNNNNNNNN) �__doc__�loggingZsalt.utils.compatr Zsalt.utils.versions� getLoggerr r2 Zbotor Zbotocore.exceptionsr �setLevel�CRITICALr � ImportErrorr r r r9 r> rN rO rQ rS rU rW rZ rg rk rm r r r r �<module> sj 4 � � 9 + / � 9 !!
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings