File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/states/__pycache__/boto_cloudtrail.cpython-310.pyc
Back
o ;jo4 � @ sj d Z ddlZddlZddlZddlZe�e�Zdd� Z d dd�Z d d d �Z dS ) a� Manage CloudTrail Objects ========================= .. versionadded:: 2016.3.0 Create and destroy CloudTrail objects. Be aware that this interacts with Amazon's services, and so may incur charges. :depends: - boto - boto3 The dependencies listed above can be installed via package or pip. This module accepts explicit vpc credentials but can also utilize IAM roles assigned to the instance through Instance Profiles. Dynamic credentials are then automatically obtained from AWS API and no further configuration is necessary. More information available `here <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_. If IAM roles are not used you need to specify them either in a pillar file or in the minion's config file: .. code-block:: yaml vpc.keyid: GKTADJGHEIQSXMKKRBJ08H vpc.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile, either passed in as a dict, or as a string to pull from pillars or minion config: .. code-block:: yaml myprofile: keyid: GKTADJGHEIQSXMKKRBJ08H key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs region: us-east-1 .. code-block:: yaml Ensure trail exists: boto_cloudtrail.present: - Name: mytrail - S3BucketName: mybucket - S3KeyPrefix: prefix - region: us-east-1 - keyid: GKTADJGHEIQSXMKKRBJ08H - key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs � Nc C s dt v rdS dS )z) Only load if boto is available. �boto_cloudtrail.existsZboto_cloudtrail)Fz*boto_cloudtrail module could not be loaded)�__salt__� r r �O/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/boto_cloudtrail.py� __virtual__? s r TFc C s� |ddi d�}t d || |||d�}d|v r'd|d< d �|d d �|d < |S |�d �s�td r>d|� d�|d < d|d< |S t d ||||||||| | | |||d�}|�d�shd|d< d �|d d �|d < |S t d || |||d�}ddi|d d< ||d d< d|� d�|d < | r�t d || |||d�}d|v r�d|d< d �|d d �|d < i |d< |S d|d d d d < n d|d d d d < t| �r�t d d8|| |||d�| ��}|�d �s�d|d< d �|d d �|d < i |d< |S | |d d d d < |S tj�|d d|� d �g�|d < i |d< t d || |||d�}d|v �r6d|d< d!�|d d �|d < i |d< |S |�d�}t d" || |||d�}|�di ��d#d�|d < d}d$d%d&d'd(d)d*d+d,d d-� }|�� D ]*\}}|| t � | k�r�d}t � | |d � di �|< || |d � di �|< �qet d. || |||d�}|�d/i �|d < t j j �|d | �}t|��r�d}| |d � di �d < |d |d � di �d < |�r�td �r�d|� d0�}||d < d|d< |S tj�|d d1g�|d < t d2 ||||||||| | | |||d�}|�d3��s d|d< d!�|d d �|d < i |d< |S | �rGt d || |||d�}|�d4��sFd|d< d!�|d d �|d < i |d< |S n&t d5 || |||d�}|�d6��smd|d< d!�|d d �|d < i |d< |S t|��r�i }i }|�� D ]'\} } | �dd�dk�r�| | || < �qz| �dd�dk�r�|d | || < �qzt|��r�t d d8|| |||d�|��}t|��r�t d7 d8|| |||d�|��}|S )9ax Ensure trail exists. name The name of the state definition Name Name of the trail. S3BucketName Specifies the name of the Amazon S3 bucket designated for publishing log files. S3KeyPrefix Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. SnsTopicName Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters. IncludeGlobalServiceEvents Specifies whether the trail is publishing events from global services such as IAM to the log files. EnableLogFileValidation Specifies whether log file integrity validation is enabled. The default is false. CloudWatchLogsLogGroupArn Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn. CloudWatchLogsRoleArn Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group. KmsKeyId Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be a an alias name prefixed by "alias/", a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier. LoggingEnabled Whether logging should be enabled for the trail Tags A dictionary of tags that should be set on the trail region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. T� ��name�result�comment�changesr )�Name�region�key�keyid�profile�errorFr zFailed to create trail: {}.�messager �exists�test� CloudTrail z is set to be created.Nzboto_cloudtrail.create)r � S3BucketName� S3KeyPrefix� SnsTopicName�IncludeGlobalServiceEvents�IsMultiRegionTrail�EnableLogFileValidation�CloudWatchLogsLogGroupArn�CloudWatchLogsRoleArn�KmsKeyIdr r r r �createdzboto_cloudtrail.describe�r r r r �trailr �old�newz created.z boto_cloudtrail.start_logging�LoggingEnabledzboto_cloudtrail.add_tagsZtagged�Tagsz is present.zFailed to update trail: {}.zboto_cloudtrail.statusZ IsLoggingr r r r r ZLogFileValidationEnabledr r r ) r r r r r r r r r r% zboto_cloudtrail.list_tags�tagsz set to be modified.zCloudTrail to be modifiedzboto_cloudtrail.update�updated�startedz boto_cloudtrail.stop_logging�stoppedzboto_cloudtrail.remove_tagsr )r �format�get�__opts__�bool�os�linesep�join�items�locals� setdefault�salt�utils�dataZ compare_dicts) r r r r r r r r r r r r% r& r r r r �ret�rZ _describeZ need_updateZ bucket_varsZinvarZoutvarZ tagchange�msgZaddsZremoves�k�diffr r r �presentH s~ R � � � � � �� � � � �� � � � � �� � � � �� �� r= c C s |ddi d�}t d |||||d�}d|v r'd|d< d �|d d �|d < |S |r7|d s7d |� d�|d < |S td rId |� d�|d < d|d< |S t d |||||d�}|d sid|d< d �|d d �|d < |S d|i|d d< ddi|d d< d |� d�|d < |S )a� Ensure trail with passed properties is absent. name The name of the state definition. Name Name of the trail. region Region to connect to. key Secret key to be used. keyid Access key to be used. profile A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r r r! r Fr zFailed to delete trail: {}.r r r r z does not exist.r z is set to be removed.Nzboto_cloudtrail.deleteZdeletedr" r r# r$ z deleted.)r r+ r- )r r r r r r r8 r9 r r r �absenth s4 � �r> )NNTNFNNNTNNNNN)NNNN) �__doc__�loggingr/ Zos.pathZsalt.utils.datar5 � getLogger�__name__�logr r= r> r r r r �<module> s2 5 � "
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings