File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/boto_iam.cpython-310.pyc
Back
o ;jN. � @ s� d Z ddlZddlZddlZddlmZ ddlZddl Zddl Zz&ddl Z ddl Z ddl Z ddlZe�d��ej� e�d��ej� dZW n eyQ dZY nw e�e�Zdd � Zd d � Zd�d d �Zd�dd�Zd�dd�Zd�dd�Zd�dd�Z d�dd�Z d�dd�Z d�dd�Z d�d d �Z d�d d �Z!d�d d!�Z" d�d"d#�Z#d�d$d%�Z$d�d&d'�Z% d�d(d)�Z& d�d*d+�Z' d�d,d-�Z( d�d.d/�Z) d�d0d1�Z* d�d2d3�Z+d�d5d6�Z, d�d7d8�Z- d�d9d:�Z.d�d;d<�Z/d�d=d>�Z0 d�d?d@�Z1d�dAdB�Z2d�dCdD�Z3 d�dEdF�Z4d�dGdH�Z5 d�dIdJ�Z6d�dKdL�Z7 d�dMdN�Z8d�dOdP�Z9dQdR� Z: d�dSdT�Z; d�dUdV�Z<d�dWdX�Z= d�dYdZ�Z> d�d[d\�Z? d�d]d^�Z@ d�d_d`�ZAd�dadb�ZBd�dcdd�ZCd�dedf�ZDd�dgdh�ZE d�didj�ZF d�dkdl�ZG d�dmdn�ZH d�dodp�ZI d�dqdr�ZJd�dsdt�ZKd�dudv�ZLd�dwdx�ZMd�dydz�ZNd�d{d|�ZOd�d}d~�ZPd�dd��ZQ d�d�d��ZRd�d�d��ZSd�d�d��ZT d�d�d��ZU d�d�d��ZV d�d�d��ZW d�d�d��ZXd�d�d��ZY d�d�d��ZZ d�d�d��Z[ d�d�d��Z\ d�d�d��Z] d�d�d��Z^ d�d�d��Z_ d�d�d��Z` d�d�d��Za d�d�d��Zb d�d�d��Zc d�d�d��Zd d�d�d��Zed�d�d��Zfd�d�d��Zgd�d�d��Zhd�d�d��Zi d�d�d��ZjdS )�aF Connection module for Amazon IAM .. versionadded:: 2014.7.0 :configuration: This module accepts explicit iam credentials but can also utilize IAM roles assigned to the instance through Instance Profiles. Dynamic credentials are then automatically obtained from AWS API and no further configuration is necessary. More Information available at: .. code-block:: text http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html If IAM roles are not used you need to specify them either in a pillar or in the minion's config file: .. code-block:: yaml iam.keyid: GKTADJGHEIQSXMKKRBJ08H iam.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs iam.region: us-east-1 It's also possible to specify key, keyid and region via a profile, either as a passed in dict, or as a string to pull from pillars or minion config: .. code-block:: yaml myprofile: keyid: GKTADJGHEIQSXMKKRBJ08H key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs region: us-east-1 :depends: boto � N)� OrderedDict�boto�boto3TFc C s t jjjdd�S )z, Only load if boto libraries exist. F)Z check_boto3)�salt�utils�versionsZcheck_boto_reqs� r r �I/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/boto_iam.py� __virtual__C s r c C s t r td tdtd� d S d S )Nzboto.assign_funcs�iam)�pack)�HAS_BOTO� __utils__�__name__Z__salt__)�optsr r r �__init__J s �r c C �: t ||||d�}z|�| � W dS tjjy Y dS w )z� Check to see if an instance profile exists. CLI Example: .. code-block:: bash salt myminion boto_iam.instance_profile_exists myiprofile ��region�key�keyid�profileTF)� _get_connZget_instance_profiler � exception�BotoServerError��namer r r r �connr r r �instance_profile_existsO s �r c C s� t ||||d�}t| ||||�rdS z|�| � t�d| � W dS tjjy@ } zt�|� t� d| � W Y d}~dS d}~ww )z� Create an instance profile. CLI Example: .. code-block:: bash salt myminion boto_iam.create_instance_profile myiprofile r Tz Created %s instance profile.z%Failed to create %s instance profile.NF) r r �create_instance_profile�log�infor r r �debug�error�r r r r r r �er r r r d s � ��r c C � t ||||d�}t| ||||�sdS z|�| � t�d| � W dS tjjy@ } zt�|� t� d| � W Y d}~dS d}~ww )z� Delete an instance profile. CLI Example: .. code-block:: bash salt myminion boto_iam.delete_instance_profile myiprofile r Tz Deleted %s instance profile.z%Failed to delete %s instance profile.NF) r r �delete_instance_profiler r! r r r r" r# r$ r r r r' ~ s � ��r' c C r )z� Check to see if an IAM role exists. CLI Example: .. code-block:: bash salt myminion boto_iam.role_exists myirole r TF)r �get_roler r r r r r r � role_exists� s �r) c C s� t ||||d�}z?|�| �}|sW dS |jjj}tjj�t j � |j ��|d< |d � � D ]\}} |dkrD| D ] } d| v rC| d sC| d= q6q,|W S tjjyg } zt�| � t�d| � W Y d} ~ dS d} ~ ww )z� Get information for a role. CLI Example: .. code-block:: bash salt myminion boto_iam.describe_role myirole r F�assume_role_policy_documentZ StatementZSidz Failed to get %s information.N)r r( Zget_role_responseZget_role_result�roler r �json�loads�urllib�parse�unquoter* �itemsr r r r r" r# ) r r r r r r r! r+ Z policy_key�policy�valr% r r r � describe_role� s, �� ��r4 c C s� |sd}t | ||||�rdS t||||d�}z|�| |� t�d| � W dS tjjyE } zt�|� t� d| � W Y d}~dS d}~ww )z� Create a user. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.create_user myuser �/Tr zCreated IAM user : %s.z Failed to create IAM user %s.NF) �get_userr � create_userr r! r r r r" r# )� user_name�pathr r r r r r% r r r r7 � s ��r7 c C sh t ||||d�}z|�| ||�W S tjjy3 } zt�|� t�d| � t|�W Y d}~S d}~ww )z� Get all access keys from a user. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.get_all_access_keys myuser r z*Failed to get access keys for IAM user %s.N) r �get_all_access_keysr r r r r" r# �str) r8 �marker� max_itemsr r r r r r% r r r r: � s ��r: c C sb t ||||d�}z|�| �W S tjjy0 } zt�|� t�d� t|�W Y d}~S d}~ww )z� Create access key id for a user. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.create_access_key myuser r z Failed to create access key.N) r �create_access_keyr r r r r" r# r; �r8 r r r r r r% r r r r> s ��r> c C sf t ||||d�}z|�| |�W S tjjy2 } zt�|� t�d| � t|�W Y d}~S d}~ww )z� Delete access key id from a user. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.delete_access_key myuser r z"Failed to delete access key id %s.N) r �delete_access_keyr r r r r" r# r; )Z access_key_idr8 r r r r r r% r r r r@ s ��r@ c C s� t | ||||�s dS t||||d�}z|�| � t�d| � W dS tjjyC } zt�|� t� d| � t |�W Y d}~S d}~ww )z� Delete a user. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.delete_user myuser Tr zDeleted IAM user : %s .z Failed to delete IAM user %sN) r6 r � delete_userr r! r r r r" r# r; r? r r r rA . s ��rA c C �l t ||||d�}z |�| �}|sW dS |W S tjjy5 } zt�|� t�d| � W Y d}~dS d}~ww )z� Get user information. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.get_user myuser r Fz Failed to get IAM user %s info.N)r r6 r r r r r" r# )r8 r r r r r r! r% r r r r6 G � ��r6 c C s� |sd}t | ||||d�rdS t||||d�}z|�| |� t�d| � W dS tjjyF } zt�|� t� d| � W Y d}~dS d}~ww )z� Create a group. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.create_group group r5 r TzCreated IAM group : %s.z Failed to create IAM group %s.NF) � get_groupr � create_groupr r! r r r r" r# )� group_namer9 r r r r r r% r r r rE _ s ��rE c C s| t ||||d�}z|j| dd�}|sW dS |d d d W S tjjy= } zt�|� t�d| � W Y d }~dS d }~ww ) z� Get group information. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.get_group mygroup r � �r= F�get_group_response�get_group_result�group� Failed to get IAM group %s info.N)r rD r r r r r" r# )rF r r r r r r! r% r r r rD | s ��rD c C s� t ||||d�}zEd}d}g }|rK|j| |dd�} | s W dS t| d d d �}|r;d | d d v r;| d d d }nd}d}|| d d d 7 }|s|W S tjjym } zt�| � t�d | � W Y d} ~ dS d} ~ ww ) z� Get group information. .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt myminion boto_iam.get_group mygroup r NTi� )r< r= FrI rJ Z is_truncatedr< �usersz'Failed to get members for IAM group %s.) r rD �boolr r r r r" r# ) rF r r r r r r< Z truncatedrM r! r% r r r �get_group_members� s2 �� ��rO c C s� t | ||||�}|st�d| � dS t| |||||d�r dS t||||d�}z|�|| �}|s2W dS |W S tjjyU } zt� | � t�d| |� W Y d} ~ dS d} ~ ww )z� Add user to group. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.add_user_to_group myuser mygroup z Username : %s does not exist.Fr Tz&Failed to add IAM user %s to group %s.N) r6 r r# �user_exists_in_groupr �add_user_to_groupr r r r" ) r8 rF r r r r �userr r! r% r r r rQ � �( � ��rQ c C sD t |||||d�}|r |D ]}| |d kr t�d| |� dS q dS )z� Check if user exists in group. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.user_exists_in_group myuser mygroup )rF r r r r r8 z'IAM user %s is already in IAM group %s.TF)rO r r" )r8 rF r r r r rM �_userr r r rP � s � ��rP c C s� t |||||�}|st�d|� dS t|| ||||d�s dS t||||d�}z|�| |�}|s2W dS |W S tjjyU } zt� | � t�d|| � W Y d} ~ dS d} ~ ww )z� Remove user from group. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.remove_user_from_group mygroup myuser zIAM user %s does not exist.Fr Tz*Failed to remove IAM user %s from group %sN) r6 r r# rP r �remove_user_from_groupr r r r" ) rF r8 r r r r rR r r! r% r r r rU � rS rU c C s� t | ||||d�}|st�d| � dS t||||d�}z't|t�s(tjj� |�}|� | ||�} | r:t� d| � W dS t�d| � W dS t j jyb } zt�| � t�d| � W Y d} ~ dS d} ~ ww ) z� Adds or updates the specified policy document for the specified group. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.put_group_policy mygroup policyname policyrules r zGroup %s does not existFz Created policy for IAM group %s.Tz(Could not create policy for IAM group %sz(Failed to create policy for IAM group %sN)rD r r# r � isinstancer; r r r, �dumps�put_group_policyr! r r r r" ) rF � policy_name� policy_jsonr r r r rK r �createdr% r r r rX s( � ��rX c C � t ||||d�}|s dS t| |||||�}|sdS z|�| |� t�d|| � W dS tjjyJ } zt�|� t� d|| � W Y d}~dS d}~ww )z� Delete a group policy. CLI Example: .. code-block:: bash salt myminion boto_iam.delete_group_policy mygroup mypolicy r FTz0Successfully deleted policy %s for IAM group %s.z,Failed to delete policy %s for IAM group %s.N) r �get_group_policy�delete_group_policyr r! r r r r" r# ) rF rY r r r r r �_policyr% r r r r^ @ s( � ���r^ c C s� t ||||d�}z(|�| |�}t�d|� |sW dS |jjj}tj� |�}t j j j |td�}|W S tjjyP } zt�|� t�d| � W Y d}~dS d}~ww )z� Retrieves the specified policy document for the specified group. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.get_group_policy mygroup policyname r z info for group policy is : %sF��object_pairs_hookrL N)r r] r r" Zget_group_policy_responseZget_group_policy_result�policy_documentr. r/ r0 r r r, r- r r r r r# ) rF rY r r r r r r! r% r r r r] ` s ��r] r5 c C �v t ||||d�}|s dS |j| d�}|jjj}t|jjdd�}|r9|j| |d�}||jjj }t|jjdd�}|s!|S )z� Get and return all IAM group details, starting at the optional path. .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt-call boto_iam.get_all_groups r N�� path_prefixr< �re r< )r �get_all_groupsZlist_groups_responseZlist_groups_result�groups�getattr) re r r r r r Z_groupsrh r< r r r rg ~ s ��rg c C sd t ||||d�}d}g }|dur0|r|nd}|j| |d�}|jj} || j7 }t| dd�}|dus|S )z� Get and return all IAM instance profiles, starting at the optional path. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt-call boto_iam.get_all_instance_profiles r FNrf r< )r �list_instance_profilesZ list_instance_profiles_responseZ list_instance_profiles_result�instance_profilesri ) re r r r r r r< �profiles�p�resr r r �get_all_instance_profiles� s �ro c C s t | ||||�}dd� |D �S )z� List all IAM instance profiles, starting at the optional path. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt-call boto_iam.list_instance_profiles c S s g | ]}|d �qS )�instance_profile_namer )�.0�ir r r � <listcomp>� s z*list_instance_profiles.<locals>.<listcomp>)ro )re r r r r rm r r r rj � s rj c C sj t ||||d�}|s dS z |�| �}|jj}|jW S tjjy4 } z t� |� g W Y d}~S d}~ww )z� Get a list of policy names from a group. CLI Example: .. code-block:: bash salt myminion boto_iam.get_all_group_policies mygroup r FN) r �get_all_group_policiesZ list_group_policies_responseZlist_group_policies_result� policy_namesr r r r r" ) rF r r r r r �response�_listr% r r r rt � s ��rt c C s� t ||||d�}|s dS t| ||||�}|sdS z|�| � t�d| � W dS tjjyF } zt�|� t� d| � W Y d}~dS d}~ww )z� Delete a group policy. CLI Example: .. code-block:: bash salt myminion boto_iam.delete_group mygroup r FTz"Successfully deleted IAM group %s.z Failed to delete IAM group %s.N) r rD � delete_groupr r! r r r r" r# )rF r r r r r �_groupr% r r r rx � s ��rx c C s� t | ||||�}|st�d| � dS t||||d�}z|�| |�}t�d| � |W S tjjyZ } z#t� | � d| v rIt�d| � W Y d} ~ dS t�d| � W Y d} ~ dS d} ~ ww ) a" Creates a login profile for the specified user, give the user the ability to access AWS services and the AWS Management Console. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.create_login_profile user_name password �IAM user %s does not existFr z Created profile for IAM user %s.�Conflictz'Profile already exists for IAM user %s.Nz)Failed to update profile for IAM user %s.) r6 r r# r �create_login_profiler! r r r r" ) r8 �passwordr r r r rR r r! r% r r r r| � s$ ��r| c C s� t | ||||�}|st�d| � dS t||||d�}z|�| �}t�d| � W dS tjjyY } z#t� |� d|v rHt�d| � W Y d}~dS t�d | � W Y d}~dS d}~ww ) z� Deletes a login profile for the specified user. .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt myminion boto_iam.delete_login_profile user_name rz Fr z&Deleted login profile for IAM user %s.T� Not Foundz.Login profile already deleted for IAM user %s.Nz/Failed to delete login profile for IAM user %s.) r6 r r# r �delete_login_profiler! r r r r" ) r8 r r r r rR r r! r% r r r r s$ ��r c C s� t | ||||�}|st�d| � dS t||||d�}z|�| �}|d d d }|W S tjjy\ } z$t�| � d| v rKt� d| � g W Y d } ~ S t�d | � W Y d } ~ dS d } ~ ww ) z� Get all MFA devices associated with an IAM user. .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt myminion boto_iam.get_all_mfa_devices user_name rz Fr Zlist_mfa_devices_responseZlist_mfa_devices_resultZ mfa_devicesr~ zCould not find IAM user %s.Nz.Failed to get all MFA devices for IAM user %s.) r6 r r# r �get_all_mfa_devicesr r r r" r! ) r8 r r r r rR r �resultZdevicesr% r r r r� 4 s( � ��r� c C s� t | ||||�}|st�d| � dS t||||d�}z|�| |� t�d|| � W dS tjjy] } z%t� |� d|v rKt�d|| � W Y d}~dS t�d || � W Y d}~dS d}~ww ) z� Deactivates the specified MFA device and removes it from association with the user. .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt myminion boto_iam.deactivate_mfa_device user_name serial_num rz Fr z*Deactivated MFA device %s for IAM user %s.Tr~ z.MFA device %s not associated with IAM user %s.Nz3Failed to deactivate MFA device %s for IAM user %s.) r6 r r# r �deactivate_mfa_devicer! r r r r" ) r8 �serialr r r r rR r r% r r r r� T s, ����r� c C s� t d d�� }z|j| d� t�d| � W dS tjjyI } z%t�|� dt|�v r8t�d| � W Y d}~dS t� d | � W Y d}~d S d}~ww ) z� Deletes the specified virtual MFA device. CLI Example: .. code-block:: bash salt myminion boto_iam.delete_virtual_mfa_device serial_num zboto3.get_connection_funcr )Z SerialNumberz Deleted virtual MFA device %s.TZ NoSuchEntityz Virtual MFA device %s not found.Nz'Failed to delete virtual MFA device %s.F) r �delete_virtual_mfa_devicer r! �botocore� exceptionsZ ClientErrorr" r; r# )r� r r r r r r% r r r r� y s ��r� c C s~ t | | | | d�} z| �| ||||||||� t�d� W dS tjjy> } zt�|� d}t�|� W Y d}~dS d}~ww )z� Update the password policy for the AWS account. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.update_account_password_policy True r z%The password policy has been updated.Tz$Failed to update the password policyNF) r � update_account_password_policyr r! r r r r" r# )Z allow_users_to_change_passwordZ hard_expiryZmax_password_ageZminimum_password_lengthZpassword_reuse_preventionZ require_lowercase_charactersZrequire_numbersZrequire_symbolsZ require_uppercase_charactersr r r r r r% �msgr r r r� � s, � ��r� c C sh t | |||d�}z |�� }|jjjW S tjjy3 } zt� |� d}t� |� W Y d}~dS d}~ww )z� Get account policy for the AWS account. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.get_account_policy r z%Failed to update the password policy.NF) r Zget_account_password_policyZ$get_account_password_policy_responseZ"get_account_password_policy_resultZpassword_policyr r r r r" r# )r r r r r r! r% r� r r r �get_account_policy� s � ��r� c C s� t ||||d�}t| ||||�rdS |sd}z|j| ||d� t�d| � W dS tjjyG } zt�|� t�d| � W Y d}~dS d}~ww )z� Create an instance role. CLI Example: .. code-block:: bash salt myminion boto_iam.create_role myrole r TN)r* r9 zCreated IAM role %s.z Failed to create IAM role %s.F) r r) � create_roler r! r r r r# ) r rb r9 r r r r r r% r r r r� � s ��r� c C r& )z} Delete an IAM role. CLI Example: .. code-block:: bash salt myminion boto_iam.delete_role myirole r TzDeleted %s IAM role.z Failed to delete %s IAM role.NF) r r) � delete_roler r! r r r r" r# r$ r r r r� � s ��r� c C s� t ||||d�}z|�| �}W n tjjy) } z t�|� W Y d}~dS d}~ww |j}|j}|j }|D ] }|j |kr? dS q5dS )z� Check to see if an instance profile is associated with an IAM role. CLI Example: .. code-block:: bash salt myminion boto_iam.profile_associated myirole myiprofile r NFT) r Z list_instance_profiles_for_roler r r r r" Z(list_instance_profiles_for_role_responseZ&list_instance_profiles_for_role_resultrk rp ) � role_name� profile_namer r r r r rl r% r r r �profile_associated s �� �r� c C s� t ||||d�}t|||||�st�d|� dS t| ||||�s(t�d| � dS t|| ||||�}|r5dS z|�| |� t�d| |� W dS tj j yf } zt� |� t�d| |� W Y d}~dS d}~ww ) z� Associate an instance profile with an IAM role. CLI Example: .. code-block:: bash salt myminion boto_iam.associate_profile_to_role myirole myiprofile r �IAM role %s does not exist.F�#Instance profile %s does not exist.Tz)Added %s instance profile to IAM role %s.z0Failed to add %s instance profile to IAM role %sN) r r) r r# r r� Z add_role_to_instance_profiler! r r r r" � r� r� r r r r r Z associatedr% r r r �associate_profile_to_role0 �8 � � ���r� c C s� t ||||d�}t|||||�st�d|� dS t| ||||�s(t�d| � dS t|| ||||�}|s5dS z|�| |� t�d| |� W dS tj j yf } zt� |� t�d| |� W Y d}~dS d}~ww ) z� Disassociate an instance profile from an IAM role. CLI Example: .. code-block:: bash salt myminion boto_iam.disassociate_profile_from_role myirole myiprofile r r� Fr� Tz-Removed %s instance profile from IAM role %s.z6Failed to remove %s instance profile from IAM role %s.N) r r) r r# r r� Z!remove_role_from_instance_profiler! r r r r" r� r r r � disassociate_profile_from_roleZ r� r� c C sb t ||||d�}z |�| �}|jj}|jW S tjjy0 } z t� |� g W Y d}~S d}~ww )z� Get a list of policy names from a role. CLI Example: .. code-block:: bash salt myminion boto_iam.list_role_policies myirole r N) r �list_role_policies�list_role_policies_response�list_role_policies_resultru r r r r r" ) r� r r r r r rv rw r% r r r r� � s ��r� c C sd t ||||d�}z |�| |�}|jj}tj�|�}tjj j |t d�}|W S t j jy1 i Y S w )z� Get a role policy. CLI Example: .. code-block:: bash salt myminion boto_iam.get_role_policy myirole mypolicy r r` )r �get_role_policy�get_role_policy_responserb r. r/ r0 r r r, r- r r r r )r� rY r r r r r r_ r r r r� � s �r� c C s� t ||||d�}t| |||||�}d} |r ||krdS d} t|t�r+tjjj|td�}z!tjj� |�}|� | ||� | dkrAd} nd} t � | || � W dS t jjyn } zt �| � t �d| || � W Y d } ~ d S d } ~ ww ) a Create or modify a role policy. CLI Example: .. code-block:: bash salt myminion boto_iam.create_role_policy myirole mypolicy '{"MyPolicy": "Statement": [{"Action": ["sqs:*"], "Effect": "Allow", "Resource": ["arn:aws:sqs:*:*:*"], "Sid": "MyPolicySqs1"}]}' r �createT�modifyr` z,Successfully added policy %s to IAM role %s.z0Successfully modified policy %s for IAM role %s.z'Failed to %s policy %s for IAM role %s.NF)r r� rV r; r r r, r- r rW Zput_role_policyr r! r r r r# ) r� rY r2 r r r r r r_ �moder� r% r r r �create_role_policy� s2 ���r� c C s� t ||||d�}t| |||||�}|sdS z|�| |� t�d|| � W dS tjjyF } zt�|� t� d|| � W Y d}~dS d}~ww )z� Delete a role policy. CLI Example: .. code-block:: bash salt myminion boto_iam.delete_role_policy myirole mypolicy r Tz/Successfully deleted policy %s for IAM role %s.z+Failed to delete policy %s for IAM role %s.NF) r r� �delete_role_policyr r! r r r r" r# ) r� rY r r r r r r_ r% r r r r� � s � ��r� c C s� t ||||d�}t|t�rtjjj|td�}ztjj�|�}|� | |� t � d| � W dS t j jyL } zt �|� t �d| � W Y d}~dS d}~ww )z� Update an assume role policy for a role. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.update_assume_role_policy myrole '{"Statement":"..."}' r r` z8Successfully updated assume role policy for IAM role %s.Tz4Failed to update assume role policy for IAM role %s.NF)r rV r; r r r, r- r rW �update_assume_role_policyr r! r r r r# ) r� rb r r r r r Z_policy_documentr% r r r r� � s � ��r� c C s� t | |||d�}t|d�rtjj�|�� �}nt|d�r&tjj�|�� �}ni S |�� D ]?\}}|D ]8}t |d t �rKt |d �dkrK|d d |d< t |d d t �rjt |d d �dkrj|d d d |d d< q2q,d |d < |S ) z� Build a default assume role policy. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.build_policy r � build_policy� _build_policy�ActionrG r Z PrincipalZServicez 2008-10-17�Version) r �hasattrr r r, r- r� r� r1 rV �list�len)r r r r r r2 Z policy_valZ statementr r r r� s$ ��� r� c C s� d}|t vrdt| |||d�}z|�� }|d d d d }|�d�d }W n: tjjy_ tj�d d d �} tj� d d d �} tj j | | d�} z| d d }W n t y\ t �d� Y nw Y nw |t |< t | S )z� Get a the AWS account id associated with the used credentials. CLI Example: .. code-block:: bash salt myminion boto_iam.get_account_id zboto_iam.account_idr Zget_user_responseZget_user_resultrR �arn�:� ZBotoZmetadata_service_timeoutg �?Z metadata_service_num_attemptsrG )�timeoutZ num_retries�documentZ accountIdzKFailed to get account id from instance_identity in boto_iam.get_account_id.)� __context__r r6 �splitr r r ZconfigZgetfloatZgetintr Zget_instance_identity�KeyErrorr r# ) r r r r Z cache_keyr �retr� � account_idr� �attempts�identityr r r �get_account_id; s0 � ����r� c C rc )z� Get and return all IAM role details, starting at the optional path. .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt-call boto_iam.get_all_roles r Nrd r< rf )r Z list_rolesZlist_roles_responseZlist_roles_result�rolesri ) re r r r r r Z_rolesr� r< r r r � get_all_roles` � �r� c C rc )z� Get and return all IAM user details, starting at the optional path. .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt-call boto_iam.get_all_users r Nrd r< rf )r � get_all_usersZlist_users_responseZlist_users_resultrM ri ) re r r r r r Z_usersrM r< r r r r� y r� r� c C sz t ||||d�}z|�| ||�}|sW dS |jj} | jW S tjjy< } zt� | � t� d| � W Y d} ~ dS d} ~ ww )z� Get all user policies. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.get_all_user_policies myuser r Fz#Failed to get policies for user %s.N) r �get_all_user_policies�list_user_policies_response�list_user_policies_resultru r r r r r" r# ) r8 r< r= r r r r r r! rw r% r r r r� � s ��r� c C s� t ||||d�}z*|�| |�}t�d| ||� |s W dS |jjj}tj� |�}t j j j |td�}|W S tjjyS } zt�|� t�d|| � W Y d}~dS d}~ww )z� Retrieves the specified policy document for the specified user. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.get_user_policy myuser mypolicyname r z#Info for IAM user %s policy %s: %s.Fr` z(Failed to get policy %s for IAM user %s.N)r �get_user_policyr r" �get_user_policy_response�get_user_policy_resultrb r. r/ r0 r r r, r- r r r r r# ) r8 rY r r r r r r! r% r r r r� � s ��r� c C s� t | ||||�}|st�d| � dS t||||d�}z)t|t�s'tjj� |�}|� | ||�} | r:t� d|| � W dS t�d|| � W dS t j jyd } zt�| � t�d|| � W Y d} ~ dS d} ~ ww ) z� Adds or updates the specified policy document for the specified user. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.put_user_policy myuser policyname policyrules rz Fr z"Created policy %s for IAM user %s.Tz+Could not create policy %s for IAM user %s.z+Failed to create policy %s for IAM user %s.N)r6 r r# r rV r; r r r, rW �put_user_policyr! r r r r" ) r8 rY rZ r r r r rR r r[ r% r r r r� � s( � ��r� c C r\ )z� Delete a user policy. CLI Example: .. code-block:: bash salt myminion boto_iam.delete_user_policy myuser mypolicy r FTz/Successfully deleted policy %s for IAM user %s.z+Failed to delete policy %s for IAM user %s.N) r r� �delete_user_policyr r! r r r r" r# ) r8 rY r r r r r r_ r% r r r r� � s$ � ��r� c C s� t | ||||�} | r dS t||||d�} z| �| |||�} t�d| � | W S tjjyE } zt�| � t� d| � W Y d} ~ dS d} ~ ww )a� Upload a certificate to Amazon. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.upload_server_cert mycert_name crt priv_key :param cert_name: The name for the server certificate. Do not include the path in this value. :param cert_body: The contents of the public key certificate in PEM-encoded format. :param private_key: The contents of the private key in PEM-encoded format. :param cert_chain: The contents of the certificate chain. This is typically a concatenation of the PEM-encoded public key certificates of the chain. :param path: The path for the server certificate. :param region: The name of the region to connect to. :param key: The key to be used in order to connect :param keyid: The keyid to be used in order to connect :param profile: The profile that contains a dict of region, key, keyid :return: True / False Tr zCreated certificate %s.z*Failed to failed to create certificate %s.NF) �get_server_certificater �upload_server_certr r! r r r r" r# ) � cert_nameZ cert_bodyZ private_keyZ cert_chainr9 r r r r �existsr r! r% r r r r� s " ��r� c C rB )z� Returns certificate information from Amazon .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.get_server_certificate mycert_name r Fz)Failed to get certificate %s information.N)r r� r r r r r" r# )r� r r r r r r! r% r r r r� @ rC r� c C s^ t ||||d�}z|�| �W S tjjy. } zt�|� t�d| � W Y d}~dS d}~ww )z� Deletes a certificate from Amazon. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt myminion boto_iam.delete_server_cert mycert_name r z Failed to delete certificate %s.NF)r �delete_server_certr r r r r" r# )r� r r r r r r% r r r r� X s ��r� c C s� t ||||d�}|s dS t� }t| ||||�}|D ]P}|j} |j| dd�} | jjj} i } | D ]} |�| | �} t j j � t j�| jjj��} | | | < q.g }|�d| i� |�d| i� |�d|ji� d|i|d | < qtd |d d d �S )a Get all IAM user details. Produces results that can be used to create an sls file. .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt-call boto_iam.export_users --out=txt | sed "s/local: //" > iam_users.sls r N�d rH r �policiesr9 zboto_iam.user_presentz manage user �yaml.safe_dumpF� �Zdefault_flow_style�indent)r r r� r8 r� r� r� ru r� r r r, r- r. r/ r0 r� r� rb �appendr9 r )re r r r r r �resultsrM rR r � _policiesr� rY r_ Zuser_slsr r r � export_usersm s2 � �� r� c C s t ||||d�}|s dS t� }t| ||||�}|D ]a}|j} |j| dd�} | jjj} i } | D ]} |�| | �} t j j � t j�| jjj��} | | | < q.g }|�d| i� |�d| i� |�dt j j � t j�|j��i� |�d|ji� d |i|d | < qtd |d d d�S )z� Get all IAM role details. Produces results that can be used to create an sls file. CLI Example: .. code-block:: bash salt-call boto_iam.export_roles --out=txt | sed "s/local: //" > iam_roles.sls r Nr� rH r r� rb r9 zboto_iam_role.presentz manage role r� Fr� r� )r r r� r� r� r� r� ru r� r r r, r- r. r/ r0 r� Zget_role_policy_resultrb r� r* r9 r )re r r r r r r� r� r+ r r� r� rY r_ Zrole_slsr r r � export_roles� s> � �� ���r� c C s. | � d�r| S t||||d�}d|� d| � �S )Nz arn:aws:iam:r z arn:aws:iam::z:policy/)� startswithr� )r r r r r r� r r r �_get_policy_arn� s r� c C sH t ||||d�}z|�t| ||||d�� W dS tjjy# Y dS w ��� Check to see if policy exists. CLI Example: .. code-block:: bash salt myminion boto_iam.instance_profile_exists myiprofile r TF)r � get_policyr� r r r )rY r r r r r r r r � policy_exists� s ���r� c C sX t ||||d�}z|�t| ||||d��}|�di ��di �W S tjjy+ Y dS w )r� r Zget_policy_responseZget_policy_resultN)r r� r� �getr r r )rY r r r r r r� r r r r� � s ���r� c C s� t ||||d�}t|t�stjj�|�}i } dD ]} t� | dur(t� | | | < qt| ||||�r3dS z|j | |fi | �� t � d| � W dS t j jyf } zt �| � t �d| � W Y d} ~ dS d} ~ ww )a Create a policy. CLI Example: .. code-block:: bash salt myminios boto_iam.create_policy mypolicy '{"Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Action": ["s3:Get*", "s3:List*"], "Resource": ["arn:aws:s3:::my-bucket/shared/*"]},]}' r )r9 � descriptionNTzCreated IAM policy %s.z Failed to create IAM policy %s.F)r rV r; r r r, rW �localsr� � create_policyr r! r r r r" r# ) rY rb r9 r� r r r r r �params�argr% r r r r� � s( �� ��r� c C s� t ||||d�}t| ||||�}t|||||�sdS z|�|� t�d| � W dS tjjyR } z t d |�}t� |� t� d| |� d�� W Y d}~dS d}~ww ) z} Delete a policy. CLI Example: .. code-block:: bash salt myminion boto_iam.delete_policy mypolicy r TzDeleted %s policy.�boto.get_errorz Failed to delete %s policy: %s.�messageNF) r r� r� � delete_policyr r! r r r r r" r# r� ) rY r r r r r � policy_arnr% �awsr r r r� ! s � ��r� c C s� t | |||d�}z g }td |j�D ]}|�|�di ��di ��d�� q|W S tjjyI } zt� |� d}t� |� g W Y d}~S d}~ww )zr List policies. CLI Example: .. code-block:: bash salt myminion boto_iam.list_policies r �boto.paged_callZlist_policies_responseZlist_policies_resultr� z Failed to list policy versions.N) r r � list_policiesr� r� r r r r r" r# ) r r r r r r� r� r% r� r r r r� ; s" � ��r� c C sL t ||||d�}t| ||||�}z |�||� W dS tjjy% Y dS w r� )r r� �get_policy_versionr r r )rY � version_idr r r r r r� r r r �policy_version_existsW s �r� c C s� t ||||d�}z+|�t| ||||d�|�}|�di ��di ��di �}tj�|�d��|d< d|iW S tjj y? Y dS w )r� r Zget_policy_version_responseZget_policy_version_result�policy_versionr� N) r r� r� r� r. r/ r0 r r r ) rY r� r r r r r r� �retvalr r r r� m s" �� � �r� c C s t ||||d�}t|t�stjj�|�}i }dD ]} t� | dur(t� | || < qt| ||||�} z(|j | |fi |��} | � di �� di �� di �� d�} t � d| | � d | d �W S t jjy� } zt �| � t �d | | � d td | �d�W Y d} ~ S d} ~ ww )a# Create a policy version. CLI Example: .. code-block:: bash salt myminios boto_iam.create_policy_version mypolicy '{"Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Action": ["s3:Get*", "s3:List*"], "Resource": ["arn:aws:s3:::my-bucket/shared/*"]},]}' r )�set_as_defaultNZ create_policy_version_responseZ create_policy_version_resultr� r� z!Created IAM policy %s version %s.T)r[ r� z*Failed to create IAM policy %s version %s.Fr� )r[ r# )r rV r; r r r, rW r� r� �create_policy_versionr� r r! r r r r" r# r )rY rb r� r r r r r r� r� r� r� Zvidr% r r r r� � s0 � � ��r� c C s� t ||||d�}t| ||||�}t||||||�sdS z|�||� t�d| |� W dS tjjyV } z t d |�} t� | � t� d| || � d�� W Y d}~dS d}~ww ) z� Delete a policy version. CLI Example: .. code-block:: bash salt myminion boto_iam.delete_policy_version mypolicy v1 r Tz!Deleted IAM policy %s version %s.r� z-Failed to delete IAM policy %s version %s: %sr� NF) r r� r� �delete_policy_versionr r! r r r r r" r# r� � rY r� r r r r r r� r% r� r r r r� � s( � ���r� c C s� t ||||d�}t| ||||�}z|�|�}|�di ��di ��d�W S tjjyD } zt�|� t� d| � g W Y d}~S d}~ww )z� List versions of a policy. CLI Example: .. code-block:: bash salt myminion boto_iam.list_policy_versions mypolicy r Z list_policy_versions_responseZlist_policy_versions_resultr z*Failed to list versions for IAM policy %s.N) r r� �list_policy_versionsr� r r r r r" r# ) rY r r r r r r� r� r% r r r r� � s � ��r� c C s� t ||||d�}t| ||||�}z|�||� t�d| |� W dS tjjyK } z td |�} t� | � t� d| || � d�� W Y d}~dS d}~ww ) z� Set the default version of a policy. CLI Example: .. code-block:: bash salt myminion boto_iam.set_default_policy_version mypolicy v1 r z Set %s policy to version %s.r� z)Failed to set %s policy to version %s: %sr� NFT) r r� �set_default_policy_versionr r! r r r r r" r# r� r� r r r r� � s$ � ���r� c C � t ||||d�}t| ||||�}z|�||� t�d| |� W dS tjjyA } zt�|� t� d| |� W Y d}~dS d}~ww )z� Attach a managed policy to a user. CLI Example: .. code-block:: bash salt myminion boto_iam.attach_user_policy mypolicy myuser r z"Attached policy %s to IAM user %s.z*Failed to attach %s policy to IAM user %s.NFT) r r� �attach_user_policyr r! r r r r" r# � rY r8 r r r r r r� r% r r r r� � � ��r� c C r� )z� Detach a managed policy to a user. CLI Example: .. code-block:: bash salt myminion boto_iam.detach_user_policy mypolicy myuser r z$Detached %s policy from IAM user %s.z,Failed to detach %s policy from IAM user %s.NFT) r r� �detach_user_policyr r! r r r r" r# r� r r r r� + � � ���r� c C r� )z� Attach a managed policy to a group. CLI Example: .. code-block:: bash salt myminion boto_iam.attach_group_policy mypolicy mygroup r z#Attached policy %s to IAM group %s.z+Failed to attach policy %s to IAM group %s.NFT) r r� �attach_group_policyr r! r r r r" r# � rY rF r r r r r r� r% r r r r� F r� r� c C r� )z� Detach a managed policy to a group. CLI Example: .. code-block:: bash salt myminion boto_iam.detach_group_policy mypolicy mygroup r z%Detached policy %s from IAM group %s.z-Failed to detach policy %s from IAM group %s.NFT) r r� �detach_group_policyr r! r r r r" r# r� r r r r� a r� r� c C r� )z� Attach a managed policy to a role. CLI Example: .. code-block:: bash salt myminion boto_iam.attach_role_policy mypolicy myrole r z"Attached policy %s to IAM role %s.z*Failed to attach policy %s to IAM role %s.NFT) r r� �attach_role_policyr r! r r r r" r# � rY r� r r r r r r� r% r r r r� | r� r� c C r� )z� Detach a managed policy to a role. CLI Example: .. code-block:: bash salt myminion boto_iam.detach_role_policy mypolicy myrole r z$Detached policy %s from IAM role %s.z,Failed to detach policy %s from IAM role %s.NFT) r r� �detach_role_policyr r! r r r r" r# r� r r r r� � r� r� c C s* t ||||d�}d}i } dD ]} t� | dur t� | | | < qt| ||||�} |r�z2g g g d�} td |jfd| i| ��D ]} | �� D ]\}}|�| �di ��d i ��|�� qCq=| W S tj j y� } z)|j d kr~t � d � t�d � |d 8 }W Y d}~q't �d| |j� i W Y d}~S d}~ww i S )z� List entities that a policy is attached to. CLI Example: .. code-block:: bash salt myminion boto_iam.list_entities_for_policy mypolicy r � )re � entity_filterN)Z policy_groupsZ policy_usersZ policy_rolesr� r� Z!list_entities_for_policy_responseZ list_entities_for_policy_resultZ Throttlingz0Throttled by AWS API, will retry in 5 seconds...� rG z-Failed to list entities for IAM policy %s: %s)r r� r� r �list_entities_for_policyr1 �extendr� r r r Z error_coder r" �time�sleepr# r� )rY re r� r r r r r Zretriesr� r� r� Zallretr� �k�vr% r r r r� � sT ���� � �� ��� r� c C � t ||||d�}d| i}|dur||d< g } z"td |jd|dd�D ]} | �| �d i ��d i ��d g �� q"| W S tjjyY } zt� | � t� d | � g W Y d} ~ S d} ~ ww ) z� List entities attached to the given user. CLI Example: .. code-block:: bash salt myminion boto_iam.list_entities_for_policy mypolicy r ZUserNameN� PathPrefixr� ZListAttachedUserPolicies�AttachedPolicies�Z list_markerZ$list_attached_user_policies_responseZ"list_attached_user_policies_result�attached_policiesz1Failed to list attached policies for IAM user %s.� r r Z get_responser� r� r r r r r" r# ) r8 re r� r r r r r r� r� r� r% r r r �list_attached_user_policies� �0 � � ��r c C r ) z� List entities attached to the given group. CLI Example: .. code-block:: bash salt myminion boto_iam.list_entities_for_policy mypolicy r Z GroupNameNr r� ZListAttachedGroupPoliciesr r Z%list_attached_group_policies_responseZ#list_attached_group_policies_resultr z2Failed to list attached policies for IAM group %s.r ) rF re r� r r r r r r� r� r� r% r r r � list_attached_group_policies r r c C r ) z� List entities attached to the given role. CLI Example: .. code-block:: bash salt myminion boto_iam.list_entities_for_policy mypolicy r ZRoleNameNr r� ZListAttachedRolePoliciesr r Z$list_attached_role_policies_responseZ"list_attached_role_policies_resultr z1Failed to list attached policies for IAM role %s.r ) r� re r� r r r r r r� r� r� r% r r r �list_attached_role_policiesE r r c C s| t ||||d�}z|�|| � t�d| � W dS tjjy= } ztd |�}t�|� t� d| � W Y d}~dS d}~ww )z� Create SAML provider CLI Example: .. code-block:: bash salt myminion boto_iam.create_saml_provider my_saml_provider_name saml_metadata_document r z&Successfully created %s SAML provider.Tr� z"Failed to create SAML provider %s.NF) r �create_saml_providerr r! r r r r r" r# ) r �saml_metadata_documentr r r r r r% r� r r r r s s ��r c C s� t ||||d�}z |�� }|jjjD ]}|d �d| �r$|d W S qW dS tjjyM } zt d |�} t � | � t � d| � W Y d}~dS d}~ww )z� Get SAML provider CLI Example: .. code-block:: bash salt myminion boto_iam.get_saml_provider_arn my_saml_provider_name r r� z:saml-provider/Fr� z&Failed to get ARN of SAML provider %s.N) r �list_saml_providers� list_saml_providers_response�list_saml_providers_result�saml_provider_list�endswithr r r r r r" r# ) r r r r r r rv Z saml_providerr% r� r r r �get_saml_provider_arn� s" �� ��r c C s� t ||||d�}z"t| ||||d�}|s t�d| � W dS |�|� t�d| � W dS tjjyP } ztd |�}t� |� t� d| � W Y d}~dS d}~ww ) z� Delete SAML provider CLI Example: .. code-block:: bash salt myminion boto_iam.delete_saml_provider my_saml_provider_name r �SAML provider %s not found.Tz&Successfully deleted SAML provider %s.r� z"Failed to delete SAML provider %s.NF) r r r r! �delete_saml_providerr r r r r" r# ) r r r r r r �saml_provider_arnr% r� r r r r � s$ � ��r c C s� t | |||d�}z!g }|�� }|d d d D ]}|�|d �dd�d � q|W S tjjyL } zt�t d |�� t� d � W Y d }~d S d }~ww ) z~ List SAML providers. CLI Example: .. code-block:: bash salt myminion boto_iam.list_saml_providers r r r r r� r5 rG r� z%Failed to get list of SAML providers.NF) r r r� �rsplitr r r r r" r r# ) r r r r r Z providersr! r� r% r r r r � s � ��r c C sv t ||||d�}z|�| �}|d d d W S tjjy: } zt�td |�� t�d| � W Y d}~dS d}~ww ) z� Get SAML provider document. CLI Example: .. code-block:: bash salt myminion boto_iam.get_saml_provider arn r Zget_saml_provider_responseZget_saml_provider_resultr r� z(Failed to get SAML provider document %s.NF) r �get_saml_providerr r r r r" r r# )r r r r r r Zproviderr% r r r r � s � ��r c C s� t ||||d�}z t| ||||d�}|s t�d| � W dS |�| |�r&W dS W dS tjjyL } zt�t d |�� t� d| � W Y d}~dS d}~ww )z� Update SAML provider. CLI Example: .. code-block:: bash salt myminion boto_iam.update_saml_provider my_saml_provider_name saml_metadata_document r r FTr� z"Failed to update SAML provider %s.N) r r r r! �update_saml_providerr r r r" r r# ) r r r r r r r r r% r r r r � s" � ��r )NNNN)NNNNN)NNNNNN)r5 NNNN) NNNNNNNNNNNNN)k�__doc__�loggingr� � urllib.parser. � collectionsr Zsalt.utils.compatr Zsalt.utils.jsonZsalt.utils.versionsr r Zboto.iamr� � getLogger�setLevel�CRITICALr � ImportErrorr r r r r r r' r) r4 r7 r: r> r@ rA r6 rE rD rO rQ rP rU rX r^ r] rg ro rj rt rx r| r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r r r r r r r �<module> s� ( � " � � � & �# � �& �( �! � � � � ! ! � % � 0 � " �+ � * � �( � � % % �" � �" �" � 0 ) . � ' � �# �, � ! � � � � � � � �; �0 �0 �/ � �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings