File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/states/__pycache__/boto_iam.cpython-310.pyc
Back
o ;jg � @ s d Z ddlZddlZddlm mZ ddlmZ ddl Z ddl m m Z ddlZ ddlZ ddlZ e�e�ZdZdd� Z d<dd �Z d=d d �Z d>d d�Z d>dd�Z d?dd�Z d@dd�Z d@dd�Z d>dd�Z d>dd�Z d>dd �Z d>d d �Z dAd d!�Z!d"d#� Z" dBd$d%�Z# dBd&d'�Z$d>d(d)�Z%d>d*d+�Z& dCd,d-�Z'd>d.d/�Z( dDd0d1�Z) dDd2d3�Z*d>d4d5�Z+ d>d6d7�Z,d>d8d9�Z-d:d;� Z.dS )Ea& Manage IAM objects ================== .. versionadded:: 2015.8.0 This module uses ``boto``, which can be installed via package, or pip. This module accepts explicit IAM credentials but can also utilize IAM roles assigned to the instance through Instance Profiles. Dynamic credentials are then automatically obtained from AWS API and no further configuration is necessary. More information available `here <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_. It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile, either passed in as a dict, or as a string to pull from pillars or minion config: .. code-block:: yaml delete-user: boto_iam.user_absent: - name: myuser - delete_keys: true .. code-block:: yaml delete-keys: boto_iam.keys_absent: - access_keys: - 'AKIAJHTMIQ2ASDFLASDF' - 'PQIAJHTMIQ2ASRTLASFR' - user_name: myuser .. code-block:: yaml create-user: boto_iam.user_present: - name: myuser - policies: mypolicy: | { "Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Action": "*", "Resource": "*"}] } - password: NewPassword$$1 - region: eu-west-1 - keyid: 'AKIAJHTMIQ2ASDFLASDF' - key: 'fdkjsafkljsASSADFalkfjasdf' .. code-block:: yaml create-group: boto_iam.group_present: - name: mygroup - users: - myuser - myuser1 - policies: mypolicy: | { "Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Action": "*", "Resource": "*"}] } - region: eu-west-1 - keyid: 'AKIAJHTMIQ2ASDFLASDF' - key: 'safsdfsal;fdkjsafkljsASSADFalkfj' .. code-block:: yaml change-policy: boto_iam.account_policy: - change_password: True - region: eu-west-1 - keyid: 'AKIAJHTMIQ2ASDFLASDF' - key: 'safsdfsal;fdkjsafkljsASSADFalkfj' .. code-block:: yaml create server certificate: boto_iam.server_cert_present: - name: mycert - public_key: salt://base/mycert.crt - private_key: salt://base/mycert.key - cert_chain: salt://base/mycert_chain.crt - region: eu-west-1 - keyid: 'AKIAJHTMIQ2ASDFLASDF' - key: 'fdkjsafkljsASSADFalkfjasdf' .. code-block:: yaml delete server certificate: boto_iam.server_cert_absent: - name: mycert .. code-block:: yaml create keys for user: boto_iam.keys_present: - name: myusername - number: 2 - save_dir: /root - region: eu-west-1 - keyid: 'AKIAJHTMIQ2ASDFLASDF' - key: 'fdkjsafkljsASSADFalkfjasdf' .. code-block:: yaml create policy: boto_iam.policy_present: - name: myname - policy_document: '{"MyPolicy": "Statement": [{"Action": ["sqs:*"], "Effect": "Allow", "Resource": ["arn:aws:sqs:*:*:*"], "Sid": "MyPolicySqs1"}]}' - region: eu-west-1 - keyid: 'AKIAJHTMIQ2ASDFLASDF' - key: 'fdkjsafkljsASSADFalkfjasdf' .. code-block:: yaml add-saml-provider: boto_iam.saml_provider_present: - name: my_saml_provider - saml_metadata_document: salt://base/files/provider.xml - keyid: 'AKIAJHTMIQ2ASDFLASDF' - key: 'safsdfsal;fdkjsafkljsASSADFalkfj' � N)� OrderedDictZboto_iamc C s dt v rdS ddt� d�fS )zF Only load if elementtree xml library and boto are available. �boto_iam.get_userTFz Cannot load z# state: boto_iam module unavailable)�__salt__�__virtualname__� r r �H/opt/saltstack/salt/lib/python3.10/site-packages/salt/states/boto_iam.py� __virtual__� s �r Tc C s* | ddi d�}t d | ||||�s d|d< d| � d�|d< |S |r�t d | ||||d �} t�d | | � t| t�r�| d d d } | D ]?} td r]d�|d d�| d �g�|d< d|d< qBt|| d | ||||�r�d�|d d�| d �g�|d< d|d | d < qB|�rt d | ||||d �} | �r| D ]o} | d } td r�d�|d d�| | �g�|d< d|d< n t d | | ||||d�}|r�d�|d d �| | �g�|d< td r�d�|d d �| �g�|d< d|d< q�t d | ||||d �}|�rd�|d d | � d!�g�|d< q�|�r=td �r!d�|d d"| � d#�g�|d< d|d< n t d$ | ||||�}|�r=d�|d d"| � d%�g�|d< td �rVd�|d d"| � d&�g�|d< d|d< n)t | ||||�}d�|d |d g�|d< |d �s|d |d< |d d'u �r|S td �r�d�|d d"| � d(�g�|d< d|d< n)t | ||||�}d�|d |d g�|d< |d �s�|d |d< |d d'u �r�|S td �r�d�|d d"| � d)�g�|d< d|d< |S t d* | ||||�}|du �rd�|d d"| � d!�g�|d< d|d< | |d d< |S d"| � d+|� �|d< d'|d< |S ),a� .. versionadded:: 2015.8.0 Ensure the IAM user is absent. User cannot be deleted if it has keys. name (string) The name of the new user. delete_keys (bool) Delete all keys from user. delete_mfa_devices (bool) Delete all mfa devices from user. .. versionadded:: 2016.3.0 delete_profile (bool) Delete profile from user. .. versionadded:: 2016.3.0 region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (dict) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. T� ��name�result�comment�changesr r � IAM User � does not exist.r � boto_iam.get_all_access_keys�� user_name�region�key�keyid�profilezKeys for user %s are %s.�list_access_keys_response�list_access_keys_result�access_key_metadata�test� z Key {} is set to be deleted.� access_key_idNzKey {} has been deleted.�deletedr z boto_iam.get_all_mfa_devicesZ serial_numberz3IAM user {} MFA device {} is set to be deactivated.z boto_iam.deactivate_mfa_device)r �serialr r r r z)IAM user {} MFA device {} is deactivated.z+Virtual MFA device {} is set to be deleted.z"boto_iam.delete_virtual_mfa_device)r r r r r zVirtual MFA device � is deleted.� IAM user z$ login profile is set to be deleted.z boto_iam.delete_login_profilez login profile is deleted.�) managed policies are set to be detached.F�' inline policies are set to be deleted.� is set to be deleted.zboto_iam.delete_user� could not be deleted. ) r �log�debug� isinstance�dict�__opts__�join�format� _delete_key�_user_policies_detached�_user_policies_deleted)r Z delete_keysZdelete_mfa_devicesZdelete_profiler r r r �ret�keys�kZdevices�dr Zmfa_deactivatedZ mfa_deletedZprofile_deleted�_retr r r r � user_absent� s" - � � �� � ��� ���� ������� � ��� �� � �� �� �� � r5 �{2} {0} {3} {1} c C s� | ddi d�}t d | ||||�s d|d< d| � d�|d < |S t|t�s.d |d < d|d< |S tj�|�sBd |� d�|d < d|d< |S t d | ||||d �} t| t�rnt�d| � t | �\} } d| � d| � �|d < d|d< |S | d d d } t�d| � t | �|kr�d| � �|d < d|d< |S t d r�d| � d�|d < d|d< |S i } t |t | � �D ]Y} t d | ||||�}t|t�r�t |�\} } d| � d| � �|d < d|d< | S t�d |� d }d }i | t| �< || | d d | t| � d!< || | d d" | t| � d#< q�z\t jj�|� d$| � �d%��0}| �� D ]#\}}|d! }|d# }|�t jj�|�||d&|� �d'|� ���� �qW d � n 1 �sGw Y d(|� d$| � d�|d < d|d< | |d)< |W S t�y| d*|� d$| � d�|d < d|d< | Y S w )+a� .. versionadded:: 2015.8.0 Ensure the IAM access keys are present. name (string) The name of the new user. number (int) Number of keys that user should have. save_dir (string) The directory that the key/keys will be saved. Keys are saved to a file named according to the username privided. region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (dict) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. save_format (dict) Save format is repeated for each key. Default format is "{2}\n{0}\n{3}\n{1}\n", where {0} and {1} are placeholders for new key_id and key respectively, whereas {2} and {3} are "key_id-{number}" and 'key-{number}' strings kept for compatibility. Tr r r Fr r r r z&The number of keys must be an integer.zThe directory r r zkeys are : false %szCould not get keys. � r r r zKeys are : %s.z"The number of keys exist for user r z$Access key is set to be created for �.Nzboto_iam.create_access_keyzCould not create keys. zCreated is : %sZcreate_access_key_responseZcreate_access_key_resultZ access_keyr �key_idZsecret_access_key� secret_key�/�azkey_id-zkey-z Keys have been written to file r zCould not write to file )r r( �int�os�path�isdir�strr& r' � _get_error�lenr* �range�salt�utils�filesZfopen�items�writeZ stringutilsZto_strr, �OSError)r �numberZsave_dirr r r r Z save_formatr0 r1 �error�messageZnew_keys�i�created�responser Z_wrfZkey_numr9 r: r r r � keys_presentt s� , � � � �� ���� ��rQ c C s` | ddi d�}t d |||||�s d|d< d|� d�|d < |S | D ] }t|||||||�}q!|S ) a� .. versionadded:: 2015.8.0 Ensure the IAM user access_key_id is absent. access_key_id (list) A list of access key ids user_name (string) The username of the user region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (dict) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r r Fr r r r )r r- )Z access_keysr r r r r r0 r2 r r r � keys_absent� s rR c C s\ t d |||||d�}t�d||� t|t�r.t�d|� d�| d d|� d�g�| d< | S |d d d }|D ]s}t�d |d |� t|d �t|�kr�td r`d�|�| d< d | d< | S t d ||||||�} | r�d�| d d|� d�g�| d< d| d |< | S d�| d d|� d�g�| d< | S d�| d d|� d�g�| d< | S d S )Nr r zKeys for user %s are : %s.z+Keys %s are a string. Something went wrong.r r zKey z could not be deleted.r r r z#Key is: %s and is compared with: %sr r z#Access key {} is set to be deleted.r zboto_iam.delete_access_keyz has been deleted.r r r )r r& r' r( rA r+ r* r, ) r0 r r r r r r r1 r2 r r r r r- sP � � � �� �� � �r- c C s | ddi d�} |s i }|sg }|sg }i } |D ] } t d | �} | �| � q| �|� t d | |||| �}|s�td rHd| � d�| d < d | d < | S t d | ||||| �}|r�|| d d< d�| d d| � d�g�| d < |rvt| | ||||| �} t| | |||| �}t�| d |d �| d < d�| d |d g�| d < n=d�| d d| � d�g�| d < |r�t| | ||||| �} t| | |||| �}t�| d |d �| d < d�| d |d g�| d < t| ||||| �}t�| d |d �| d < d�| d |d g�| d < |d �s|d | d < | S | S )a .. versionadded:: 2015.8.0 Ensure the IAM user is present name (string) The name of the new user. policies (dict) A dict of IAM group policy documents. policies_from_pillars (list) A list of pillars that contain role policy dicts. Policies in the pillars will be merged in the order defined in the list and key conflicts will be handled by later defined keys overriding earlier defined keys. The policies defined here will be merged with the policies defined in the policies argument. If keys conflict, the keys in the policies argument will override the keys defined in policies_from_pillars. managed_policies (list) A list of managed policy names or ARNs that should be attached to this user. password (string) The password for the new user. Must comply with account policy. path (string) The path of the user. Default is '/'. .. versionadded:: 2015.8.2 region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (dict) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r � pillar.getr r r! � is set to be created.r Nr zboto_iam.create_userr �userr �User � has been created.� is present.)r �updater* r+ �_case_password�_user_policies_present� dictupdate�_user_policies_attached)r �policies�policies_from_pillars�managed_policies�passwordr? r r r r r0 � _policies�policy�_policy�existsrO r4 r r r � user_presentA sZ : � �� rf c C s" ddi d�}i }g }|� � D ]/\} } t| t�r!tjjj| td�} n| } td | | ||||�} | | kr=t � d| | � | || < qtd | ||||d�} | D ] } | |vrV|� | � qK|s\|�rt |�}|� |� td rzd �d �|�| �|d < d |d < |S d| i|d d< |� � D ]5\} } td | | | ||||�}|s�td | ||||d�} d| i|d d< d|d < d�| | �|d < | S q�|D ]2} td | | ||||�}|s�td | ||||d�} d| i|d d< d|d < d�| | �|d < | S q�td | ||||d�} d| i|d d< d�d �| �| �|d < |S )NTr �r r r ��object_pairs_hookzboto_iam.get_user_policy�Policy mismatch: %s %s� boto_iam.get_all_user_policiesr r �&{} policies to be modified on user {}.�, r r r^ r �oldzboto_iam.put_user_policy�newFz#Failed to add policy {} for user {}�boto_iam.delete_user_policy�"Failed to add policy {} to user {}� {} policies modified on user {}.�rH r( rA rE rF �json�loadsr r r& r' �append�list�extendr* r, r+ )r r^ r r r r r0 �policies_to_create�policies_to_delete� policy_namerc � dict_policyrd �_list� _to_modify� policy_set� policy_unsetr r r r[ � s� �� � � �� ��� � ��� � �r[ c C sr ddi d�}g }g }|p g D ]+} t d | d||||d�} d} | �dg �D ] } | | �d �kr1d} nq$| s9|�| � qt d | ||||d �} d d � | D �}| D ]}|�d�|vrf|�d�|vrf|�|�d�� qN|sl|�r7t|�}|�|� td r�d�d�|�| �|d< d |d< |S d|i|d d< |D ]:}t d || ||||d �}|s�t d | ||||d �} dd � | D �}d|i|d d< d|d< d�|| �|d< | S q�|D ];}t d || ||||d �}|�s t d | ||||d �} d d � | D �}d|i|d d< d|d< d �|| �|d< | S q�t d | ||||d �} d d � | D �}t� |� d|i|d d< d �d�|�| �|d< |S )!NTr rg �!boto_iam.list_entities_for_policyZUser�Z entity_filterr r r r FZ policy_usersr �$boto_iam.list_attached_user_policies�r r r r c S � g | ]}|� d ��qS �� policy_arn��get��.0�xr r r � <listcomp> � z+_user_policies_attached.<locals>.<listcomp>r{ r� r rl rm r r r` r rn zboto_iam.attach_user_policyc S r� r� r� r� r r r r� # r� ro rq �boto_iam.detach_user_policyc S r� r� r� r� r r r r� 2 r� z'Failed to remove policy {} from user {}c S r� r� r� r� r r r r� < r� rr � r r� rv rw rx r* r, r+ r& r' )r r` r r r r r0 �policies_to_attach�policies_to_detachrc �entities�foundZuserdictr} � oldpolicies� policy_datar~ r{ r � newpoliciesr� r r r r] � s� �� � �� � � ��� � ��� � �r] c C sN ddi d�}t d | ||||d�}dd� |D �}|s$d| � d �|d < |S td r9d �d �|�| �|d < d |d< |S d|i|d d< |D ]<}t d || ||||d�} | st d | ||||d�}dd� |D �} d| i|d d< d|d< d|� d| � �|d < | S qCt d | ||||d�}dd� |D �} d| i|d d< d�d �|�| �|d < |S )NTr rg r� r c S r� r� r� r� r r r r� J r� z+_user_policies_detached.<locals>.<listcomp>z No attached policies in user r8 r r z({} policies to be detached from user {}.rm r r` r rn r� r� c S r� r� r� r� r r r r� ] r� ro FzFailed to detach z from user c S r� r� r� r� r r r r� e r� z"{} policies detached from user {}.�r r* r, r+ � r r r r r r0 r} r� r� r� r� r r r r. E sL � � � �� � �r. c C � ddi d�}t d | ||||d�}|s d| � d�|d< |S td r2d �d �|�| �|d< d |d < |S d |i|d d< |D ]3}t d | |||||d�}|sot d | ||||d�} d | i|d d< d|d < d�|| �|d< | S q<t d | ||||d�} d | i|d d< d�d �|�| �|d< |S )NTr rg rk r zNo inline policies in user r8 r r z'{} policies to be deleted from user {}.rm r �inline_policiesr rn rp r� ro Fz Failed to detach {} from user {}z!{} policies deleted from user {}.r� � r r r r r r0 r� r{ Zpolicy_deletedr� r r r r/ m �J � � � ��� � �r/ c C s� t d rd|� d�| d< d | d< | S td ||||||�}t�d|� |rQd|v r:d �| d d |� d �g�| d< | S d �| d d |� d �g�| d< d| d d< | S d| d< d �| d d�|�g�| d< | S )Nr zLogin policy for z is set to be changed.r r z boto_iam.create_login_profilezLogin is : %s.�Conflictr zLogin profile for user � exists.z Password has been added to User r8 ZREDACTEDr ra FzIPassword for user {} could not be set. Please check your password policy.)r* r r& r' r+ r, )r0 r ra r r r r Zloginr r r rZ � s6 � ��� ���rZ c C sv | ddi d�}t d | ||||�s d|d< d| � d�|d< |S td r7d �|d d | � d �g�|d< d |d< n't| ||||�}d �|d |d g�|d< |d s^|d |d< |d du r^|S td rvd �|d d | � d�g�|d< d |d< n't| ||||�}d �|d |d g�|d< |d s�|d |d< |d du r�|S d �|d d | � d�g�|d< t d | ||||d�}t|g | |||||�}t�|d |d �|d< d �|d |d g�|d< |d s�|d |d< |S td �rd �|d d | � d�g�|d< d |d< |S t d | ||||�}|du �r+d �|d d | � d�g�|d< d|d< | |d d< |S d | � d|� �|d< d|d< |S )a� .. versionadded:: 2015.8.0 Ensure the IAM group is absent. name (string) The name of the group. region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (dict) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r �boto_iam.get_groupr z IAM Group r r r r � IAM group r" NFr# z users are set to be removed.�boto_iam.get_group_members�� group_namer r r r r r$ zboto_iam.delete_groupr r r% )r r* r+ �_group_policies_detached�_group_policies_deleted� _case_groupr\ rY ) r r r r r r0 r4 �existing_usersr r r r � group_absent� st �� �� � � � r� r; c C s | ddi d�} |s i }|sg }|sg }i } |D ] } t d | �}| �|� q| �|� t d | |||| d�}|s{td rId| � d �| d < d | d < | S t d | ||||| d�}|sed| � d�| d < d| d < | S || d d< d�| d d| � d�g�| d < nd�| d d| � d�g�| d < t| | |||| | �}t�| d |d �| d< d�| d |d g�| d < |d s�|d | d < | S t| ||||| | �}t�| d |d �| d< d�| d |d g�| d < |d s�|d | d < | S |d u�r t�d|� t d | |||| d�}t | || ||||| �} | S )a .. versionadded:: 2015.8.0 Ensure the IAM group is present name (string) The name of the new group. path (string) The path for the group, defaults to '/' policies (dict) A dict of IAM group policy documents. policies_from_pillars (list) A list of pillars that contain role policy dicts. Policies in the pillars will be merged in the order defined in the list and key conflicts will be handled by later defined keys overriding earlier defined keys. The policies defined here will be merged with the policies defined in the policies argument. If keys conflict, the keys in the policies argument will override the keys defined in policies_from_pillars. managed_policies (list) A list of policy names or ARNs that should be attached to this group. users (list) A list of users to be added to the group. region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (dict) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. delete_policies (boolean) Delete or detach existing policies that are not in the given list of policies. Default value is ``True``. If ``False`` is specified, existing policies will not be deleted or detached allowing manual modifications on the IAM group to be persistent. Tr r rS r� r� r r� rT r Nr zboto_iam.create_group)r� r? r r r r zFailed to create IAM group r8 Fr �groupr zGroup rW rX zUsers are : %s.r� ) r rY r* r+ �_group_policies_presentr\ �_group_policies_attachedr& r' r� )r r^ r_ r` �usersr? r r r r �delete_policiesr0 rb rc rd re rO r4 r� r r r � group_present st > �� � � �r� c C sz g }|D ] } |� | d � qt�d|� |D ]^} t�d| � | |v r:t�d� d�| d d| � d|� d �g�| d< qt�d | � td rQd �| |�| d< d | d < qtd | |||||� d�| d d| � d|� d �g�| d< || d | < q|D ]C} | |vr�td r�d�| d d�| |�g�| d< d | d < qwtd || ||||d� d�| d d�| |�g�| d< d|� d �| d | < qw| S )Nr zupstream users are %sz users are %sz user existsr r rV z is already a member of group r8 zuser is set to be added %sr z'User {} is set to be added to group {}.r zboto_iam.add_user_to_groupz has been added to group r z+User {} is set to be removed from group {}.z boto_iam.remove_user_from_group)r� r r r r r z'User {} has been removed from group {}.zRemoved from group )rv r& r' r+ r* r, r ) r0 r� r� r� r r r r Z_usersrU r r r r� � st �� � ������ �����r� c C s ddi d�}i }g } |� � D ]/\} } t| t�r!tjjj| td�} n| } td | | ||||�} | | kr=t � d| | � | || < qtd | ||||�}|D ] } |rW| |vrW| � | � qJ|s]| �r t | �}|� |� td r{d �d �|�| �|d < d |d < |S d |i|d d< |� � D ]4\} } td | | | ||||�}|s�td | ||||�}d |i|d d< d|d < d�| | �|d < | S q�| D ]1} td | | ||||�}|s�td | ||||�}d |i|d d< d|d < d�| | �|d < | S q�td | ||||�}d |i|d d< d�d �|�| �|d < |S )NTr rg rh zboto_iam.get_group_policyrj � boto_iam.get_all_group_policiesr �'{} policies to be modified on group {}.rm r r r^ r rn zboto_iam.put_group_policyro F�#Failed to add policy {} to group {}� boto_iam.delete_group_policy�!{} policies modified on group {}.rs )r r^ r r r r r� r0 ry rz r{ rc r| rd r} r~ r r� r r r r� � s� �� � � �� ��� � ��� � �r� c C sv ddi d�}g }g } |p g D ]+} t d | d||||d�} d} | �dg �D ] } | | �d �kr1d} nq$| s9|�| � qt d | ||||d �}d d � |D �}|D ]}|rh|�d�|vrh|�d�|vrh| �|�d�� qN|sn| �r9t| �}|�|� td r�d�d�|�| �|d< d |d< |S d|i|d d< |D ]:}t d || ||||d �}|s�t d | ||||d �}dd � |D �}d|i|d d< d|d< d�|| �|d< | S q�| D ];}t d || ||||d �}|�st d | ||||d �}d d � |D �}d|i|d d< d|d< d �|| �|d< | S q�t d | ||||d �}d d � |D �}t� |� d|i|d d< d �d�|�| �|d< |S )!NTr rg r� ZGroupr� FZ policy_groupsr� �%boto_iam.list_attached_group_policiesr� c S r� r� r� r� r r r r� 8 r� z,_group_policies_attached.<locals>.<listcomp>r{ r� r r� rm r r r` r rn z boto_iam.attach_group_policyc S r� r� r� r� r r r r� R r� ro r� � boto_iam.detach_group_policyc S r� r� r� r� r r r r� a r� z(Failed to remove policy {} from group {}c S r� r� r� r� r r r r� k r� r� r� )r r` r r r r Zdetach_policiesr0 r� r� rc r� r� � groupdictr} r� r� r~ r{ r r� r� r r r r� s� �� � ��� � � ��� � ��� � �r� c C sJ ddi d�}t d | ||||d�}dd� |D �}|s$d| � d �|d < |S td r9d �d �|�| �|d < d |d< |S d|i|d d< |D ]:}t d || ||||d�} | s}t d | ||||d�}dd� |D �} d| i|d d< d|d< d�|| �|d < | S qCt d | ||||d�}dd� |D �} d| i|d d< d�d �| �| �|d < |S )NTr rg r� r� c S r� r� r� r� r r r r� y r� z,_group_policies_detached.<locals>.<listcomp>z No attached policies in group r8 r r z){} policies to be detached from group {}.rm r r` r rn r� r� c S r� r� r� r� r r r r� � r� ro F�!Failed to detach {} from group {}c S r� r� r� r� r r r r� � r� z#{} policies detached from group {}.r� r� r r r r� t sP � � � ��� � �r� c C r� )NTr rg r� r� z No inline policies in group r8 r r z({} policies to be deleted from group {}.rm r r� r rn r� r� ro Fr� z"{} policies deleted from group {}.r� r� r r r r� � r� r� c C s* t � }dddi d�}td | | | | �}|s d|d< d|d < |S |�� D ]7\} }| d v r,q#|d urZt|| �t|��� krZd �|d d |� d|| � d�g�|d< t|��� |d | < q#|d sed|d< |S td rsd|d< d |d < |S td ||||||||| | | | | � r�|S d|d< i |d< d|d < |S )a� Change account policy. .. versionadded:: 2015.8.0 name (string) The name of the account policy allow_users_to_change_password (bool) Allows all IAM users in your account to use the AWS Management Console to change their own passwords. hard_expiry (bool) Prevents IAM users from setting a new password after their password has expired. max_password_age (int) The number of days that an IAM user password is valid. minimum_password_length (int) The minimum number of characters allowed in an IAM user password. password_reuse_prevention (int) Specifies the number of previous passwords that IAM users are prevented from reusing. require_lowercase_characters (bool) Specifies whether IAM user passwords must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). require_numbers (bool) Specifies whether IAM user passwords must contain at least one numeric character (0 to 9). require_symbols (bool) Specifies whether IAM user passwords must contain at least one of the following non-alphanumeric characters: ! @ # $ % ^ & * ( ) _ + - = [ ] { } | ' require_uppercase_characters (bool) Specifies whether IAM user passwords must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (dict) A dict with region, key and keyid, or a pillar key (string) zAccount PolicyTr r zboto_iam.get_account_policyz Account policy is not Enabled.r Fr )r r r r r Nr z Policy value z has been set to r8 r z Account policy is not changed.r z$Account policy is set to be changed.z'boto_iam.update_account_password_policy)�localsr rH rA �lowerr+ r* )r Z allow_users_to_change_passwordZ hard_expiryZmax_password_ageZminimum_password_lengthZpassword_reuse_preventionZ require_lowercase_charactersZrequire_numbersZrequire_symbolsZ require_uppercase_charactersr r r r Zconfigr0 �info�valuer r r �account_policy� sZ F ����r� c C s� | ddi d�}t d | ||||�}|s d| � d�|d< |S td r/d | � d �|d< d |d < |S t d | ||||�}|sId|d < d| � d�|d< |S d| � d�|d< ||d< |S )a� Deletes a server certificate. .. versionadded:: 2015.8.0 name (string) The name for the server certificate. Do not include the path in this value. region (string) The name of the region to connect to. key (string) The key to be used in order to connect keyid (string) The keyid to be used in order to connect profile (string) The profile that contains a dict of region, key, keyid Tr r � boto_iam.get_server_certificate� Certificate r r r �Server certificate r$ Nr zboto_iam.delete_server_certF� failed to be deleted.� was deleted.r )r r* )r r r r r r0 re r r r r �server_cert_absent: s& �r� c C s� | ddi d�} t d | ||||�} t�dt� � | r$d| � d�| d< | S d |v rVzt d |�}W n% tyU } zt�| � d |� d �| d< d | d< | W Y d} ~ S d} ~ ww d |v r�zt d |�}W n% ty� } zt�| � d |� d �| d< d | d< | W Y d} ~ S d} ~ ww |dur�d |v r�zt d |�}W n% ty� } zt�| � d |� d �| d< d | d< | W Y d} ~ S d} ~ ww td r�d| � d�| d< d| d< | S t d | ||||||||� } | d ur�d| � d�| d< | | d< | S d | d< d| � d�| d< | S )ao Crete server certificate. .. versionadded:: 2015.8.0 name (string) The name for the server certificate. Do not include the path in this value. public_key (string) The contents of the public key certificate in PEM-encoded format. private_key (string) The contents of the private key in PEM-encoded format. cert_chain (string) The contents of the certificate chain. This is typically a concatenation of the PEM-encoded public key certificates of the chain. path (string) The path for the server certificate. region (string) The name of the region to connect to. key (string) The key to be used in order to connect keyid (string) The keyid to be used in order to connect profile (string) The profile that contains a dict of region, key, keyid Tr r r� zVariables are : %s.r� r� r �salt://�cp.get_file_strzFile z not found.Fr Nr r� rT zboto_iam.upload_server_cert� was created.r � failed to be created.)r r& r' r� rJ r* ) r Z public_keyZ private_keyZ cert_chainr? r r r r r0 re �erO r r r �server_cert_presentd sh , � �� �� ���r� c C s> | ddi d�}t d | ||||�} | sYtd r%d| � d�|d< d |d < |S t d | |||||||�} | rK| |d d < d�|d d| � d�g�|d< |S d|d < d|d< i |d < |S | �d i �} d�|d d| � d�g�|d< t d | | �d�||||��di �} t| d t�r�tjj� | d �} n| d } t|t�r�tjj� |�}tjj � | |�} t | ��r td r�d| � d�|d< d |d < |S d�|d dg�|d< tjj� |�}t d | |d||||d�} | �d �s�d|d < d �| d d �|d< i |d < |S t d | | d ||||d!� ||d �d"i �d< | d |d �d#i �d< |S )$a| .. versionadded:: 2015.8.0 Ensure the IAM managed policy is present name (string) The name of the new policy. policy_document (dict) The document of the new policy path (string) The path in which the policy will be created. Default is '/'. description (string) Description region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (dict) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r zboto_iam.get_policyr z IAM policy rT r Nr zboto_iam.create_policyr rc r �Policy rW FzFailed to update policy.rX zboto_iam.get_policy_versionZdefault_version_idZpolicy_versionZdocumentz set to be modified.zPolicy to be modifiedz boto_iam.create_policy_version)r{ �policy_documentZset_as_defaultr r r r rO z Failed to update policy: {}.rL rM � boto_iam.delete_policy_version)r{ � version_idr r r r ro rn )r r* r+ r� r( rA rE rF rt ru �dataZ compare_dicts�bool�dumpsr, � setdefault)r r� r? � descriptionr r r r r0 rc rO Z _describeZ describeDict�rr r r �policy_present� s� )� �=� �� � �� r� c C sB | ddi d�}t d | ||||d�}|s d| � d�|d< |S td r0d| � d �|d< d |d < |S t d | ||||d�}|rl|D ],}|�dd�dv rJq?t d | |�d�||||d�}|skd|d < d| � d�|d< | S q?t d | ||||d�}|s�d|d < d| � d�|d< |S d| i|d d< dd i|d d< d| � d�|d< |S ) a� .. versionadded:: 2015.8.0 Ensure the IAM managed policy with the specified name is absent name (string) The name of the new policy. region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (dict) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r zboto_iam.policy_existsr� r� r r r � is set to be removed.Nr z boto_iam.list_policy_versionsZis_default_versionF)�trueTr� r� )r� r r r r zFailed to delete policy r8 zboto_iam.delete_policyrc r rn ro z deleted.)r r* r� ) r r r r r r0 r� Zversions�versionr r r � policy_absent5 sT � ��� �r� c C s2 | ddi d�}d|v r>z t d |�}t�|� W n% ty= } zt�|� d| � d�|d< d |d < |W Y d }~S d }~ww t d ||||d �D ]}|| krZd| � d�|d< | S qHtd rmd| � d�|d< d |d < |S t d | |||||d �} | r�d| � d�|d< | |d d< |S d |d < d| � d�|d< |S )a .. versionadded:: 2016.11.0 Ensure the SAML provider with the specified name is present. name (string) The name of the SAML provider. saml_metadata_document (string) The xml document of the SAML provider. region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (dict) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r r� r� zSAML document file z! not found or could not be loadedr Fr N� boto_iam.list_saml_providersr� �SAML provider rX r z is set to be create.z boto_iam.create_saml_providerr� r ro r� )r �ET� fromstringrJ r& r' r* ) r Zsaml_metadata_documentr r r r r0 r� �providerrO r r r �saml_provider_presentz sN ��� ��� r� c C s� | ddi d�}t d ||||d�}t|�dkr!d| � d�|d < |S td r3d| � d �|d < d |d < |S t d | ||||d�}|durRd| � d�|d < | |d d< |S d|d < d| � d�|d < |S )a .. versionadded:: 2016.11.0 Ensure the SAML provider with the specified name is absent. name (string) The name of the SAML provider. saml_metadata_document (string) The xml document of the SAML provider. region (string) Region to connect to. key (string) Secret key to be used. keyid (string) Access key to be used. profile (dict) A dict with region, key and keyid, or a pillar key (string) that contains a dict with region, key and keyid. Tr r r� r� r r� z is absent.r r r� Nr z boto_iam.delete_saml_providerFr� r rn r� )r rC r* )r r r r r r0 r� r r r r �saml_provider_absent� s* � � r� c C sF d� | �d�dd � �} t�| �} | d d j}| d d j}||fS )Nr7 � r � )r+ �splitr� r� �text)rL �coderM r r r rB � s rB )TTTNNNN)NNNNr6 )NNNN) NNNNNNNNN)NNNNN) NNNNr; NNNNT)NNNNNT)NNNNNNNNNNNNNN)NNNNNN)/�__doc__�loggingr> Zxml.etree.ElementTreeZetreeZ ElementTreer� � collectionsr Zsalt.utils.datarE Zsalt.utils.dictupdaterF r\ Zsalt.utils.filesZsalt.utils.jsonZsalt.utils.stringutils� getLogger�__name__r& r r r5 rQ rR r- rf r[ r] r. r/ rZ r� r� r� r� r� r� r� r� r� r� r� r� r� r� rB r r r r �<module> s� � W �| �' �. �j �H � T (( � !Z �|E �O � [ *( � u. �_ � uF � B 0
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings