FileMgr

✏️ /lib/python3.9/site-packages/ansible_collections/amazon/aws/plugins/modules/iam_policy_info.py

✕ Tutup

# This file is part of Ansible
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)

from __future__ import (absolute_import, division, print_function)
__metaclass__ = type

DOCUMENTATION = '''
---
module: iam_policy_info
version_added: 5.0.0
short_description: Retrieve inline IAM policies for users, groups, and roles
description:
  - Supports fetching of inline IAM policies for IAM users, groups and roles.
  - This module was originally added to C(community.aws) in release 1.0.0.
options:
  iam_type:
    description:
      - Type of IAM resource you wish to retrieve inline policies for.
    required: true
    choices: [ "user", "group", "role"]
    type: str
  iam_name:
    description:
      - Name of IAM resource you wish to retrieve inline policies for. In other words, the user name, group name or role name.
    required: true
    type: str
  policy_name:
    description:
      - Name of a specific IAM inline policy you with to retrieve.
    required: false
    type: str
author:
  - Mark Chappell (@tremble)
extends_documentation_fragment:
  - amazon.aws.aws
  - amazon.aws.ec2
  - amazon.aws.boto3

'''

EXAMPLES = '''
- name: Describe all inline IAM policies on an IAM User
  amazon.aws.iam_policy_info:
    iam_type: user
    iam_name: example_user

- name: Describe a specific inline policy on an IAM Role
  amazon.aws.iam_policy_info:
    iam_type: role
    iam_name: example_role
    policy_name: example_policy

'''
RETURN = '''
policies:
    description: A list containing the matching IAM inline policy names and their data
    returned: success
    type: complex
    contains:
        policy_name:
            description: The Name of the inline policy
            returned: success
            type: str
        policy_document:
            description: The JSON document representing the inline IAM policy
            returned: success
            type: list
policy_names:
    description: A list of matching names of the IAM inline policies on the queried object
    returned: success
    type: list
all_policy_names:
    description: A list of names of all of the IAM inline policies on the queried object
    returned: success
    type: list
'''

try:
    import botocore
except ImportError:
    pass

from ansible_collections.amazon.aws.plugins.module_utils.core import AnsibleAWSModule
from ansible_collections.amazon.aws.plugins.module_utils.core import is_boto3_error_code
from ansible_collections.amazon.aws.plugins.module_utils.ec2 import AWSRetry

class Policy:

def __init__(self, client, name, policy_name):
        self.client = client
        self.name = name
        self.policy_name = policy_name
        self.changed = False

@staticmethod
    def _iam_type():
        return ''

def _list(self, name):
        return {}

def list(self):
        return self._list(self.name).get('PolicyNames', [])

def _get(self, name, policy_name):
        return '{}'

def get(self, policy_name):
        return self._get(self.name, policy_name)['PolicyDocument']

def get_all(self):
        policies = list()
        for policy in self.list():
            policies.append({"policy_name": policy, "policy_document": self.get(policy)})
        return policies

def run(self):
        policy_list = self.list()
        ret_val = {
            'changed': False,
            self._iam_type() + '_name': self.name,
            'all_policy_names': policy_list
        }
        if self.policy_name is None:
            ret_val.update(policies=self.get_all())
            ret_val.update(policy_names=policy_list)
        elif self.policy_name in policy_list:
            ret_val.update(policies=[{
                "policy_name": self.policy_name,
                "policy_document": self.get(self.policy_name)}])
            ret_val.update(policy_names=[self.policy_name])
        return ret_val

class UserPolicy(Policy):

@staticmethod
    def _iam_type():
        return 'user'

def _list(self, name):
        return self.client.list_user_policies(aws_retry=True, UserName=name)

def _get(self, name, policy_name):
        return self.client.get_user_policy(aws_retry=True, UserName=name, PolicyName=policy_name)

class RolePolicy(Policy):

@staticmethod
    def _iam_type():
        return 'role'

def _list(self, name):
        return self.client.list_role_policies(aws_retry=True, RoleName=name)

def _get(self, name, policy_name):
        return self.client.get_role_policy(aws_retry=True, RoleName=name, PolicyName=policy_name)

class GroupPolicy(Policy):

@staticmethod
    def _iam_type():
        return 'group'

def _list(self, name):
        return self.client.list_group_policies(aws_retry=True, GroupName=name)

def _get(self, name, policy_name):
        return self.client.get_group_policy(aws_retry=True, GroupName=name, PolicyName=policy_name)

def main():
    argument_spec = dict(
        iam_type=dict(required=True, choices=['user', 'group', 'role']),
        iam_name=dict(required=True),
        policy_name=dict(default=None, required=False),
    )

module = AnsibleAWSModule(argument_spec=argument_spec, supports_check_mode=True)

args = dict(
        client=module.client('iam', retry_decorator=AWSRetry.jittered_backoff()),
        name=module.params.get('iam_name'),
        policy_name=module.params.get('policy_name'),
    )
    iam_type = module.params.get('iam_type')

try:
        if iam_type == 'user':
            policy = UserPolicy(**args)
        elif iam_type == 'role':
            policy = RolePolicy(**args)
        elif iam_type == 'group':
            policy = GroupPolicy(**args)

module.exit_json(**(policy.run()))
    except is_boto3_error_code('NoSuchEntity') as e:
        module.exit_json(changed=False, msg=e.response['Error']['Message'])
    except (botocore.exceptions.ClientError, botocore.exceptions.BotoCoreError) as e:  # pylint: disable=duplicate-except
        module.fail_json_aws(e)

if __name__ == '__main__':
    main()

Batal

⬅ plugins 85 item

Nama	Tipe	Ukuran	Diubah	Perm	Aksi
📁 __pycache__	dir	—	16/09/24 06:47	0755	📂
🐍 autoscaling_group.py	py	82.2 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 autoscaling_group_info.py	py	16.5 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 aws_az_info.py	py	6.1 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 aws_caller_info.py	py	3.7 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 cloudformation.py	py	35.3 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 cloudformation_info.py	py	19.8 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 cloudtrail.py	py	24 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 cloudtrail_info.py	py	9.7 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 cloudwatch_metric_alarm.py	py	18.9 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 cloudwatch_metric_alarm_info.py	py	11.3 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 cloudwatchevent_rule.py	py	18.5 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 cloudwatchlogs_log_group.py	py	13.6 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 cloudwatchlogs_log_group_info.py	py	4.7 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 cloudwatchlogs_log_group_metric_filter.py	py	7.1 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_ami.py	py	31.7 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_ami_info.py	py	9.3 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_eip.py	py	24.5 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_eip_info.py	py	4.4 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_eni.py	py	33.2 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_eni_info.py	py	9.9 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_instance.py	py	87.5 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_instance_info.py	py	22.7 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_key.py	py	12.7 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_metadata_facts.py	py	29.5 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_security_group.py	py	62.2 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_security_group_info.py	py	10.7 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_snapshot.py	py	13.3 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_snapshot_info.py	py	10.7 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_spot_instance.py	py	24.2 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_spot_instance_info.py	py	10.6 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_tag.py	py	5 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_tag_info.py	py	1.8 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vol.py	py	31 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vol_info.py	py	6.9 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_dhcp_option.py	py	21.9 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_dhcp_option_info.py	py	7.2 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_endpoint.py	py	18.5 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_endpoint_info.py	py	9.7 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_endpoint_service_info.py	py	5.6 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_igw.py	py	8.7 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_igw_info.py	py	6 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_nat_gateway.py	py	31.1 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_nat_gateway_info.py	py	7.3 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_net.py	py	26.4 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_net_info.py	py	10.2 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_route_table.py	py	33.9 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_route_table_info.py	py	8.9 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_subnet.py	py	21.6 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 ec2_vpc_subnet_info.py	py	7.1 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 elb_application_lb.py	py	32.3 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 elb_application_lb_info.py	py	13.2 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 elb_classic_lb.py	py	78.4 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 iam_policy.py	py	10.5 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 iam_policy_info.py	py	5.9 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 iam_user.py	py	21.6 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 iam_user_info.py	py	6 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 kms_key.py	py	38.2 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 kms_key_info.py	py	18.5 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 lambda.py	py	33.5 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 lambda_alias.py	py	10.5 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 lambda_event.py	py	15.4 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 lambda_execute.py	py	10.1 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 lambda_info.py	py	20.1 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 lambda_layer.py	py	12.3 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 lambda_layer_info.py	py	7.4 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 lambda_policy.py	py	13.4 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 rds_cluster.py	py	46 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 rds_cluster_info.py	py	10.6 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 rds_cluster_snapshot.py	py	12.7 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 rds_instance.py	py	63.3 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 rds_instance_info.py	py	12.6 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 rds_instance_snapshot.py	py	12.3 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 rds_option_group.py	py	23.9 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 rds_option_group_info.py	py	12.6 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 rds_param_group.py	py	13 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 rds_snapshot_info.py	py	12.4 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 rds_subnet_group.py	py	13 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 route53.py	py	28.2 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 route53_health_check.py	py	24.4 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 route53_info.py	py	32.1 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 route53_zone.py	py	19.9 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 s3_bucket.py	py	52.9 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 s3_object.py	py	55.6 KB	08/11/23 12:12	0644	✏️ ⬇
🐍 s3_object_info.py	py	32.6 KB	08/11/23 12:12	0644	✏️ ⬇

✏️ Rename

🔑 Ubah Permission