Current File : //lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyo
�
���^c
@@ s! d Z d d l m Z m Z m Z d d l Z d d l m Z d d l Z d d l
Z e j e � Z
yK d d l Z d d l Z d d l m Z e j d � j e j � e Z Wn e k
r� e Z n Xd � Z d � Z d d d d d � Z d d d d d d d d d d d d d
� Z d d d d d � Z d d d d d � Z d d d d d
� Z d d d d d � Z d d d d d d d d d d d d d � Z! d d d d d � Z" d d d d d � Z# d d d d d � Z$ d d d d d � Z% d d d d d � Z& d d d d d � Z' d S( uN
Connection module for Amazon CloudTrail
.. versionadded:: 2016.3.0
:depends:
- boto
- boto3
The dependencies listed above can be installed via package or pip.
:configuration: This module accepts explicit Lambda credentials but can also
utilize IAM roles assigned to the instance through Instance Profiles.
Dynamic credentials are then automatically obtained from AWS API and no
further configuration is necessary. More Information available at:
.. code-block:: text
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html
If IAM roles are not used you need to specify them either in a pillar or
in the minion's config file:
.. code-block:: yaml
cloudtrail.keyid: GKTADJGHEIQSXMKKRBJ08H
cloudtrail.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
A region may also be specified in the configuration:
.. code-block:: yaml
cloudtrail.region: us-east-1
If a region is not specified, the default is us-east-1.
It's also possible to specify key, keyid and region via a profile, either
as a passed in dict, or as a string to pull from pillars or minion config:
.. code-block:: yaml
myprofile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
region: us-east-1
i ( t absolute_importt print_functiont unicode_literalsN( t six( t ClientErroru boto3c C@ s t j j j d d � S( ug
Only load if boto libraries exist and if boto libraries are greater than
a given version.
t boto3_veru 1.2.5( t saltt utilst versionst check_boto_reqs( ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyt __virtual__O s c C@ s1 t j j j t � t r- t d t d � n d S( Nu boto3.assign_funcsu
cloudtrail( R R t compatt pack_dundert __name__t HAS_BOTOt __utils__( t opts( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyt __init__\ s c C@ s� y@ t d | d | d | d | � } | j d | � i t d 6SWnZ t k
r� } t d | � } | j j d i � j d � d
k r� i t d 6Si | d 6SXd S(
u
Given a trail name, check to see if the given trail exists.
Returns True if the given trail exists and returns False if the given
trail does not exist.
CLI Example:
.. code-block:: bash
salt myminion boto_cloudtrail.exists mytrail
t regiont keyt keyidt profilet Nameu existsu boto3.get_erroru Erroru Codeu TrailNotFoundExceptionu errorN( t _get_connt get_trail_statust TrueR R t responset gett False( R R R R R t connt et err( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyt existsb s !$ c C@ s� y� t d |
d | d | d |
� } i } x5 d D]- } t � | d k r1 t � | | | <q1 q1 W| j d
| d | | � } | r� t j d | d � i t d 6| d d 6St j d � i t d 6SWn, t k
r� } i t d 6t
d | � d 6SXd S( u
Given a valid config, create a trail.
Returns {created: true} if the trail was created and returns
{created: False} if the trail was not created.
CLI Example:
.. code-block:: bash
salt myminion boto_cloudtrail.create my_trail my_bucket
R R R R u S3KeyPrefixu SnsTopicNameu IncludeGlobalServiceEventsu IsMultiRegionTrailu EnableLogFileValidationu CloudWatchLogsLogGroupArnu CloudWatchLogsRoleArnu KmsKeyIdR t S3BucketNameu" The newly created trail name is %su Nameu createdu nameu Trail was not createdu boto3.get_erroru errorN( u S3KeyPrefixu SnsTopicNameu IncludeGlobalServiceEventsu IsMultiRegionTrailu EnableLogFileValidationu CloudWatchLogsLogGroupArnu CloudWatchLogsRoleArnu KmsKeyId( R t localst Nonet create_trailt logt infoR t warningR R R ( R R! t S3KeyPrefixt SnsTopicNamet IncludeGlobalServiceEventst IsMultiRegionTrailt EnableLogFileValidationt CloudWatchLogsLogGroupArnt CloudWatchLogsRoleArnt KmsKeyIdR R R R R t kwargst argt trailR ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyt create} s& !
c C@ ss y@ t d | d | d | d | � } | j d | � i t d 6SWn, t k
rn } i t d 6t d | � d 6SXd S(
u
Given a trail name, delete it.
Returns {deleted: true} if the trail was deleted and returns
{deleted: false} if the trail was not deleted.
CLI Example:
.. code-block:: bash
salt myminion boto_cloudtrail.delete mytrail
R R R R R u deletedu boto3.get_erroru errorN( R t delete_trailR R R R ( R R R R R R R ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyt delete� s !c
C@ s y� t d | d | d | d | � } | j d | g � } | r� t | j d g � � d k r� d } | d j � } i t g | D] } | | j | � f ^ q� � d 6Si d d 6SWnd t k
r}
t d |
� } |
j j d i � j d � d k ri d d 6Si t d |
� d 6SXd S( u�
Given a trail name describe its properties.
Returns a dictionary of interesting properties.
CLI Example:
.. code-block:: bash
salt myminion boto_cloudtrail.describe mytrail
R R R R t
trailNameListu trailListi u Nameu S3BucketNameu S3KeyPrefixu SnsTopicNameu IncludeGlobalServiceEventsu IsMultiRegionTrailu
HomeRegionu TrailARNu LogFileValidationEnabledu CloudWatchLogsLogGroupArnu CloudWatchLogsRoleArnu KmsKeyIdu trailu boto3.get_erroru Erroru Codeu TrailNotFoundExceptionu errorN( u Nameu S3BucketNameu S3KeyPrefixu SnsTopicNameu IncludeGlobalServiceEventsu IsMultiRegionTrailu
HomeRegionu TrailARNu LogFileValidationEnabledu CloudWatchLogsLogGroupArnu CloudWatchLogsRoleArnu KmsKeyId(
R t describe_trailst lenR t popt dictR# R R R ( R R R R R R t trailst keysR2 t kR R ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyt describe� s$ !$ 3$ c C@ s� y� t d | d | d | d | � } | j d | � } | ru d } i t g | D] } | | j | � f ^ qO � d 6Si d d 6SWnd t k
r� } t d | � }
| j j d i � j d � d k r� i d d 6Si t d | � d 6SXd S( u�
Given a trail name describe its properties.
Returns a dictionary of interesting properties.
CLI Example:
.. code-block:: bash
salt myminion boto_cloudtrail.describe mytrail
R R R R R u IsLoggingu LatestDeliveryErroru LatestNotificationErroru LatestDeliveryTimeu LatestNotificationTimeu StartLoggingTimeu StopLoggingTimeu! LatestCloudWatchLogsDeliveryErroru LatestCloudWatchLogsDeliveryTimeu LatestDigestDeliveryTimeu LatestDigestDeliveryErroru LatestDeliveryAttemptTimeu LatestNotificationAttemptTimeu" LatestNotificationAttemptSucceededu LatestDeliveryAttemptSucceededu TimeLoggingStartedu TimeLoggingStoppedu trailu boto3.get_erroru Erroru Codeu TrailNotFoundExceptionu errorN( u IsLoggingu LatestDeliveryErroru LatestNotificationErroru LatestDeliveryTimeu LatestNotificationTimeu StartLoggingTimeu StopLoggingTimeu! LatestCloudWatchLogsDeliveryErroru LatestCloudWatchLogsDeliveryTimeu LatestDigestDeliveryTimeu LatestDigestDeliveryErroru LatestDeliveryAttemptTimeu LatestNotificationAttemptTimeu" LatestNotificationAttemptSucceededu LatestDeliveryAttemptSucceededu TimeLoggingStartedu TimeLoggingStopped( R R R: R R# R R R ( R R R R R R R2 R< R= R R ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyt status� s. ! 3$ c C@ s� ym t d | d | d | d | � } | j � } t | j d � � sU t j d � n i | j d g � d 6SWn% t k
r� } i t d | � d 6SXd
S( u�
List all trails
Returns list of trails
CLI Example:
.. code-block:: yaml
policies:
- {...}
- {...}
R R R R u trailListu No trails foundu trailsu boto3.get_erroru errorN( R R7 t boolR R% R' R R ( R R R R R R; R ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyt list s ! c C@ s� y� t d |
d | d | d |
� } i } x5 d D]- } t � | d k r1 t � | | | <q1 q1 W| j d
| d | | � } | r� t j d | d � i t d 6| d d 6St j d � i t d 6SWn, t k
r� } i t d 6t
d | � d 6SXd S( u
Given a valid config, update a trail.
Returns {created: true} if the trail was created and returns
{created: False} if the trail was not created.
CLI Example:
.. code-block:: bash
salt myminion boto_cloudtrail.update my_trail my_bucket
R R R R u S3KeyPrefixu SnsTopicNameu IncludeGlobalServiceEventsu IsMultiRegionTrailu EnableLogFileValidationu CloudWatchLogsLogGroupArnu CloudWatchLogsRoleArnu KmsKeyIdR R! u The updated trail name is %su Nameu updatedu nameu Trail was not createdu boto3.get_erroru errorN( u S3KeyPrefixu SnsTopicNameu IncludeGlobalServiceEventsu IsMultiRegionTrailu EnableLogFileValidationu CloudWatchLogsLogGroupArnu CloudWatchLogsRoleArnu KmsKeyId( R R" R# t update_trailR% R& R R' R R R ( R R! R( R) R* R+ R, R- R. R/ R R R R R R0 R1 R2 R ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyt update* s& !
c C@ ss y@ t d | d | d | d | � } | j d | � i t d 6SWn, t k
rn } i t d 6t d | � d 6SXd S(
u
Start logging for a trail
Returns {started: true} if the trail was started and returns
{started: False} if the trail was not started.
CLI Example:
.. code-block:: bash
salt myminion boto_cloudtrail.start_logging my_trail
R R R R R u startedu boto3.get_erroru errorN( R t
start_loggingR R R R ( R R R R R R R ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyRD Y s !c C@ ss y@ t d | d | d | d | � } | j d | � i t d 6SWn, t k
rn } i t d 6t d | � d 6SXd S(
u
Stop logging for a trail
Returns {stopped: true} if the trail was stopped and returns
{stopped: False} if the trail was not stopped.
CLI Example:
.. code-block:: bash
salt myminion boto_cloudtrail.stop_logging my_trail
R R R R R u stoppedu boto3.get_erroru errorN( R t stop_loggingR R R R ( R R R R R R R ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyRE q s !c C@ s | j d � r | St d d | d | d | d | � } | rW d | k rW | d } n | d k rl d } n d j | | | � S(
Nu arn:aws:cloudtrail:u boto_iam.get_account_idR R R R u regionu us-east-1u$ arn:aws:cloudtrail:{0}:{1}:trail/{2}( t
startswitht __salt__R# t format( t nameR R R R t
account_id( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyt _get_trail_arn� s
c K@ s y� t d | d | d | d | � } g } xh t j | � D]W \ } } t j | � j d � rd q: n | j i t j | � d 6t j | � d 6� q: W| j d t | d | d | d | d | �d | � i t d
6SWn, t k
r}
i t
d
6t d |
� d 6SXd
S( u
Add tags to a trail
Returns {tagged: true} if the trail was tagged and returns
{tagged: False} if the trail was not tagged.
CLI Example:
.. code-block:: bash
salt myminion boto_cloudtrail.add_tags my_trail tag_a=tag_value tag_b=tag_value
R R R R u __u Keyu Valuet
ResourceIdt TagsListu taggedu boto3.get_erroru errorN( R R t iteritemst text_typeRF t appendt add_tagsRK R R R R ( R R R R R R0 R t tagslistR= t vR ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyRQ � s ! 1c K@ s y� t d | d | d | d | � } g } xh t j | � D]W \ } } t j | � j d � rd q: n | j i t j | � d 6t j | � d 6� q: W| j d t | d | d | d | d | �d | � i t d
6SWn, t k
r}
i t
d
6t d |
� d 6SXd
S( u
Remove tags from a trail
Returns {tagged: true} if the trail was tagged and returns
{tagged: False} if the trail was not tagged.
CLI Example:
.. code-block:: bash
salt myminion boto_cloudtrail.remove_tags my_trail tag_a=tag_value tag_b=tag_value
R R R R u __u Keyu ValueRL RM u taggedu boto3.get_erroru errorN( R R RN RO RF RP t remove_tagsRK R R R R ( R R R R R R0 R RR R= RS R ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyRT � s ! 1c
C@ s� y� t d | d | d | d | � } t | d | d | d | d | �} | j d | g � } | j d g � j � j d � } i } x* | D]" }
|
j d � | |
j d � <q� Wi | d
6SWn% t k
r� } i t d | � d 6SXd
S( u�
List tags of a trail
Returns:
tags:
- {...}
- {...}
CLI Example:
.. code-block:: bash
salt myminion boto_cloudtrail.list_tags my_trail
R R R R t ResourceIdListu ResourceTagListu TagsListu Valueu Keyu tagsu boto3.get_erroru errorN( R RK t list_tagsR R9 R R ( R R R R R R t ridt rett tlistt tagdictt tagR ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyRV � s ! !
(( t __doc__t
__future__R R R t loggingt salt.extR t salt.utils.compatR t salt.utils.versionst getLoggerR
R% t botot boto3t botocore.exceptionsR t setLevelt CRITICALR R t ImportErrorR R
R R# R R3 R5 R> R? RA RC RD RE RK RQ RT RV ( ( ( s@ /usr/lib/python2.7/site-packages/salt/modules/boto_cloudtrail.pyt <module>0 sZ
'$('
Mini Shell