Current File : //lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyc
�
���^c
@@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z e j e
� Z yd d d l Z d d l
Z
d d l m Z e j d � j e j � e j d � j e j � e Z Wn e k
r� e Z n Xd � Z d � Z d � Z d d d d d d
� Z e d d d d d d d d � Z d d d d d d � Z d d d d d d
� Z d � Z d d d d d d d � Z d e d d d d d d d d � Z d S( u
Connection module for Amazon CognitoIdentity
.. versionadded:: 2016.11.0
:configuration: This module accepts explicit CognitoIdentity credentials but can also
utilize IAM roles assigned to the instance trough Instance Profiles.
Dynamic credentials are then automatically obtained from AWS API and no
further configuration is necessary. More Information available at:
.. code-block:: text
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html
If IAM roles are not used you need to specify them either in a pillar or
in the minion's config file:
.. code-block:: yaml
cognitoidentity.keyid: GKTADJGHEIQSXMKKRBJ08H
cognitoidentity.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
A region may also be specified in the configuration:
.. code-block:: yaml
cognitoidentity.region: us-east-1
If a region is not specified, the default is us-east-1.
It's also possible to specify key, keyid and region via a profile, either
as a passed in dict, or as a string to pull from pillars or minion config:
.. code-block:: yaml
myprofile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
region: us-east-1
.. versionchanged:: 2015.8.0
All methods now return a dictionary. Create, delete, set, and
update methods return:
.. code-block:: yaml
created: true
or
.. code-block:: yaml
created: false
error:
message: error message
Request methods (e.g., `describe_identity_pools`) return:
.. code-block:: yaml
identity_pools:
- {...}
- {...}
or
.. code-block:: yaml
error:
message: error message
:depends: boto3
i ( t absolute_importt print_functiont unicode_literalsN( t ClientErroru botou boto3c C@ s t j j j d d d d � S( ug
Only load if boto libraries exist and if boto libraries are greater than
a given version.
t boto_veru 2.8.0t boto3_veru 1.2.1( t saltt utilst versionst check_boto_reqs( ( ( sE /usr/lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyt __virtual__j s c C@ s1 t j j j t � t r- t d t d � n d S( Nu boto3.assign_funcsu cognito-identity( R R t compatt pack_dundert __name__t HAS_BOTOt __utils__( t opts( ( sE /usr/lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyt __init__x s c C@ s� g } | d
k r~ xv t d | j d d d d d d �D]? } x6 | d D]* } | d | k rI | j | d � qI qI Wq8 Wn
| j | � | S( u�
Given identity pool name (or optionally a pool_id and name will be ignored),
find and return list of matching identity pool id's.
u boto3.paged_callt marker_flagu NextTokent
marker_argt
MaxResultsi u
IdentityPoolsu IdentityPoolNameu IdentityPoolIdN( t NoneR t list_identity_poolst append( t namet pool_idt connt idst poolst pool( ( sE /usr/lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyt _find_identity_pool_ids~ s
c C@ s� t d | d | d | d | � } yx t | | | � } | r� g } x= | D]5 } | j d | � }
|
j d d
� | j |
� qI Wi | d 6Si d
d 6SWn% t k
r� } i t d | � d 6SXd
S( u�
Given an identity pool name, (optionally if an identity pool id is given,
the given name will be ignored)
Returns a list of matched identity pool name's pool properties
CLI Example:
.. code-block:: bash
salt myminion boto_cognitoidentity.describe_identity_pools my_id_pool_name
salt myminion boto_cognitoidentity.describe_identity_pools '' IdentityPoolId=my_id_pool_id
t regiont keyt keyidt profilet IdentityPoolIdu ResponseMetadatau identity_poolsu boto3.get_erroru errorN( t _get_connR t describe_identity_poolt popR R R R ( t IdentityPoolNameR# R R R! R" R R t resultsR t responset e( ( sE /usr/lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyt describe_identity_pools� s !
c
C@ s� | d k r t � n | } | d k r0 t � n | } t d | d | d | d | � } yi t d | d | d | d | � }
| r� | |
d <n | j |
� } | j d
d � i t d 6| d 6SWn, t k
r� } i t d 6t d
| � d 6SXd S( u
Creates a new identity pool. All parameters except for IdentityPoolName is optional.
SupportedLoginProviders should be a dictionary mapping provider names to provider app
IDs. OpenIdConnectProviderARNs should be a list of OpenID Connect provider ARNs.
Returns the created identity pool if successful
CLI Example:
.. code-block:: bash
salt myminion boto_cognitoidentity.create_identity_pool my_id_pool_name DeveloperProviderName=custom_developer_provider
R R R! R" R' t AllowUnauthenticatedIdentitiest SupportedLoginProviderst OpenIdConnectProviderARNsu DeveloperProviderNameu ResponseMetadatau createdu
identity_poolu boto3.get_erroru errorN(
R t dictt listR$ t create_identity_poolR& t TrueR t FalseR (
R' R, R- t DeveloperProviderNameR. R R R! R" R t request_paramsR) R* ( ( sE /usr/lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyR1 � s !
c C@ s� t d | d | d | d | � } yq t | | | � } d } | r x( | D] } | j d | � | d 7} qI Wi t d 6| d 6Si t d 6| d 6SWn, t k
r� }
i t d 6t d
|
� d 6SXd S(
u�
Given an identity pool name, (optionally if an identity pool id is given,
the given name will be ignored)
Deletes all identity pools matching the given name, or the specific identity pool with
the given identity pool id.
CLI Example:
.. code-block:: bash
salt myminion boto_cognitoidentity.delete_identity_pools my_id_pool_name
salt myminion boto_cognitoidentity.delete_identity_pools '' IdentityPoolId=my_id_pool_id
R R R! R" i R# i u deletedu countu boto3.get_erroru errorN( R$ R t delete_identity_poolR2 R3 R R ( R' R# R R R! R" R R t countR R* ( ( sE /usr/lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyt delete_identity_pools� s !
c C@ s� t d | d | d | d | � } yx t | | | � } | r� g } x= | D]5 } | j d | � }
|
j d d
� | j |
� qI Wi | d 6Si d
d 6SWn% t k
r� } i t d | � d 6SXd
S( u�
Given an identity pool name, (optionally if an identity pool id if given,
the given name will be ignored)
Returns a list of matched identity pool name's associated roles
CLI Example:
.. code-block:: bash
salt myminion boto_cognitoidentity.get_identity_pool_roles my_id_pool_name
salt myminion boto_cognitoidentity.get_identity_pool_roles '' IdentityPoolId=my_id_pool_id
R R R! R" R# u ResponseMetadatau identity_pool_rolesu boto3.get_erroru errorN( R$ R t get_identity_pool_rolesR& R R R R ( R' R# R R R! R" R R R( R R) R* ( ( sE /usr/lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyR9 � s !
c K@ sE | j d � r | St d | | � } | r; | j d � n d } | S( ud
Helper function to turn a name into an arn string,
returns None if not able to resolve
u arn:aws:iamu boto_iam.describe_roleu arnN( t
startswitht __salt__t getR ( R t conn_paramst rolet rolearn( ( sE /usr/lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyt
_get_role_arn! s
c C@ sE t d | d | d | d | � } t | � } y� | ru t | | � } | d k rl i t d 6d j | � d 6S| } n | r� t | | � } | d k r� i t d 6d j | � d 6S| } n t � }
| r� | |
d <n | r� | |
d
<n | j d | d |
� i t d 6|
d
6SWn, t k
r@} i t d 6t d | � d 6SXd S( uQ
Given an identity pool id, set the given AuthenticatedRole and UnauthenticatedRole (the Role
can be an iam arn, or a role name) If AuthenticatedRole or UnauthenticatedRole is not given,
the authenticated and/or the unauthenticated role associated previously with the pool will be
cleared.
Returns set True if successful, set False if unsuccessful with the associated errors.
CLI Example:
.. code-block:: bash
salt myminion boto_cognitoidentity.set_identity_pool_roles my_id_pool_roles # this clears the roles
salt myminion boto_cognitoidentity.set_identity_pool_roles my_id_pool_id AuthenticatedRole=my_auth_role UnauthenticatedRole=my_unauth_role # this set both roles
salt myminion boto_cognitoidentity.set_identity_pool_roles my_id_pool_id AuthenticatedRole=my_auth_role # this will set the auth role and clear the unauth role
salt myminion boto_cognitoidentity.set_identity_pool_roles my_id_pool_id UnauthenticatedRole=my_unauth_role # this will set the unauth role and clear the auth role
R R R! R" u setu invalid AuthenticatedRole {0}u erroru invalid UnauthenticatedRole {0}u
authenticatedu unauthenticatedR# t Rolesu rolesu boto3.get_errorN(
R/ R$ R@ R R3 t formatt set_identity_pool_rolesR2 R R ( R# t AuthenticatedRolet UnauthenticatedRoleR R R! R" R= R t role_arnRA R* ( ( sE /usr/lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyRC . s, !
c
C@ s t d | d | d | d | � }
t d d | |
�} | j d � } | d k ru | j d � d k rl d n d } n | r� i t d
6| d 6S| j d � d }
|
j � } | d k r� | | j d � k r� | | d <n | | j d
� k r� | | d
<n | j d d � } | d k r3| | k r3| | d <n | j d d � } | d k rj| d k rj| | d <n | j d d � } | d k r�| | k r�| | d <n t |
� } y5 | j | � } | j d d � i t d
6| d 6SWn, t
k
r} i t d
6t d | � d 6SXd S( u�
Updates the given IdentityPoolId's properties. All parameters except for IdentityPoolId,
is optional. SupportedLoginProviders should be a dictionary mapping provider names to
provider app IDs. OpenIdConnectProviderARNs should be a list of OpenID Connect provider
ARNs.
To clear SupportedLoginProviders pass '{}'
To clear OpenIdConnectProviderARNs pass '[]'
boto3 api prevents DeveloperProviderName to be updated after it has been set for the first time.
Returns the updated identity pool if successful
CLI Example:
.. code-block:: bash
salt myminion boto_cognitoidentity.update_identity_pool my_id_pool_id my_id_pool_name DeveloperProviderName=custom_developer_provider
R R R! R" u R# u erroru identity_poolsu No matching poolu updatedi u IdentityPoolNameu AllowUnauthenticatedIdentitiesu SupportedLoginProvidersu DeveloperProviderNameu OpenIdConnectProviderARNsu ResponseMetadatau
identity_poolu boto3.get_errorN( R/ R+ R< R R3 t copyR& R$ t update_identity_poolR2 R R ( R# R' R, R- R4 R. R R R! R" R= R) t errort id_poolR5 t current_valR R* ( ( sE /usr/lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyRH b s: ! $ !
(! t __doc__t
__future__R R R t loggingt salt.utils.compatR t salt.utils.versionst getLoggerR
t logt botot boto3t botocore.exceptionsR t setLevelt CRITICALR2 R t ImportErrorR3 R
R R R R+ R1 R8 R9 R@ RC RH ( ( ( sE /usr/lib/python2.7/site-packages/salt/modules/boto_cognitoidentity.pyt <module>K sJ
#%!!
4
Mini Shell