Current File : //lib/python2.7/site-packages/salt/modules/boto_iam.pyo
�
���^c @@ ss d Z d d l m Z m Z m Z d d l Z d d l Z d d l m Z d d l Z
d d l Z
d d l j
j Z d d l Z
d d l m Z yl d d l Z d d l Z d d l Z d d l Z e j d � j e j � e j d � j e j � e Z Wn e k
re Z n Xe j e � Z d � Z d � Z! d d d d d
� Z# d d d d d � Z$ d d d d d � Z% d d d d d
� Z& d d d d d � Z' d d d d d d � Z( d d d d d d d � Z) d d d d d � Z* d d d d d d � Z+ d d d d d � Z, d d d d d d � Z- d d d d d d � Z. d d d d d � Z/ d d d d d � Z0 d d d d d � Z1 d d d d d � Z2 d d d d d � Z3 d d d d d � Z4 d d d d d � Z5 d d d d d � Z6 d d d d d d � Z7 d d d d d d � Z8 d d d d d d! � Z9 d d d d d" � Z: d d d d d# � Z; d d d d d$ � Z< d d d d d% � Z= d d d d d& � Z> d d d d d' � Z? d d d d d( � Z@ d d d d d d d d d d d d d d) �
ZA d d d d d* � ZB d d d d d d d+ � ZC d d d d d, � ZD d- � ZE d d d d d. � ZF d d d d d/ � ZG d d d d d0 � ZH d d d d d1 � ZI d d d d d2 � ZJ d d d d d3 � ZK d d d d d4 � ZL d d d d d5 � ZM d d d d d6 � ZN d d d d d d7 � ZO d d d d d d8 � ZP d d d d d d d9 � ZQ d d d d d: � ZR d d d d d; � ZS d d d d d< � ZT d d d d d d d= � ZU d d d d d> � ZV d d d d d? � ZW d d d d d d@ � ZX d d d d d dA � ZY d d d d dB � ZZ d d d d dC � Z[ d d d d dD � Z\ d d d d d d dE � Z] d d d d dF � Z^ d d d d dG � Z_ d d d d dH � Z` d d d d dI � Za d d d d d dJ � Zb d d d d dK � Zc d d d d dL � Zd d d d d dM � Ze d d d d dN � Zf d d d d dO � Zg d d d d dP � Zh d d d d dQ � Zi d d d d dR � Zj d d d d dS � Zk d d d d d d dT � Zl d d d d d d dU � Zm d d d d d d dV � Zn d d d d d d dW � Zo d d d d dX � Zp d d d d dY � Zq d d d d dZ � Zr d d d d d[ � Zs d d d d d\ � Zt d d d d d] � Zu d S(^ uF
Connection module for Amazon IAM
.. versionadded:: 2014.7.0
:configuration: This module accepts explicit iam credentials but can also utilize
IAM roles assigned to the instance through Instance Profiles. Dynamic
credentials are then automatically obtained from AWS API and no further
configuration is necessary. More Information available at:
.. code-block:: text
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html
If IAM roles are not used you need to specify them either in a pillar or
in the minion's config file:
.. code-block:: yaml
iam.keyid: GKTADJGHEIQSXMKKRBJ08H
iam.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
iam.region: us-east-1
It's also possible to specify key, keyid and region via a profile, either
as a passed in dict, or as a string to pull from pillars or minion config:
.. code-block:: yaml
myprofile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
region: us-east-1
:depends: boto
i ( t absolute_importt print_functiont unicode_literalsN( t six( t unquoteu botou boto3c C@ s t j j j d t � S( u,
Only load if boto libraries exist.
t check_boto3( t saltt utilst versionst check_boto_reqst False( ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt __virtual__F s c C@ s7 t j j j t � t r3 t d t d d t �n d S( Nu boto.assign_funcsu iamt pack( R R t compatt pack_dundert __name__t HAS_BOTOt __utils__t __salt__( t opts( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt __init__O s c C@ sU t d | d | d | d | � } y | j | � t SWn t j j k
rP t SXd S( u�
Check to see if an instance profile exists.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.instance_profile_exists myiprofile
t regiont keyt keyidt profileN( t _get_connt get_instance_profilet Truet botot exceptiont BotoServerErrorR
( t nameR R R R t conn( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt instance_profile_existsU s !
c C@ s� t d | d | d | d | � } t | | | | | � r= t Sy! | j | � t j d | � Wn7 t j j k
r� } t j | � t j
d | � t SXt S( u�
Create an instance profile.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.create_instance_profile myiprofile
R R R R u Created %s instance profile.u% Failed to create %s instance profile.( R R! R t create_instance_profilet logt infoR R R t debugt errorR
( R R R R R R t e( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR" k s !
c C@ s� t d | d | d | d | � } t | | | | | � s= t Sy! | j | � t j d | � Wn7 t j j k
r� } t j | � t j
d | � t SXt S( u�
Delete an instance profile.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_instance_profile myiprofile
R R R R u Deleted %s instance profile.u% Failed to delete %s instance profile.( R R! R t delete_instance_profileR# R$ R R R R% R& R
( R R R R R R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR( � s !
c C@ sU t d | d | d | d | � } y | j | � t SWn t j j k
rP t SXd S( u�
Check to see if an IAM role exists.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.role_exists myirole
R R R R N( R t get_roleR R R R R
( R R R R R R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt role_exists� s
!
c C@ s t d | d | d | d | � } y� | j | � } | s= t S| j j j } t j j j t
| j � � | d <x_ | d j � D]M \ } } | d k r x2 | D]' }
d |
k r� |
d r� |
d =q� q� Wq q W| SWn7 t
j j k
r} t j | � t j d | � t SXd S(
u�
Get information for a role.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.describe_role myirole
R R R R u assume_role_policy_documentu Statementu Sidu Failed to get %s information.N( R R) R
t get_role_responset get_role_resultt roleR R t jsont loadst _unquotet assume_role_policy_documentt itemsR R R R# R% R& ( R R R R R R R$ R- t
policy_keyt policyt valR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt
describe_role� s$
!
c C@ s� | s d } n t | | | | | � r+ t St d | d | d | d | � } y( | j | | � t j d | � t SWn7 t j j k
r� } t j | � t j
d | � t SXd S( u�
Create a user.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.create_user myuser
u /R R R R u Created IAM user : %s.u Failed to create IAM user %s.N( t get_userR R t create_userR# R$ R R R R% R& R
( t user_namet pathR R R R R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR8 � s
!
c C@ s t d | d | d | d | � } y | j | | | � SWn@ t j j k
rz } t j | � t j d | � t j | � SXd S( u�
Get all access keys from a user.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_all_access_keys myuser
R R R R u* Failed to get access keys for IAM user %s.N(
R t get_all_access_keysR R R R# R% R& R t text_type( R9 t markert max_itemsR R R R R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR; � s
!
c C@ sv t d | d | d | d | � } y | j | � SWn= t j j k
rq } t j | � t j d � t j | � SXd S( u�
Create access key id for a user.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.create_access_key myuser
R R R R u Failed to create access key.N(
R t create_access_keyR R R R# R% R& R R< ( R9 R R R R R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR? s !
c C@ s| t d | d | d | d | � } y | j | | � SWn@ t j j k
rw } t j | � t j d | � t j | � SXd S( u�
Delete access key id from a user.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_access_key myuser
R R R R u" Failed to delete access key id %s.N(
R t delete_access_keyR R R R# R% R& R R< ( t
access_key_idR9 R R R R R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR@ s
!
c C@ s� t | | | | | � s t St d | d | d | d | � } y% | j | � t j d | � t SWn@ t j j k
r� } t j | � t j
d | � t j | � SXd S( u�
Delete a user.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_user myuser
R R R R u Deleted IAM user : %s .u Failed to delete IAM user %sN(
R7 R R t delete_userR# R$ R R R R% R& R R< ( R9 R R R R R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRB 0 s
!
c C@ s� t d | d | d | d | � } y! | j | � } | s= t S| SWn7 t j j k
r{ } t j | � t j d | � t SXd S( u�
Get user information.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_user myuser
R R R R u Failed to get IAM user %s info.N( R R7 R
R R R R# R% R& ( R9 R R R R R R$ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR7 J s !
c
C@ s� | s d } n t | d | d | d | d | �r7 t St d | d | d | d | � } y( | j | | � t j d | � t SWn7 t j j k
r� } t j | � t j
d | � t SXd S( u�
Create a group.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.create_group group
u /R R R R u Created IAM group : %s.u Failed to create IAM group %s.N( t get_groupR R t create_groupR# R$ R R R R% R& R
( t
group_nameR: R R R R R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRD b s
!
c C@ s� t d | d | d | d | � } y3 | j | d d �} | sC t S| d d d SWn7 t j j k
r� } t j | � t j d
| � t SXd S( u�
Get group information.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_group mygroup
R R R R R> i u get_group_responseu get_group_resultu groupu Failed to get IAM group %s info.N( R RC R
R R R R# R% R& ( RE R R R R R R$ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRC s !
c C@ s t d | d | d | d | � } y� d } t } g } x� | r� | j | d | d d �} | sd t St | d d d
� } | r� d | d d k r� | d d d } n d } t } | | d d d 7} q9 W| SWn7 t j j k
r}
t j
|
� t j d
| � t SXd S( u�
Get group information.
.. versionadded:: 2016.3.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_group mygroup
R R R R R= R> i� u get_group_responseu get_group_resultu is_truncatedu markeru usersu' Failed to get members for IAM group %s.N( R t NoneR RC R
t boolR R R R# R% R& ( RE R R R R R R= t truncatedt usersR$ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt get_group_members� s( !
c
C@ s� t | | | | | � } | s2 t j d | � t St | | d | d | d | d | �r] t St d | d | d | d | � } y$ | j | | � } | s� t S| SWn: t j j
k
r� } t j | � t j d | | � t SXd S( u�
Add user to group.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.add_user_to_group myuser mygroup
u Username : %s does not exist.R R R R u& Failed to add IAM user %s to group %s.N( R7 R# R& R
t user_exists_in_groupR R t add_user_to_groupR R R R% (
R9 RE R R R R t userR R$ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRL � s"
!
c C@ sl t d | d | d | d | d | � } | rh x8 | D]- } | | d k r4 t j d | | � t Sq4 Wn t S( u�
Check if user exists in group.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.user_exists_in_group myuser mygroup
RE R R R R u user_nameu' IAM user %s is already in IAM group %s.( RJ R# R% R R
( R9 RE R R R R RI t _user( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRK � s
c
C@ s� t | | | | | � } | s2 t j d | � t St | | d | d | d | d | �s] t St d | d | d | d | � } y$ | j | | � } | s� t S| SWn: t j j
k
r� } t j | � t j d | | � t SXd S( u�
Remove user from group.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.remove_user_from_group mygroup myuser
u IAM user %s does not exist.R R R R u* Failed to remove IAM user %s from group %sN( R7 R# R& R
RK R R t remove_user_from_groupR R R R% (
RE R9 R R R R RM R R$ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRO � s"
!
c
C@ s t | d | d | d | d | �} | s> t j d | � t St d | d | d | d | � } ym t | t j � s� t j j
j | � } n | j | | | � } | r� t j
d | � t St j d | � Wn6 t j j k
r}
t j |
� t j d | � n Xt S( u�
Adds or updates the specified policy document for the specified group.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.put_group_policy mygroup policyname policyrules
R R R R u Group %s does not existu Created policy for IAM group %s.u( Could not create policy for IAM group %su( Failed to create policy for IAM group %s( RC R# R& R
R t
isinstanceR t string_typesR R R. t dumpst put_group_policyR$ R R R R R% ( RE t policy_namet policy_jsonR R R R t groupR t createdR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRS s&
!
c C@ s� t d | d | d | d | � } | s+ t St | | | | | | � } | sP t Sy+ | j | | � t j d | | � t SWn: t j j k
r� } t j
| � t j d | | � t SXd S( u�
Delete a group policy.
CLI Example::
.. code-block:: bash
salt myminion boto_iam.delete_group_policy mygroup mypolicy
R R R R u0 Successfully deleted policy %s for IAM group %s.u, Failed to delete policy %s for IAM group %s.N( R R
t get_group_policyR t delete_group_policyR# R$ R R R R% R& ( RE RT R R R R R t _policyR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRY 6 s !
c C@ s� t d | d | d | d | � } ym | j | | � } t j d | � | sP t S| j j j } t | � } t j
j j | d t
j �} | SWn7 t j j k
r� } t j | � t j d | � t SXd S( u�
Retrieves the specified policy document for the specified group.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_group_policy mygroup policyname
R R R R u info for group policy is : %st object_pairs_hooku Failed to get IAM group %s info.N( R RX R# R% R
t get_group_policy_responset get_group_policy_resultt policy_documentR0 R R R. R/ t odictt OrderedDictR R R R& ( RE RT R R R R R R$ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRX S s
!
u /c C@ s� t d | d | d | d | � } | s+ d S| j d | � } | j j j } t | j j d d � } xM | r� | j d | d | � } | | j j j } t | j j d d � } qg W| S( u�
Get and return all IAM group details, starting at the optional path.
.. versionadded:: 2016.3.0
CLI Example:
salt-call boto_iam.get_all_groups
R R R R t path_prefixu markerR= N( R RF t get_all_groupst list_groups_responset list_groups_resultt groupst getattr( Ra R R R R R t _groupsRe R= ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRb p s ! c
C@ s� t d | d | d | d | � } t } g } xe | d k r� | rH | n d } | j d | d | � } | j j } | | j 7} t | d d � } q0 W| S( u�
Get and return all IAM instance profiles, starting at the optional path.
.. versionadded:: 2016.11.0
CLI Example:
salt-call boto_iam.get_all_instance_profiles
R R R R Ra R= u markerN( R R
RF t list_instance_profilest list_instance_profiles_responset list_instance_profiles_resultt instance_profilesRf (
Ra R R R R R R= t profilest pt res( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt get_all_instance_profiles� s !
c C@ s3 t | | | | | � } g | D] } | d ^ q S( u�
List all IAM instance profiles, starting at the optional path.
.. versionadded:: 2016.11.0
CLI Example:
salt-call boto_iam.list_instance_profiles
u instance_profile_name( Ro ( Ra R R R R Rm t i( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRh � s c C@ s t d | d | d | d | � } | s+ t Sy& | j | � } | j j } | j SWn' t j j k
rz } t j
| � g SXd S( u�
Get a list of policy names from a group.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_all_group_policies mygroup
R R R R N( R R
t get_all_group_policiest list_group_policies_responset list_group_policies_resultt policy_namesR R R R# R% ( RE R R R R R t responset _listR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRq � s !
c C@ s� t d | d | d | d | � } | s+ t St | | | | | � } | sM t Sy% | j | � t j d | � t SWn7 t j j k
r� } t j
| � t j d | � t SXd S( u�
Delete a group policy.
CLI Example::
.. code-block:: bash
salt myminion boto_iam.delete_group mygroup
R R R R u" Successfully deleted IAM group %s.u Failed to delete IAM group %s.N( R R
RC R t delete_groupR# R$ R R R R% R& ( RE R R R R R t _groupR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRw � s !
c
C@ s� t | | | | | � } | s2 t j d | � t St d | d | d | d | � } y* | j | | � } t j d | � | SWnW t j j k
r� } t j
| � d | k r� t j d | � d St j d | � t SXd
S( u"
Creates a login profile for the specified user, give the user the
ability to access AWS services and the AWS Management Console.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.create_login_profile user_name password
u IAM user %s does not existR R R R u Created profile for IAM user %s.u Conflictu' Profile already exists for IAM user %s.u) Failed to update profile for IAM user %s.N( R7 R# R& R
R t create_login_profileR$ R R R R% (
R9 t passwordR R R R RM R R$ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyRy � s !
c C@ s� t | | | | | � } | s2 t j d | � t St d | d | d | d | � } y' | j | � } t j d | � t SWnW t j j
k
r� } t j | � d | k r� t j d | � t St j d | � t SXd
S( u�
Deletes a login profile for the specified user.
.. versionadded:: 2016.3.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_login_profile user_name
u IAM user %s does not existR R R R u& Deleted login profile for IAM user %s.u Not Foundu. Login profile already deleted for IAM user %s.u/ Failed to delete login profile for IAM user %s.N( R7 R# R& R
R t delete_login_profileR$ R R R R R% ( R9 R R R R RM R R$ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR{ s
!
c
C@ s� t | | | | | � } | s2 t j d | � t St d | d | d | d | � } y) | j | � } | d d d } | SWnW t j j k
r� } t j | � d | k r� t j
d
| � g St j d | � t SXd S(
u�
Get all MFA devices associated with an IAM user.
.. versionadded:: 2016.3.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_all_mfa_devices user_name
u IAM user %s does not existR R R R u list_mfa_devices_responseu list_mfa_devices_resultu mfa_devicesu Not Foundu Could not find IAM user %s.u. Failed to get all MFA devices for IAM user %s.N( R7 R# R& R
R t get_all_mfa_devicesR R R R% R$ (
R9 R R R R RM R t resultt devicesR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR| & s
!
c C@ s� t | | | | | � } | s2 t j d | � t St d | d | d | d | � } y+ | j | | � t j d | | � t SWn] t j j
k
r� } t j | � d | k r� t j d | | � t St j d | | � t SXd
S( u�
Deactivates the specified MFA device and removes it from association with
the user.
.. versionadded:: 2016.3.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.deactivate_mfa_device user_name serial_num
u IAM user %s does not existR R R R u* Deactivated MFA device %s for IAM user %s.u Not Foundu. MFA device %s not associated with IAM user %s.u3 Failed to deactivate MFA device %s for IAM user %s.N( R7 R# R& R
R t deactivate_mfa_deviceR$ R R R R R% ( R9 t serialR R R R RM R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR E s !
c C@ s� t d d � � } y( | j d | � t j d | � t SWn` t j j k
r� } t j | � d t j
| � k r� t j d | � t St j d | � t SXd S( u�
Deletes the specified virtual MFA device.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_virtual_mfa_device serial_num
u boto3.get_connection_funcu iamt SerialNumberu Deleted virtual MFA device %s.u NoSuchEntityu Virtual MFA device %s not found.u' Failed to delete virtual MFA device %s.N(
R t delete_virtual_mfa_deviceR# R$ R t botocoret
exceptionst ClientErrorR% R R< R& R
( R� R R R R R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� e s
c
C@ s� t d | d |
d | d | � }
y: |
j | | | | | | | | | � t j d � t SWn: t j j k
r� } t j | � d } t j | � t
SXd S( u�
Update the password policy for the AWS account.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.update_account_password_policy True
R R R R u% The password policy has been updated.u$ Failed to update the password policyN( R t update_account_password_policyR# R$ R R R R R% R& R
( t allow_users_to_change_passwordt hard_expiryt max_password_aget minimum_password_lengtht password_reuse_preventiont require_lowercase_characterst require_numberst require_symbolst require_uppercase_charactersR R R R R R' t msg( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� } s !
c C@ s t d | d | d | d | � } y | j � } | j j j SWn: t j j k
rz } t j | � d } t j
| � t SXd S( u�
Get account policy for the AWS account.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_account_policy
R R R R u% Failed to update the password policy.N( R t get_account_password_policyt$ get_account_password_policy_responset" get_account_password_policy_resultt password_policyR R R R# R% R& R
( R R R R R R$ R' R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt get_account_policy� s !
c C@ s� t d | d | d | d | � } t | | | | | � r= t S| sL d } n y1 | j | d | d | �t j d | � t SWn7 t j j k
r� } t j
| � t j
d | � t SXd S(
u�
Create an instance role.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.create_role myrole
R R R R R1 R: u Created IAM role %s.u Failed to create IAM role %s.N( R R* R RF t create_roleR# R$ R R R R& R
( R R^ R: R R R R R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s !
c C@ s� t d | d | d | d | � } t | | | | | � s= t Sy% | j | � t j d | � t SWn7 t j j k
r� } t j | � t j
d | � t SXd S( u}
Delete an IAM role.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_role myirole
R R R R u Deleted %s IAM role.u Failed to delete %s IAM role.N( R R* R t delete_roleR# R$ R R R R% R& R
( R R R R R R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s
!
c C@ s� t d | d | d | d | � } y | j | � } Wn' t j j k
r] } t j | � t SX| j } | j } | j
} x! | D] } | j | k r� t Sq� Wt S( u�
Check to see if an instance profile is associated with an IAM role.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.profile_associated myirole myiprofile
R R R R (
R t list_instance_profiles_for_roleR R R R# R% R
t( list_instance_profiles_for_role_responset& list_instance_profiles_for_role_resultRk t instance_profile_nameR ( t role_namet profile_nameR R R R R Rl R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt profile_associated� s
!
c C@ s
t d | d | d | d | � } t | | | | | � sM t j d | � t St | | | | | � sy t j d | � t St | | | | | | � } | r� t Sy+ | j | | � t j d | | � t SWn: t
j j k
r} t j
| � t j d | | � t SXd S(
u�
Associate an instance profile with an IAM role.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.associate_profile_to_role myirole myiprofile
R R R R u IAM role %s does not exist.u# Instance profile %s does not exist.u) Added %s instance profile to IAM role %s.u0 Failed to add %s instance profile to IAM role %sN( R R* R# R& R
R! R� R t add_role_to_instance_profileR$ R R R R% ( R� R� R R R R R t
associatedR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt associate_profile_to_role
s$ !
c C@ s
t d | d | d | d | � } t | | | | | � sM t j d | � t St | | | | | � sy t j d | � t St | | | | | | � } | s� t Sy+ | j | | � t j d | | � t SWn: t
j j k
r} t j
| � t j d | | � t SXd S(
u�
Disassociate an instance profile from an IAM role.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.disassociate_profile_from_role myirole myiprofile
R R R R u IAM role %s does not exist.u# Instance profile %s does not exist.u- Removed %s instance profile from IAM role %s.u6 Failed to remove %s instance profile from IAM role %s.N( R R* R# R& R
R! R� R t! remove_role_from_instance_profileR$ R R R R% ( R� R� R R R R R R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt disassociate_profile_from_role+ s$ !
c C@ su t d | d | d | d | � } y& | j | � } | j j } | j SWn' t j j k
rp } t j | � g SXd S( u�
Get a list of policy names from a role.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.list_role_policies myirole
R R R R N(
R t list_role_policiest list_role_policies_responset list_role_policies_resultRt R R R R# R% ( R� R R R R R Ru Rv R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� L s !
c C@ s� t d | d | d | d | � } yP | j | | � } | j j } t | � } t j j j | d t j
�} | SWn t j j
k
r� i SXd S( u�
Get a role policy.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_role_policy myirole mypolicy
R R R R R[ N( R t get_role_policyt get_role_policy_responseR^ R0 R R R. R/ R_ R` R R R ( R� RT R R R R R RZ ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� b s ! c C@ s6 t d | d | d | d | � } t | | | | | | � } d } | ra | | k rX t Sd } n t | t j � r� t j j j | d t
j �} n y^ t j j j | � } | j
| | | � | d k r� d }
n d }
t j |
| | � t SWn= t j j k
r1} t j | � t j d
| | | � t SXd S( u
Create or modify a role policy.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.create_role_policy myirole mypolicy '{"MyPolicy": "Statement": [{"Action": ["sqs:*"], "Effect": "Allow", "Resource": ["arn:aws:sqs:*:*:*"], "Sid": "MyPolicySqs1"}]}'
R R R R u createu modifyR[ u, Successfully added policy %s to IAM role %s.u0 Successfully modified policy %s for IAM role %s.u' Failed to %s policy %s for IAM role %s.N( R R� R RP R RQ R R R. R/ R_ R` RR t put_role_policyR# R$ R R R R& R
( R� RT R4 R R R R R RZ t modeR� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt create_role_policy{ s, ! !
c C@ s� t d | d | d | d | � } t | | | | | | � } | sF t Sy+ | j | | � t j d | | � t SWn: t j j k
r� } t j | � t j
d | | � t SXd S( u�
Delete a role policy.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_role_policy myirole mypolicy
R R R R u/ Successfully deleted policy %s for IAM role %s.u+ Failed to delete policy %s for IAM role %s.N( R R� R t delete_role_policyR# R$ R R R R% R& R
( R� RT R R R R R RZ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s !
c C@ s� t d | d | d | d | � } t | t j � rT t j j j | d t j �} n y= t j j j
| � } | j | | � t j
d | � t SWn7 t j j k
r� } t j | � t j d | � t SXd S( u�
Update an assume role policy for a role.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.update_assume_role_policy myrole '{"Statement":"..."}'
R R R R R[ u8 Successfully updated assume role policy for IAM role %s.u4 Failed to update assume role policy for IAM role %s.N( R RP R RQ R R R. R/ R_ R` RR t update_assume_role_policyR# R$ R R R R R& R
( R� R^ R R R R R t _policy_documentR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s
!
c C@ sG t d | d | d | d | � } t | d � rN t j j j | j � � } n1 t | d � r{ t j j j | j � � } n i Sx� | j � D]� \ } } x� | D]� } t | d t
� r� t | d � d k r� | d d | d <n t | d
d t
� r� t | d
d � d k r� | d
d d | d
d <q� q� Wq� Wd | d
<| S( u�
Build a default assume role policy.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.build_policy
R R R R u build_policyu
_build_policyu Actioni i u Principalu Serviceu
2008-10-17u Version( R t hasattrR R R. R/ t build_policyt
_build_policyR2 RP t listt len( R R R R R R4 t
policy_valt statement( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s !
%
c C@ s d } | t k rt d | d | d | d | � } y9 | j � } | d d d d } | j d
� d } Wn� t j j k
rt j j d d
d � } t j j d d d � }
t j
j d | d |
� } y | d d } Wqt k
r� t
j d � qXn X| t | <n t | S( u�
Get a the AWS account id associated with the used credentials.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_account_id
u boto_iam.account_idR R R R u get_user_responseu get_user_resultu useru arnu :i u Botou metadata_service_timeoutg �?u metadata_service_num_attemptsi t timeoutt num_retriesu documentu accountIduK Failed to get account id from instance_identity in boto_iam.get_account_id.( t __context__R R7 t splitR R R t configt getfloatt getintR t get_instance_identityt KeyErrorR# R& ( R R R R t cache_keyR t rett arnt
account_idR� t attemptst identity( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt get_account_id� s(
!
c C@ s� t d | d | d | d | � } | s+ d S| j d | � } | j j j } t | j j d d � } xM | r� | j d | d | � } | | j j j } t | j j d d � } qg W| S( u�
Get and return all IAM role details, starting at the optional path.
.. versionadded:: 2016.3.0
CLI Example:
salt-call boto_iam.get_all_roles
R R R R Ra u markerR= N( R RF t
list_rolest list_roles_responset list_roles_resultt rolesRf ( Ra R R R R R t _rolesR� R= ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt
get_all_roles$ s ! c C@ s� t d | d | d | d | � } | s+ d S| j d | � } | j j j } t | j j d d � } xM | r� | j d | d | � } | | j j j } t | j j d d � } qg W| S( u�
Get and return all IAM user details, starting at the optional path.
.. versionadded:: 2016.3.0
CLI Example:
salt-call boto_iam.get_all_users
R R R R Ra u markerR= N( R RF t
get_all_userst list_users_responset list_users_resultRI Rf ( Ra R R R R R t _usersRI R= ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� @ s ! c C@ s� t d | d | d | d | � } y6 | j | | | � } | sC t S| j j } | j SWn7 t j j k
r� }
t j
|
� t j d | � t SXd S( u�
Get all user policies.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_all_user_policies myuser
R R R R u# Failed to get policies for user %s.N( R t get_all_user_policiesR
t list_user_policies_responset list_user_policies_resultRt R R R R# R% R& ( R9 R= R> R R R R R R$ Rv R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� \ s !
c C@ s� t d | d | d | d | � } ys | j | | � } t j d | | | � | sV t S| j j j } t | � } t j
j j | d t
j �} | SWn: t j j k
r� } t j | � t j d | | � t SXd S( u�
Retrieves the specified policy document for the specified user.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_user_policy myuser mypolicyname
R R R R u# Info for IAM user %s policy %s: %s.R[ u( Failed to get policy %s for IAM user %s.N( R t get_user_policyR# R% R
t get_user_policy_responset get_user_policy_resultR^ R0 R R R. R/ R_ R` R R R R& ( R9 RT R R R R R R$ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� u s !
c C@ s t | | | | | � } | s2 t j d | � t St d | d | d | d | � } ys t | t j � s� t j j
j | � } n | j | | | � } | r� t j
d | | � t St j d | | � Wn9 t j j k
r}
t j |
� t j d | | � n Xt S( u�
Adds or updates the specified policy document for the specified user.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.put_user_policy myuser policyname policyrules
u IAM user %s does not existR R R R u" Created policy %s for IAM user %s.u+ Could not create policy %s for IAM user %s.u+ Failed to create policy %s for IAM user %s.( R7 R# R& R
R RP R RQ R R R. RR t put_user_policyR$ R R R R R% ( R9 RT RU R R R R RM R RW R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s$ !
c C@ s� t d | d | d | d | � } | s+ t St | | | | | | � } | sP t Sy+ | j | | � t j d | | � t SWn: t j j k
r� } t j
| � t j d | | � t SXd S( u�
Delete a user policy.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_user_policy myuser mypolicy
R R R R u/ Successfully deleted policy %s for IAM user %s.u+ Failed to delete policy %s for IAM user %s.N( R R
R� R t delete_user_policyR# R$ R R R R% R& ( R9 RT R R R R R RZ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s
!
c
C@ s� t | | | | | � } | r" t St d | d | d | d | � }
y0 |
j | | | | � } t j d | � | SWn7 t j j k
r� } t j | � t j
d | � t SXd S( u�
Upload a certificate to Amazon.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.upload_server_cert mycert_name crt priv_key
:param cert_name: The name for the server certificate. Do not include the path in this value.
:param cert_body: The contents of the public key certificate in PEM-encoded format.
:param private_key: The contents of the private key in PEM-encoded format.
:param cert_chain: The contents of the certificate chain. This is typically a concatenation of the PEM-encoded public key certificates of the chain.
:param path: The path for the server certificate.
:param region: The name of the region to connect to.
:param key: The key to be used in order to connect
:param keyid: The keyid to be used in order to connect
:param profile: The profile that contains a dict of region, key, keyid
:return: True / False
R R R R u Created certificate %s.u* Failed to failed to create certificate %s.N( t get_server_certificateR R t upload_server_certR# R$ R R R R% R& R
(
t cert_namet cert_bodyt private_keyt
cert_chainR: R R R R t existsR R$ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s !
c C@ s� t d | d | d | d | � } y! | j | � } | s= t S| SWn7 t j j k
r{ } t j | � t j d | � t SXd S( u�
Returns certificate information from Amazon
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_server_certificate mycert_name
R R R R u) Failed to get certificate %s information.N( R R� R
R R R R# R% R& ( R� R R R R R R$ R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s !
c C@ sp t d | d | d | d | � } y | j | � SWn7 t j j k
rk } t j | � t j d | � t SXd S( u�
Deletes a certificate from Amazon.
.. versionadded:: 2015.8.0
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_server_cert mycert_name
R R R R u Failed to delete certificate %s.N( R t delete_server_certR R R R# R% R& R
( R� R R R R R R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� s !
c C@ sX t d | d | d | d | � } | s+ d St j � } t | | | | | � } x� | D]� } | j } | j | d d �}
|
j j j }
i } xN |
D]F } | j
| | � }
t j j
j t |
j j j � � }
|
| | <q� Wg } | j i | d 6� | j i | d 6� | j i | j d 6� i | d
6| d | <qV Wt d | d
t d d �S( u�
Get all IAM user details. Produces results that can be used to create an
sls file.
.. versionadded:: 2016.3.0
CLI Example:
salt-call boto_iam.export_users --out=txt | sed "s/local: //" > iam_users.sls
R R R R R> id u nameu policiesu pathu boto_iam.user_presentu manage user u yaml.safe_dumpt default_flow_stylet indenti N( R RF R_ R` R� R9 R� R� R� Rt R� R R R. R/ R0 R� R� R^ t appendR: R R
( Ra R R R R R t resultsRI RM R t _policiest policiesRT RZ t user_sls( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt export_users! s0 !
c C@ s� t d | d | d | d | � } | s+ d St j � } t | | | | | � } x| D]} | j } | j | d d �}
|
j j j }
i } xN |
D]F } | j
| | � }
t j j
j t |
j j j � � }
|
| | <q� Wg } | j i | d 6� | j i | d 6� | j i t j j
j t | j � � d 6� | j i | j d
6� i | d 6| d | <qV Wt d
| d t d d �S( u�
Get all IAM role details. Produces results that can be used to create an
sls file.
CLI Example:
salt-call boto_iam.export_roles --out=txt | sed "s/local: //" > iam_roles.sls
R R R R R> id u nameu policiesu policy_documentu pathu boto_iam_role.presentu manage role u yaml.safe_dumpR� R� i N( R RF R_ R` R� R� R� R� R� Rt R� R R R. R/ R0 R� t get_role_policy_resultR^ R� R1 R: R R
( Ra R R R R R R� R� R- R R� R� RT RZ t role_sls( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt export_rolesH s2 !
,c C@ sD | j d � r | St d | d | d | d | � } d j | | � S( Nu arn:aws:iam:R R R R u arn:aws:iam::{0}:policy/{1}( t
startswithR� t format( R R R R R R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt _get_policy_arnm s
c C@ ss t d | d | d | d | � } y3 | j t | d | d | d | d | �� t SWn t j j k
rn t SXd S( u�
Check to see if policy exists.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.instance_profile_exists myiprofile
R R R R N( R t
get_policyR� R R R R R
( RT R R R R R ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt
policy_existsw s ! c C@ s� t d | d | d | d | � } yM | j t | d | d | d | d | �� } | j d i � j d i � SWn t j j k
r� d SXd S( u�
Check to see if policy exists.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.instance_profile_exists myiprofile
R R R R u get_policy_responseu get_policy_resultN( R R� R� t getR R R RF ( RT R R R R R R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s ! c C@ s
t d | d | d | d | � } t | t j � sK t j j j | � } n i } x5 d D]- }
t � |
d
k rX t � |
| |
<qX qX Wt
| | | | | � r� t Sy' | j | | | � t
j d | � Wn7 t j j k
r} t
j | � t
j d | � t SXt S( u
Create a policy.
CLI Example:
.. code-block:: bash
salt myminios boto_iam.create_policy mypolicy '{"Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Action": ["s3:Get*", "s3:List*"], "Resource": ["arn:aws:s3:::my-bucket/shared/*"]},]}'
R R R R u pathu descriptionu Created IAM policy %s.u Failed to create IAM policy %s.( u pathu descriptionN( R RP R RQ R R R. RR t localsRF R� R t
create_policyR# R$ R R R R% R& R
( RT R^ R: t descriptionR R R R R t paramst argR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s" !
c C@ s� t d | d | d | d | � } t | | | | | � } t | | | | | � sU t Sy! | j | � t j d | � WnS t j j k
r� } t
d | � } t j | � t j d | | j
d � � t SXt S( u}
Delete a policy.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_policy mypolicy
R R R R u Deleted %s policy.u boto.get_erroru Failed to delete %s policy: %s.u message( R R� R� R t
delete_policyR# R$ R R R R R% R& R� R
( RT R R R R R t
policy_arnR' t aws( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s !
c C@ s� t d | d | d | d | � } yZ g } xI t d | j � D]4 } | j | j d i � j d i � j d � � q> W| SWn: t j j k
r� } t j | � d } t j
| � g SXd
S( ur
List policies.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.list_policies
R R R R u boto.paged_callu list_policies_responseu list_policies_resultu policiesu Failed to list policy versions.N( R R t
list_policiesR� R� R R R R# R% R& ( R R R R R R� R� R' R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� � s
!2
c C@ sp t d | d | d | d | � } t | | | | | � } y | j | | � t SWn t j j k
rk t SXd S( u�
Check to see if policy exists.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.instance_profile_exists myiprofile
R R R R N( R R� t get_policy_versionR R R R R
( RT t
version_idR R R R R R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt policy_version_exists� s !c C@ s� t d | d | d | d | � } y� | j t | d | d | d | d | �| � } | j d i � j d i � j d i � } t | j d � � | d <i | d 6SWn t j j k
r� d SXd S(
u�
Check to see if policy exists.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.instance_profile_exists myiprofile
R R R R u get_policy_version_responseu get_policy_version_resultu policy_versionu documentN( R R� R� R� R0 R R R RF ( RT R� R R R R R R� t retval( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� s !!*c C@ sk t d | d | d | d | � } t | t j � sK t j j j | � } n i } x5 d D]- } t � | d k rX t � | | | <qX qX Wt
| | | | | � }
yq | j |
| | � } | j d i � j d i � j d i � j d � } t
j d
| | � i t d 6| d 6SWnR t j j k
rf}
t
j |
� t
j d | | � i t d 6t d
|
� d 6SXd S( u#
Create a policy version.
CLI Example:
.. code-block:: bash
salt myminios boto_iam.create_policy_version mypolicy '{"Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Action": ["s3:Get*", "s3:List*"], "Resource": ["arn:aws:s3:::my-bucket/shared/*"]},]}'
R R R R u set_as_defaultu create_policy_version_responseu create_policy_version_resultu policy_versionu
version_idu! Created IAM policy %s version %s.u createdu* Failed to create IAM policy %s version %s.u boto.get_erroru errorN( u set_as_default( R RP R RQ R R R. RR R� RF R� t create_policy_versionR� R# R$ R R R R R% R& R
R ( RT R^ t set_as_defaultR R R R R R� R� R� R� t vidR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR� s" !
3
c
C@ s� t d | d | d | d | � } t | | | | | � } t | | | | | | � sX t Sy' | j | | � t j d | | � WnV t j j k
r� } t
d | � } t j | � t j d | | | j
d � � t SXt S( u�
Delete a policy version.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_policy_version mypolicy v1
R R R R u! Deleted IAM policy %s version %s.u boto.get_erroru- Failed to delete IAM policy %s version %s: %su message( R R� R� R t delete_policy_versionR# R$ R R R R R% R& R� R
(
RT R� R R R R R R� R' R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR > s !
c C@ s� t d | d | d | d | � } t | | | | | � } y8 | j | � } | j d i � j d i � j d � SWn7 t j j k
r� } t j | � t j d | � g SXd S(
u�
List versions of a policy.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.list_policy_versions mypolicy
R R R R u list_policy_versions_responseu list_policy_versions_resultu versionsu* Failed to list versions for IAM policy %s.N(
R R� t list_policy_versionsR� R R R R# R% R& ( RT R R R R R R� R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR Z s !)
c
C@ s� t d | d | d | d | � } t | | | | | � } y' | j | | � t j d | | � WnV t j j k
r� } t d | � } t j | � t j
d | | | j d � � t SXt
S( u�
Set the default version of a policy.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.set_default_policy_version mypolicy v1
R R R R u Set %s policy to version %s.u boto.get_erroru) Failed to set %s policy to version %s: %su message( R R� t set_default_policy_versionR# R$ R R R R R% R& R� R
R (
RT R� R R R R R R� R' R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR q s !
c C@ s� t d | d | d | d | � } t | | | | | � } y' | j | | � t j d | | � Wn: t j j k
r� } t j | � t j d | | � t
SXt S( u�
Attach a managed policy to a user.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.attach_user_policy mypolicy myuser
R R R R u" Attached policy %s to IAM user %s.u* Failed to attach %s policy to IAM user %s.( R R� t attach_user_policyR# R$ R R R R% R& R
R ( RT R9 R R R R R R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR � s !
c C@ s� t d | d | d | d | � } t | | | | | � } y' | j | | � t j d | | � Wn: t j j k
r� } t j | � t j d | | � t
SXt S( u�
Detach a managed policy to a user.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.detach_user_policy mypolicy myuser
R R R R u$ Detached %s policy from IAM user %s.u, Failed to detach %s policy from IAM user %s.( R R� t detach_user_policyR# R$ R R R R% R& R
R ( RT R9 R R R R R R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR � s !
c C@ s� t d | d | d | d | � } t | | | | | � } y' | j | | � t j d | | � Wn: t j j k
r� } t j | � t j d | | � t
SXt S( u�
Attach a managed policy to a group.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.attach_group_policy mypolicy mygroup
R R R R u# Attached policy %s to IAM group %s.u+ Failed to attach policy %s to IAM group %s.( R R� t attach_group_policyR# R$ R R R R% R& R
R ( RT RE R R R R R R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR � s !
c C@ s� t d | d | d | d | � } t | | | | | � } y' | j | | � t j d | | � Wn: t j j k
r� } t j | � t j d | | � t
SXt S( u�
Detach a managed policy to a group.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.detach_group_policy mypolicy mygroup
R R R R u% Detached policy %s from IAM group %s.u- Failed to detach policy %s from IAM group %s.( R R� t detach_group_policyR# R$ R R R R% R& R
R ( RT RE R R R R R R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR � s !
c C@ s� t d | d | d | d | � } t | | | | | � } y' | j | | � t j d | | � Wn: t j j k
r� } t j | � t j d | | � t
SXt S( u�
Attach a managed policy to a role.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.attach_role_policy mypolicy myrole
R R R R u" Attached policy %s to IAM role %s.u* Failed to attach policy %s to IAM role %s.( R R� t attach_role_policyR# R$ R R R R% R& R
R ( RT R� R R R R R R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR � s !
c C@ s� t d | d | d | d | � } t | | | | | � } y' | j | | � t j d | | � Wn: t j j k
r� } t j | � t j d | | � t
SXt S( u�
Detach a managed policy to a role.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.detach_role_policy mypolicy myrole
R R R R u$ Detached policy %s from IAM role %s.u, Failed to detach policy %s from IAM role %s.( R R� t detach_role_policyR# R$ R R R R% R& R
R ( RT R� R R R R R R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR s !
c C@ s� t d | d | d | d | � } d } i } x5 d D]- }
t � |
d k r4 t � |
| |
<q4 q4 Wt | | | | | � } x| r�y� i g d 6g d 6g d
6} xr t d | j d | | �D]T }
xK t j | � D]: \ } } | j |
j d
i � j d i � j | � � q� Wq� W| SWq� t
j j k
r�} | j
d k rot j d � t j d � | d 8} q� n t j d | | j � i SXq� Wi S( u�
List entities that a policy is attached to.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.list_entities_for_policy mypolicy
R R R R i u path_prefixu
entity_filteru
policy_groupsu policy_usersu policy_rolesu boto.paged_callR� u! list_entities_for_policy_responseu list_entities_for_policy_resultu
Throttlingu0 Throttled by AWS API, will retry in 5 seconds...i i u- Failed to list entities for IAM policy %s: %s( u path_prefixu
entity_filterN( R R� RF R� R t list_entities_for_policyR t iteritemst extendR� R R R t
error_codeR# R% t timet sleepR& t message( RT Ra t
entity_filterR R R R R t retriesR� R� R� t allretR� t kt vR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR
s4 !
# 6
c C@ s� t d | d | d | d | � } i | d 6} | d k rG | | d <n g } yc xX t d | j d | d d
�D]7 }
| j |
j d i � j d i � j d
g � � qp W| SWn7 t j j k
r� } t j
| � t j d | � g SXd S( u�
List entities attached to the given user.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.list_entities_for_policy mypolicy
R R R R u UserNameu
PathPrefixu boto.paged_callu ListAttachedUserPoliciest list_markeru AttachedPoliciesu$ list_attached_user_policies_responseu" list_attached_user_policies_resultu attached_policiesu1 Failed to list attached policies for IAM user %s.N( R RF R t get_responseR R� R R R R# R% R& ( R9 Ra R R R R R R R� R� R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt list_attached_user_policiesE s !
&$
c C@ s� t d | d | d | d | � } i | d 6} | d k rG | | d <n g } yc xX t d | j d | d d
�D]7 }
| j |
j d i � j d i � j d
g � � qp W| SWn7 t j j k
r� } t j
| � t j d | � g SXd S( u�
List entities attached to the given group.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.list_entities_for_policy mypolicy
R R R R u GroupNameu
PathPrefixu boto.paged_callu ListAttachedGroupPoliciesR u AttachedPoliciesu% list_attached_group_policies_responseu# list_attached_group_policies_resultu attached_policiesu2 Failed to list attached policies for IAM group %s.N( R RF R R R R� R R R R# R% R& ( RE Ra R R R R R R R� R� R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt list_attached_group_policiesd s !
&$
c C@ s� t d | d | d | d | � } i | d 6} | d k rG | | d <n g } yc xX t d | j d | d d
�D]7 }
| j |
j d i � j d i � j d
g � � qp W| SWn7 t j j k
r� } t j
| � t j d | � g SXd S( u�
List entities attached to the given role.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.list_entities_for_policy mypolicy
R R R R u RoleNameu
PathPrefixu boto.paged_callu ListAttachedRolePoliciesR u AttachedPoliciesu$ list_attached_role_policies_responseu" list_attached_role_policies_resultu attached_policiesu1 Failed to list attached policies for IAM role %s.N( R RF R R R R� R R R R# R% R& ( R� Ra R R R R R R R� R� R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt list_attached_role_policies� s !
&$
c C@ s� t d | d | d | d | � } y( | j | | � t j d | � t SWnG t j j k
r� } t d | � } t j | � t j
d | � t SXd S( u�
Create SAML provider
CLI Example:
.. code-block:: bash
salt myminion boto_iam.create_saml_provider my_saml_provider_name saml_metadata_document
R R R R u& Successfully created %s SAML provider.u boto.get_erroru" Failed to create SAML provider %s.N( R t create_saml_providerR# R$ R R R R R R% R& R
( R t saml_metadata_documentR R R R R R' R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR � s
!
c
C@ s� t d | d | d | d | � } yM | j � } x6 | j j j D]% } | d j d | � r@ | d Sq@ Wt SWnG t j j k
r� } t
d | � } t j | � t j
d | � t SXd S(
u�
Get SAML provider
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_saml_provider_arn my_saml_provider_name
R R R R u arnu :saml-provider/u boto.get_erroru& Failed to get ARN of SAML provider %s.N( R t list_saml_providerst list_saml_providers_responset list_saml_providers_resultt saml_provider_listt endswithR
R R R R R# R% R& (
R R R R R R Ru t
saml_providerR' R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt get_saml_provider_arn� s
!
c
C@ s� t d | d | d | d | � } yc t | d | d | d | d | �} | sb t j d | � t S| j | � t j d | � t SWnG t j j k
r� } t d | � } t j
| � t j d | � t SXd S(
u�
Delete SAML provider
CLI Example:
.. code-block:: bash
salt myminion boto_iam.delete_saml_provider my_saml_provider_name
R R R R u SAML provider %s not found.u& Successfully deleted SAML provider %s.u boto.get_erroru" Failed to delete SAML provider %s.N(
R R# R# R$ R t delete_saml_providerR R R R R% R& R
( R R R R R R t saml_provider_arnR' R� ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR$ � s
!$
c C@ s� t d | d | d | d | � } yX g } | j � } x; | d d d D]' } | j | d j d d
� d
� qI W| SWn> t j j k
r� } t j t d | � � t j
d � t SXd
S( u~
List SAML providers.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.list_saml_providers
R R R R u list_saml_providers_responseu list_saml_providers_resultu saml_provider_listu arnu /i u boto.get_erroru% Failed to get list of SAML providers.N( R R R� t rsplitR R R R# R% R R& R
( R R R R R t providersR$ R� R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR � s
! %
c C@ s� t d | d | d | d | � } y# | j | � } | d d d SWnA t j j k
r� } t j t d | � � t j d | � t SXd
S( u�
Get SAML provider document.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.get_saml_provider arn
R R R R u get_saml_provider_responseu get_saml_provider_resultu saml_metadata_documentu boto.get_erroru( Failed to get SAML provider document %s.N(
R t get_saml_providerR R R R# R% R R& R
( R R R R R R t providerR' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR( s
!c
C@ s� t d | d | d | d | � } y\ t | d | d | d | d | �} | sb t j d | � t S| j | | � rx t St SWnA t j j k
r� } t j
t d | � � t j d | � t SXd S( u�
Update SAML provider.
CLI Example:
.. code-block:: bash
salt myminion boto_iam.update_saml_provider my_saml_provider_name saml_metadata_document
R R R R u SAML provider %s not found.u boto.get_erroru" Failed to update SAML provider %s.N(
R R# R# R$ R
t update_saml_providerR R R R R% R R& ( R R R R R R R R% R' ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyR* s
!$(v t __doc__t
__future__R R R t loggingR t salt.extR t salt.utils.compatR t salt.utils.jsont salt.utils.odictR R_ t salt.utils.versionst salt.ext.six.moves.urllib.parseR R0 R t boto.iamt boto3R� t getLoggert setLevelt CRITICALR R t ImportErrorR
R R# R R RF R! R" R( R* R6 R8 R; R? R@ RB R7 RD RC RJ RL RK RO RS RY RX Rb Ro Rh Rq Rw Ry R{ R| R R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� R R R R R R R R R R
R R R R R# R$ R R( R* ( ( ( s9 /usr/lib/python2.7/site-packages/salt/modules/boto_iam.pyt <module>$ s4
" # ! $ $' & &% )
Mini Shell