Current File : //lib/python2.7/site-packages/salt/states/boto_cloudtrail.pyo
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l m Z d d l
Z e j e
� Z d � Z d d e d e d d d e d d d d d d � Z d d d d d � Z d S( u�
Manage CloudTrail Objects
=========================
.. versionadded:: 2016.3.0
Create and destroy CloudTrail objects. Be aware that this interacts with Amazon's services,
and so may incur charges.
:depends:
- boto
- boto3
The dependencies listed above can be installed via package or pip.
This module accepts explicit vpc credentials but can also utilize
IAM roles assigned to the instance through Instance Profiles. Dynamic
credentials are then automatically obtained from AWS API and no further
configuration is necessary. More information available `here
<http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_.
If IAM roles are not used you need to specify them either in a pillar file or
in the minion's config file:
.. code-block:: yaml
vpc.keyid: GKTADJGHEIQSXMKKRBJ08H
vpc.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile,
either passed in as a dict, or as a string to pull from pillars or minion
config:
.. code-block:: yaml
myprofile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
region: us-east-1
.. code-block:: yaml
Ensure trail exists:
boto_cloudtrail.present:
- Name: mytrail
- S3BucketName: mybucket
- S3KeyPrefix: prefix
- region: us-east-1
- keyid: GKTADJGHEIQSXMKKRBJ08H
- key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
i ( t absolute_importt print_functiont unicode_literalsN( t sixc C@ s d t k r d St S( u)
Only load if boto is available.
u boto_cloudtrail.existsu boto_cloudtrail( t __salt__t False( ( ( s? /usr/lib/python2.7/site-packages/salt/states/boto_cloudtrail.pyt __virtual__D s c C@ sN i | d 6t d 6d d 6i d 6} t d d | d |
d | d
| d | � } d | k r� t | d <d
j | d d � | d <| S| j d � s�t d r� d j | � | d <d? | d <| St d d | d | d | d | d | d | d | d | d | d |
d |
d | d
| d | � } | j d � sUt | d <d
j | d d � | d <| St d | d |
d | d
| d | �} i d? d 6| d d <| | d d <d! j | � | d <| r<t d" d | d |
d | d
| d | � } d | k r#t | d <d
j | d d � | d <i | d <| St | d d d d# <n t | d d d d# <t | � r�t d$ d | d |
d | d
| d | | � } | j d% � s�t | d <d
j | d d � | d <i | d <| S| | d d d d& <n | St j j
| d d' j | � g � | d <i | d <t d d | d |
d | d
| d | � } d | k r�t | d <d( j | d d � | d <i | d <| S| j d � } t d) d | d |
d | d
| d | � } | j d i � j d* t � | d# <t } i
d+ d+ 6d, d, 6d- d- 6d. d. 6d/ d/ 6d0 d1 6d2 d2 6d3 d3 6d4 d4 6d# d# 6} x| t j | � D]k \ } } | | t
� | k rFt } t
� | | d j d i � | <| | | d j d i � | <qFqFWt d5 d | d |
d | d
| d | � } | j d6 i � | d& <t j j j | d& | � } t | � r_t } | | d j d i � d& <| d& | d j d i � d& <n | rJt d r�d7 j | � } | | d <d? | d <| St j j
| d d8 g � | d <t d9 d | d | d | d | d | d | d | d | d | d |
d |
d | d
| d | � } | j d: � sYt | d <d( j | d d � | d <i | d <| S| r�t d" d | d |
d | d
| d | � } | j d; � s<t | d <d( j | d d � | d <i | d <| Snm t d< d | d |
d | d
| d | � } | j d= � s<t | d <d( j | d d � | d <i | d <| St | � rJi } i } xs t j | � D]b \ } } | j d d � d k r�| | | | <qd| j d d � d k rd| d& | | | <qdqdWt | � rt d$ d | d |
d | d
| d | | � } n t | � rGt d> d | d |
d | d
| d | | � } qGqJn | S(@ ux
Ensure trail exists.
name
The name of the state definition
Name
Name of the trail.
S3BucketName
Specifies the name of the Amazon S3 bucket designated for publishing log
files.
S3KeyPrefix
Specifies the Amazon S3 key prefix that comes after the name of the
bucket you have designated for log file delivery.
SnsTopicName
Specifies the name of the Amazon SNS topic defined for notification of
log file delivery. The maximum length is 256 characters.
IncludeGlobalServiceEvents
Specifies whether the trail is publishing events from global services
such as IAM to the log files.
EnableLogFileValidation
Specifies whether log file integrity validation is enabled. The default
is false.
CloudWatchLogsLogGroupArn
Specifies a log group name using an Amazon Resource Name (ARN), a unique
identifier that represents the log group to which CloudTrail logs will
be delivered. Not required unless you specify CloudWatchLogsRoleArn.
CloudWatchLogsRoleArn
Specifies the role for the CloudWatch Logs endpoint to assume to write
to a user's log group.
KmsKeyId
Specifies the KMS key ID to use to encrypt the logs delivered by
CloudTrail. The value can be a an alias name prefixed by "alias/", a
fully specified ARN to an alias, a fully specified ARN to a key, or a
globally unique identifier.
LoggingEnabled
Whether logging should be enabled for the trail
Tags
A dictionary of tags that should be set on the trail
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_cloudtrail.existst Namet regiont keyt keyidt profileu erroru Failed to create trail: {0}.u messageu existsu testu$ CloudTrail {0} is set to be created.u boto_cloudtrail.createt S3BucketNamet S3KeyPrefixt SnsTopicNamet IncludeGlobalServiceEventst IsMultiRegionTrailt EnableLogFileValidationt CloudWatchLogsLogGroupArnt CloudWatchLogsRoleArnt KmsKeyIdu createdu boto_cloudtrail.describeu trailu oldu newu CloudTrail {0} created.u boto_cloudtrail.start_loggingu LoggingEnabledu boto_cloudtrail.add_tagsu taggedu Tagsu CloudTrail {0} is present.u Failed to update trail: {0}.u boto_cloudtrail.statusu IsLoggingu S3BucketNameu S3KeyPrefixu SnsTopicNameu IncludeGlobalServiceEventsu IsMultiRegionTrailu LogFileValidationEnabledu EnableLogFileValidationu CloudWatchLogsLogGroupArnu CloudWatchLogsRoleArnu KmsKeyIdu boto_cloudtrail.list_tagsu tagsu" CloudTrail {0} set to be modified.u CloudTrail to be modifiedu boto_cloudtrail.updateu updatedu startedu boto_cloudtrail.stop_loggingu stoppedu boto_cloudtrail.remove_tagsN( t TrueR R t formatt gett __opts__t Nonet boolt ost linesept joinR t iteritemst localst
setdefaultt saltt utilst datat
compare_dicts( t nameR R R
R R R R R R R t LoggingEnabledt TagsR R R
R t rett rt _describet need_updatet bucket_varst invart outvart tagchanget msgt addst removest kt diff( ( s? /usr/lib/python2.7/site-packages/salt/states/boto_cloudtrail.pyt presentK s$ K
)
"
!% !
! c C@ sn i | d 6t d 6d d 6i d 6} t d | d | d | d | d
| �} d | k r t | d <d j | d d
� | d <| S| r� | d r� d j | � | d <| St d r� d j | � | d <d | d <| St d | d | d | d | d
| �} | d s-t | d <d j | d d
� | d <| Si | d 6| d d <i d d 6| d d <d j | � | d <| S( u�
Ensure trail with passed properties is absent.
name
The name of the state definition.
Name
Name of the trail.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesu boto_cloudtrail.existsR R R
R u erroru Failed to delete trail: {0}.u messageu existsu CloudTrail {0} does not exist.u testu$ CloudTrail {0} is set to be removed.u boto_cloudtrail.deleteu deletedu trailu oldu newu CloudTrail {0} deleted.N( R R R R R R ( R% R R R R
R R( R) ( ( s? /usr/lib/python2.7/site-packages/salt/states/boto_cloudtrail.pyt absent> s8
( t __doc__t
__future__R R R t loggingR t os.patht salt.extR t salt.utils.dataR! t getLoggert __name__t logR R R R R5 R6 ( ( ( s? /usr/lib/python2.7/site-packages/salt/states/boto_cloudtrail.pyt <module>5 s( �
Mini Shell