Current File : //lib/python2.7/site-packages/salt/states/boto_cognitoidentity.pyo
�
���^c
@@ s� d Z d d l m Z m Z m Z d d l Z d d l m Z e j e � Z
d � Z d � Z d � Z
e d d d d d d d d d � Z e d d d d d � Z d S(
u�
Manage CognitoIdentity Functions
================================
.. versionadded:: 2016.11.0
Create and destroy CognitoIdentity identity pools. Be aware that this interacts with
Amazon's services, and so may incur charges.
This module uses ``boto3``, which can be installed via package, or pip.
This module accepts explicit vpc credentials but can also utilize
IAM roles assigned to the instance through Instance Profiles. Dynamic
credentials are then automatically obtained from AWS API and no further
configuration is necessary. More information available `here
<http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_.
If IAM roles are not used you need to specify them either in a pillar file or
in the minion's config file:
.. code-block:: yaml
vpc.keyid: GKTADJGHEIQSXMKKRBJ08H
vpc.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile,
either passed in as a dict, or as a string to pull from pillars or minion
config:
.. code-block:: yaml
myprofile:
keyid: GKTADJGHEIQSXMKKRBJ08H
key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
region: us-east-1
.. code-block:: yaml
Ensure function exists:
boto_cognitoidentity.pool_present:
- PoolName: my_identity_pool
- region: us-east-1
- keyid: GKTADJGHEIQSXMKKRBJ08H
- key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
i ( t absolute_importt print_functiont unicode_literalsN( t string_typesc C@ s d t k r d St S( u)
Only load if boto is available.
u, boto_cognitoidentity.describe_identity_poolsu boto_cognitoidentity( t __salt__t False( ( ( sD /usr/lib/python2.7/site-packages/salt/states/boto_cognitoidentity.pyt __virtual__; s c C@ s� d } | d k r | St | t � r� | t k r> t | } n t j d i � } | | k ri | | } n | t k r� t | } q� n t | | � r� | } n t | | � s� d } n | S( u�
Helper function to retrieve objtype from pillars if objname
is string_types, used for SupportedLoginProviders and
OpenIdConnectProviderARNs.
u masterN( t Nonet
isinstanceR t __opts__t
__pillar__t get( t objnamet objtypet rett master_opts( ( sD /usr/lib/python2.7/site-packages/salt/states/boto_cognitoidentity.pyt _get_objectB s
c C@ s� t d d d d | | � } | j d � rv t | d <d j | d j d | d � � } d j | d
| � | d
<d S| j d � d
j d i � } t d d | d | d | | � } | j d � st | d <d j | d j d | d � � } d j | d
| � | d
<d S| j d � } | | k r�| d s[t � | d d <t � | d d <n | | d d d <| j d � | d d d <d j | d
d � | d
<n d j | d
d � | d
<d S( u?
Helper function to set the Roles to the identity pool
u, boto_cognitoidentity.get_identity_pool_rolest IdentityPoolNameu t IdentityPoolIdu erroru resultu/ Failed to get existing identity pool roles: {0}u messageu {0}
{1}u commentNu identity_pool_rolesi u Rolesu, boto_cognitoidentity.set_identity_pool_rolest AuthenticatedRolet UnauthenticatedRoleu setu Failed to set roles: {0}u rolesu changesu oldu newu identity pool roles updated.u' identity pool roles is already current.( R R R t formatt dict( R R R R t conn_paramst rt failure_commentt existing_identity_pool_rolet updated_identity_pool_role( ( sD /usr/lib/python2.7/site-packages/salt/states/boto_cognitoidentity.pyt
_role_present] s<
c C@ s| i | d 6t d 6d d 6i d 6} t d | d | d |
d | � }
t d
d | |
� } | j d � r� t | d <d
j | d d � | d <| S| j d � } | r� t | � d k r� t | d <d j | � | d <| S| d) k r� d) n | d } | d) k rd) n | j d � } t d rf| d) k rBd j | � | d <n d j | | � | d <d) | d <| St | t � } t | t
� } t d | d | d | d | d | � } | j |
� d) } | d) k rXt d | � } | j d � r | j d � } | j d � } d j | | � | d <q�t | d <d j | d j d | d � � | d <| Sn� | | d <| j d d) � t d! | � } | j d" � r�| j d � } d# j | | � | d <n; t | d <d$ j | | | d j d | d � � | d <| S| | k rXt � | d d% <t � | d d& <d' j | � } | | d d% | <| | d d& | <n
d( | d <t
| | | | |
� | S(* u�
Ensure Cognito Identity Pool exists.
name
The name of the state definition
IdentityPoolName
Name of the Cognito Identity Pool
AuthenticatedRole
An IAM role name or ARN that will be associated with temporary AWS
credentials for an authenticated cognito identity.
AllowUnauthenticatedIdentities
Whether to allow anonymous user identities
UnauthenticatedRole
An IAM role name or ARN that will be associated with anonymous
user identities
SupportedLoginProviders
A dictionary or pillar that contains key:value pairs mapping provider
names to provider app IDs.
DeveloperProviderName
A string which is the domain by which Cognito will refer to your users.
This name acts as a placeholder that allows your backend and the Cognito
service to communicate about the developer provider. Once you have set a
developer provider name, you cannot change it. Please take care in setting
this parameter.
OpenIdConnectProviderARNs
A list or pillar name that contains a list of OpenID Connect provider ARNs.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changest regiont keyt keyidt profileu, boto_cognitoidentity.describe_identity_poolsR u erroru% Failed to describe identity pools {0}u messageu identity_poolsi ux More than one identity pool for the given name matched Cannot execute pool_present function.
Matched Identity Pools:
{0}i u IdentityPoolIdu testu. A new identity pool named {0} will be created.u? An existing identity pool named {0} with id {1}will be updated.t AllowUnauthenticatedIdentitiest SupportedLoginProviderst DeveloperProviderNamet OpenIdConnectProviderARNsu) boto_cognitoidentity.create_identity_poolu createdu
identity_poolu5 A new identity pool with name {0}, id {1} is created.u& Failed to add a new identity pool: {0}u IdentityPoolNameu) boto_cognitoidentity.update_identity_poolu updatedu8 Existing identity pool with name {0}, id {1} is updated.u7 Failed to update an existing identity pool {0} {1}: {2}u oldu newu Identity Pool Name {0}u+ Identity Pool state is current, no changes.N( t TrueR R R R R t lenR R R t listt updatet popR ( t nameR R R! R R" R# R$ R R R R R R R t identity_poolst existing_identity_poolR t request_paramst updated_identity_poolt
change_key( ( sD /usr/lib/python2.7/site-packages/salt/states/boto_cognitoidentity.pyt pool_present� s� 8
!
!
!
!
c C@ s� i | d 6t d 6d d 6i d 6} t d | d | d | d | � } t d
d | | � } | j d � r� t | d <d
j | d d � | d <| S| j d � }
|
d k r� t | d <d j | � | d <| S| rt |
� d k rt | d <d j |
� | d <| St d r2d j |
� | d <d | d <| Sxd|
D]\} | j d � } t d d d d | | � } | j d � r�t | d <d j | | d j d | d � � }
d j | d |
� | d <| S| j d � r^| d st � | d d <t � | d d <n d j | � } | | d d | <d | d d | <d j | d d j | � � | d <q9t | d <d j | � }
d j | d |
� | d <| Sq9W| S(! u�
Ensure cognito identity pool with passed properties is absent.
name
The name of the state definition.
IdentityPoolName
Name of the Cognito Identity Pool. Please note that this may
match multiple pools with the same given name, in which case,
all will be removed.
RemoveAllMatched
If True, all identity pools with the matching IdentityPoolName
will be removed. If False and there are more than one identity pool
with the matching IdentityPoolName, no action will be taken. If False
and there is only one identity pool with the matching IdentityPoolName,
the identity pool will be removed.
region
Region to connect to.
key
Secret key to be used.
keyid
Access key to be used.
profile
A dict with region, key and keyid, or a pillar key (string) that
contains a dict with region, key and keyid.
u nameu resultu u commentu changesR R R R u, boto_cognitoidentity.describe_identity_poolsR u erroru% Failed to describe identity pools {0}u messageu identity_poolsu0 No matching identity pool for the given name {0}i uv More than one identity pool for the given name matched and RemoveAllMatched flag is False.
Matched Identity Pools:
{0}u testu9 The following matched identity pools will be deleted.
{0}u IdentityPoolIdu* boto_cognitoidentity.delete_identity_poolsR u' Failed to delete identity pool {0}: {1}u {0}
{1}u deletedu oldu newu Identity Pool Id {0}u {0} deletedu2 Identity Pool Id {0} not deleted, returned count 0N( R% R R R R R R R& R ( R* R t RemoveAllMatchedR R R R R R R R+ t
identity_poolR R R/ ( ( sD /usr/lib/python2.7/site-packages/salt/states/boto_cognitoidentity.pyt pool_absent sd "
!
&
( t __doc__t
__future__R R R t loggingt salt.ext.sixR t getLoggert __name__t logR R R R R R0 R3 ( ( ( sD /usr/lib/python2.7/site-packages/salt/states/boto_cognitoidentity.pyt <module>/ s ,�
Mini Shell