iam

package
v1.8.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jan 26, 2024 License: Apache-2.0 Imports: 14 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func GetPermissionsByServiceAccounts

func GetPermissionsByServiceAccounts(account internal.GCPAccount) map[string][]string

Get a map of service account -> permission(s) for the current project

func GetServiceAccountKeys

func GetServiceAccountKeys(account internal.GCPAccount) []*adminpb.ServiceAccountKey

Produce a list of service account keys existing in the GCP project

func RunChecks

func RunChecks(wa *sync.WaitGroup, account internal.GCPAccount, c *commons.Config, queue chan []commons.Check)

func SACannotEscalatePrivileges

func SACannotEscalatePrivileges(resource commons.Resource) bool

func SAKeysNotOlderThan90Days

func SAKeysNotOlderThan90Days(resource commons.Resource) bool

Types

type PermissionsBySA

type PermissionsBySA struct {
	SA          string
	Permissions []string
}

func (*PermissionsBySA) GetID

func (p *PermissionsBySA) GetID() string

type SAKey

type SAKey struct {
	Key *adminpb.ServiceAccountKey
}

func (*SAKey) GetID

func (k *SAKey) GetID() string

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL