@csermet/multiprovider
Version:
cloud-graph provider plugin for AWS used to fetch AWS cloud data.
57 lines (56 loc) • 2.21 kB
JavaScript
;
var __importDefault = (this && this.__importDefault) || function (mod) {
return (mod && mod.__esModule) ? mod : { "default": mod };
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.getPasswordPolicy = void 0;
const sdk_1 = __importDefault(require("@cloudgraph/sdk"));
const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
const iam_1 = __importDefault(require("aws-sdk/clients/iam"));
const logger_1 = __importDefault(require("../../properties/logger"));
const utils_1 = require("../../utils");
const errorLog_1 = __importDefault(require("../../utils/errorLog"));
const regions_1 = require("../../enums/regions");
const constants_1 = require("../../config/constants");
const lt = { ...logger_1.default };
const { logger } = sdk_1.default;
const serviceName = 'IAM Password Policy';
const errorLog = new errorLog_1.default(serviceName);
const endpoint = utils_1.initTestEndpoint(serviceName);
const customRetrySettings = utils_1.setAwsRetryOptions({
maxRetries: constants_1.MAX_FAILED_AWS_REQUEST_RETRIES,
baseDelay: constants_1.IAM_CUSTOM_DELAY,
});
const getPasswordPolicy = async (iam) => new Promise(resolve => {
iam.getAccountPasswordPolicy(async (err, data) => {
if (err) {
errorLog.generateAwsErrorLog({
functionName: 'iam:getAccountPasswordPolicy',
err,
});
}
if (!isEmpty_1.default(data)) {
const { PasswordPolicy: passwordPolicy } = data;
resolve(passwordPolicy);
}
resolve(null);
});
});
exports.getPasswordPolicy = getPasswordPolicy;
/**
* IAM Password Policy
*/
exports.default = async ({ config, }) => new Promise(async (resolve) => {
const client = new iam_1.default({
...config,
region: regions_1.globalRegionName,
endpoint,
...customRetrySettings,
});
logger.debug(lt.fetchingIamPasswordPolicy);
// Fetch IAM Password Policy
const passwordPolicy = await exports.getPasswordPolicy(client);
errorLog.reset();
logger.debug(lt.doneFetchingIamPasswordPolicy);
resolve({ [regions_1.globalRegionName]: passwordPolicy ? [passwordPolicy] : [] });
});