cloud-report/collectors/aws/iam/user_policies.js

Collects and analyzes cloud resources

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
const utils_1 = require("../../../utils");
const aws_1 = require("../../../utils/aws");
const base_1 = require("../../base");
const users_1 = require("./users");
class UserPoliciesCollector extends base_1.BaseCollector {
    collect() {
        return this.listPolicies();
    }
    async listPolicies() {
        try {
            const iam = this.getClient("IAM", "us-east-1");
            const usersCollector = new users_1.UsersCollector();
            usersCollector.setSession(this.getSession());
            const user_policies = {};
            const usersData = await utils_1.CollectorUtil.cachedCollect(usersCollector);
            const users = usersData.users;
            for (const user of users) {
                const userName = user.UserName;
                let fetchPending = true;
                let marker;
                let userPolicies = [];
                while (fetchPending) {
                    const params = { UserName: userName };
                    if (marker) {
                        params.Marker = marker;
                    }
                    const policiesData = await iam.listAttachedUserPolicies(params).promise();
                    if (policiesData.AttachedPolicies) {
                        userPolicies = userPolicies.concat(policiesData.AttachedPolicies);
                    }
                    marker = policiesData.Marker;
                    fetchPending = policiesData.IsTruncated === true;
                    await utils_1.CommonUtil.wait(200);
                }
                user_policies[userName] = userPolicies;
            }
            return { user_policies };
        }
        catch (error) {
            aws_1.AWSErrorHandler.handle(error);
        }
    }
}
exports.UserPoliciesCollector = UserPoliciesCollector;