Dustin Decker
c683e0a2c5
* Add support for AWS account allow and deny lists * filter canaries too * Move account filter to detectors for reuse
39 lines
984 B
Go
39 lines
984 B
Go
package aws
|
|
|
|
import regexp "github.com/wasilibs/go-re2"
|
|
|
|
const (
|
|
RequiredIdEntropy = 3.0
|
|
RequiredSecretEntropy = 4.25
|
|
)
|
|
|
|
// Verification error messages
|
|
const (
|
|
VerificationErrAccountIDInDenyList = "Account ID is in the deny list for verification"
|
|
VerificationErrAccountIDNotInAllowList = "Account ID is not in the allow list for verification"
|
|
)
|
|
|
|
var SecretPat = regexp.MustCompile(`(?:[^A-Za-z0-9+/]|\A)([A-Za-z0-9+/]{40})(?:[^A-Za-z0-9+/]|\z)`)
|
|
|
|
type IdentityResponse struct {
|
|
GetCallerIdentityResponse struct {
|
|
GetCallerIdentityResult struct {
|
|
Account string `json:"Account"`
|
|
Arn string `json:"Arn"`
|
|
UserID string `json:"UserId"`
|
|
} `json:"GetCallerIdentityResult"`
|
|
ResponseMetadata struct {
|
|
RequestID string `json:"RequestId"`
|
|
} `json:"ResponseMetadata"`
|
|
} `json:"GetCallerIdentityResponse"`
|
|
}
|
|
|
|
type Error struct {
|
|
Code string `json:"Code"`
|
|
Message string `json:"Message"`
|
|
}
|
|
|
|
type ErrorResponseBody struct {
|
|
Error Error `json:"Error"`
|
|
}
|