shadowdaoandClaude Sonnet 5.5
01b9b76239
Fork of hashicorp/boundary-plugin-aws (MPL-2.0). Module path and Boundary SDK imports now point at repo.anhonesthost.net/CyberCoveLLC. Adds NOTICE and an About this fork section to the README. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
79 lines
2.1 KiB
Go
79 lines
2.1 KiB
Go
// Copyright IBM Corp. 2021, 2026
|
|
// SPDX-License-Identifier: MPL-2.0
|
|
|
|
package storage
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
cred "repo.anhonesthost.net/CyberCoveLLC/threshold-plugin-aws/internal/credential"
|
|
"repo.anhonesthost.net/CyberCoveLLC/threshold-plugin-aws/internal/errors"
|
|
"repo.anhonesthost.net/CyberCoveLLC/threshold-plugin-aws/internal/values"
|
|
"google.golang.org/protobuf/types/known/structpb"
|
|
)
|
|
|
|
// StorageAttributes is a Go-native representation of the Attributes
|
|
// map.
|
|
type StorageAttributes struct {
|
|
*cred.CredentialAttributes
|
|
|
|
// EndpointUrl is used for configuring how the aws client will resolve requests.
|
|
EndpointUrl string
|
|
|
|
// DualStack is used for configuring how the aws client will resolve requests.
|
|
DualStack bool
|
|
}
|
|
|
|
func getStorageAttributes(in *structpb.Struct) (*StorageAttributes, error) {
|
|
unknownFields := values.StructFields(in)
|
|
badFields := make(map[string]string)
|
|
|
|
var err error
|
|
credAttributes, err := cred.GetCredentialAttributes(in)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
endpointUrl, err := values.GetStringValue(in, ConstAwsEndpointUrl, false)
|
|
if err != nil {
|
|
badFields[fmt.Sprintf("attributes.%s", ConstAwsEndpointUrl)] = err.Error()
|
|
}
|
|
delete(unknownFields, ConstAwsEndpointUrl)
|
|
|
|
dualStack, err := values.GetBoolValue(in, ConstAwsDualStack, false)
|
|
if err != nil {
|
|
badFields[fmt.Sprintf("attributes.%s", ConstAwsDualStack)] = err.Error()
|
|
}
|
|
delete(unknownFields, ConstAwsDualStack)
|
|
|
|
for s := range unknownFields {
|
|
switch s {
|
|
// Ignore knownFields from CredentialAttributes
|
|
case cred.ConstRegion:
|
|
continue
|
|
case cred.ConstDisableCredentialRotation:
|
|
continue
|
|
case cred.ConstRoleArn:
|
|
continue
|
|
case cred.ConstRoleExternalId:
|
|
continue
|
|
case cred.ConstRoleSessionName:
|
|
continue
|
|
case cred.ConstRoleTags:
|
|
continue
|
|
default:
|
|
badFields[fmt.Sprintf("attributes.%s", s)] = "unrecognized field"
|
|
}
|
|
}
|
|
|
|
if len(badFields) > 0 {
|
|
return nil, errors.InvalidArgumentError("Invalid arguments in storage bucket attributes", badFields)
|
|
}
|
|
|
|
return &StorageAttributes{
|
|
CredentialAttributes: credAttributes,
|
|
EndpointUrl: endpointUrl,
|
|
DualStack: dualStack,
|
|
}, nil
|
|
}
|