revoke

package

v0.0.1 Latest Latest Go to latest Published: Dec 12, 2019 License: Apache-2.0 Imports: 8 Imported by: 0

Documentation ¶

Overview ¶

Package revoke provides the implementation of automated actions.

Index ¶

func Execute(ctx context.Context, values *Values, services *Services) error
type Services
type Values
- func ReadFinding(b []byte) (*Values, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func Execute ¶

func Execute(ctx context.Context, values *Values, services *Services) error

Execute is the entry point for the IAM revoker Cloud Function.

This automation will remove users from a project's policy if: - The users are believed to be external as reported from the finding provider. - The project where the external users were found are within the set configured resources. - The users do not match the list of allowed domains.

Types ¶

type Services ¶

type Services struct {
	Configuration *services.Configuration
	Resource      *services.Resource
	Logger        *services.Logger
}

Services contains the services needed for this function.

type Values ¶

type Values struct {
	ProjectID       string
	ExternalMembers []string
}

Values contains the required values needed for this function.

func ReadFinding ¶

func ReadFinding(b []byte) (*Values, error)

ReadFinding will attempt to deserialize all supported findings for this function.

Source Files ¶

View all Source files

revoke.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL