Detect outdated AWS roles and notify the user

goadapp · Jul 19, 2017 · 8575526 · 8575526
1 parent 2e9975a
commit 8575526
Show file tree

Hide file tree

Showing 78 changed files with 15,891 additions and 1 deletion.
diff --git a/Gopkg.lock b/Gopkg.lock
diff --git a/infrastructure/aws/aws.go b/infrastructure/aws/aws.go
@@ -7,8 +7,11 @@ import (
 	"encoding/json"
 	"fmt"
 	"io"
+	"os"
 	"path"
+	"time"
 
+	"github.com/Songmu/prompter"
 	"github.com/aws/aws-sdk-go/aws"
 	"github.com/aws/aws-sdk-go/aws/awserr"
 	"github.com/aws/aws-sdk-go/aws/session"
@@ -20,6 +23,10 @@ import (
 	uuid "github.com/satori/go.uuid"
 )
 
+var (
+	roleDate = time.Date(2017, 07, 13, 18, 40, 0, 0, time.UTC)
+)
+
 // AwsInfrastructure manages the resource creation and updates necessary to use
 // Goad.
 type AwsInfrastructure struct {
@@ -281,9 +288,18 @@ func (infra *AwsInfrastructure) createIAMLambdaRole(roleName string) (arn string
 		return "", err
 	}
 
+	CheckRoleDate(resp.Role)
 	return *resp.Role.Arn, nil
 }
 
+func CheckRoleDate(role *iam.Role) {
+	if role.CreateDate.Before(roleDate) {
+		if !prompter.YN("Your IAM role for goad might be outdated, continue anyways?", true) {
+			os.Exit(0)
+		}
+	}
+}
+
 func (infra *AwsInfrastructure) createIAMLambdaRolePolicy(roleName string) error {
 	svc := iam.New(session.New(), infra.config)
 

diff --git a/vendor/github.com/Songmu/prompter/.travis.yml b/vendor/github.com/Songmu/prompter/.travis.yml
diff --git a/vendor/github.com/Songmu/prompter/LICENSE b/vendor/github.com/Songmu/prompter/LICENSE
diff --git a/vendor/github.com/Songmu/prompter/Makefile b/vendor/github.com/Songmu/prompter/Makefile
diff --git a/vendor/github.com/Songmu/prompter/README.md b/vendor/github.com/Songmu/prompter/README.md
diff --git a/vendor/github.com/Songmu/prompter/exam_test.go b/vendor/github.com/Songmu/prompter/exam_test.go
diff --git a/vendor/github.com/Songmu/prompter/funcs.go b/vendor/github.com/Songmu/prompter/funcs.go
diff --git a/vendor/github.com/Songmu/prompter/funcs_test.go b/vendor/github.com/Songmu/prompter/funcs_test.go