Skip to content

Commit

Permalink
feat(IAMAssumeAuthenticator): introduce a new authenticator (#211)
Browse files Browse the repository at this point in the history
This commit introduces the new `IAMAssumeAuthenticator` which will fetch an IAM access token using the IAM `get_token` operation's "assume" grant type. The resulting access token allows the application to assume the identity of a trusted profile, similar to the "sudo" feature of Linux.

Signed-off-by: Norbert Biczo <pyrooka@users.noreply.github.com>
  • Loading branch information
pyrooka authored Oct 15, 2024
1 parent dc37d94 commit 29a8eb7
Show file tree
Hide file tree
Showing 21 changed files with 1,084 additions and 33 deletions.
104 changes: 95 additions & 9 deletions .secrets.baseline
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"files": "package-lock.json|^.secrets.baseline$",
"lines": null
},
"generated_at": "2024-09-16T18:49:02Z",
"generated_at": "2024-10-10T16:00:10Z",
"plugins_used": [
{
"name": "AWSKeyDetector"
Expand Down Expand Up @@ -70,23 +70,55 @@
"hashed_secret": "91dfd9ddb4198affc5c194cd8ce6d338fde470e2",
"is_secret": false,
"is_verified": false,
"line_number": 65,
"line_number": 66,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "4f51cde3ac0a5504afa4bc06859b098366592c19",
"is_secret": false,
"is_verified": false,
"line_number": 207,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "e87559ed7decb62d0733ae251ae58d42a55291d8",
"is_secret": false,
"is_verified": false,
"line_number": 209,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "12f4a68ed3d0863e56497c9cdb1e2e4e91d5cb68",
"is_secret": false,
"is_verified": false,
"line_number": 273,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "c837b75d7cd93ef9c2243ca28d6e5156259fd253",
"is_secret": false,
"is_verified": false,
"line_number": 277,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "98635b2eaa2379f28cd6d72a38299f286b81b459",
"is_secret": false,
"is_verified": false,
"line_number": 387,
"line_number": 502,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "47fcf185ee7e15fe05cae31fbe9e4ebe4a06a40d",
"is_secret": false,
"is_verified": false,
"line_number": 482,
"line_number": 597,
"type": "Secret Keyword",
"verified_result": null
}
Expand All @@ -96,7 +128,7 @@
"hashed_secret": "fdee05598fdd57ff8e9ae29e92c25a04f2c52fa6",
"is_secret": false,
"is_verified": false,
"line_number": 30,
"line_number": 31,
"type": "Secret Keyword",
"verified_result": null
}
Expand Down Expand Up @@ -151,6 +183,16 @@
"verified_result": null
}
],
"resources/ibm-credentials-iam-assume.env": [
{
"hashed_secret": "f2e7745f43b0ef0e2c2faf61d6c6a28be2965750",
"is_secret": false,
"is_verified": false,
"line_number": 2,
"type": "Secret Keyword",
"verified_result": null
}
],
"resources/ibm-credentials-iam.env": [
{
"hashed_secret": "b9cad336062c0dc3bb30145b1a6697fccfe755a6",
Expand Down Expand Up @@ -299,6 +341,50 @@
"verified_result": null
}
],
"test/test_iam_assume_authenticator.py": [
{
"hashed_secret": "4080eeeaf54faf879b9e8d99c49a8503f7e855bb",
"is_secret": false,
"is_verified": false,
"line_number": 17,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "37e94c31b6a756ba2afd2fe9a9765172cd79ac47",
"is_secret": false,
"is_verified": false,
"line_number": 102,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "da2f27d2c57a0e1ed2dc3a34b4ef02faf2f7a4c2",
"is_secret": false,
"is_verified": false,
"line_number": 123,
"type": "Hex High Entropy String",
"verified_result": null
}
],
"test/test_iam_assume_token_manager.py": [
{
"hashed_secret": "da2f27d2c57a0e1ed2dc3a34b4ef02faf2f7a4c2",
"is_secret": false,
"is_verified": false,
"line_number": 62,
"type": "Hex High Entropy String",
"verified_result": null
},
{
"hashed_secret": "37e94c31b6a756ba2afd2fe9a9765172cd79ac47",
"is_secret": false,
"is_verified": false,
"line_number": 205,
"type": "Secret Keyword",
"verified_result": null
}
],
"test/test_iam_authenticator.py": [
{
"hashed_secret": "4080eeeaf54faf879b9e8d99c49a8503f7e855bb",
Expand Down Expand Up @@ -426,31 +512,31 @@
"hashed_secret": "34a0a47a51d5bf739df0214450385e29ee7e9847",
"is_secret": false,
"is_verified": false,
"line_number": 439,
"line_number": 453,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "f2e7745f43b0ef0e2c2faf61d6c6a28be2965750",
"is_secret": false,
"is_verified": false,
"line_number": 450,
"line_number": 464,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "2863fa4b5510c46afc2bd2998dfbc0cf3d6df032",
"is_secret": false,
"is_verified": false,
"line_number": 531,
"line_number": 545,
"type": "Secret Keyword",
"verified_result": null
},
{
"hashed_secret": "b9cad336062c0dc3bb30145b1a6697fccfe755a6",
"is_secret": false,
"is_verified": false,
"line_number": 592,
"line_number": 606,
"type": "Secret Keyword",
"verified_result": null
}
Expand Down
Loading

0 comments on commit 29a8eb7

Please sign in to comment.