Add resource IAMRolePolicy to allow deletion of inline policies on roles

resources/iam-role-policy.go

@@ -0,0 +1,64 @@
+package resources
+
+import (
+	"fmt"
+
+	"github.com/aws/aws-sdk-go/aws/session"
+	"github.com/aws/aws-sdk-go/service/iam"
+)
+
+type IAMRolePolicy struct {
+	svc        *iam.IAM
+	roleName   string
+	policyName string
+}
+
+func init() {
+	register("IAMRolePolicy", ListIAMRolePolicies)
+}
+
+func ListIAMRolePolicies(sess *session.Session) ([]Resource, error) {
+	svc := iam.New(sess)
+
+	roles, err := svc.ListRoles(nil)
+	if err != nil {
+		return nil, err
+	}
+
+	resources := make([]Resource, 0)
+	for _, role := range roles.Roles {
+		policies, err := svc.ListRolePolicies(&iam.ListRolePoliciesInput{
+			RoleName: role.RoleName,
+		})
+		if err != nil {
+			return nil, err
+		}
+
+		for _, policyName := range policies.PolicyNames {
+			resources = append(resources, &IAMRolePolicy{
+				svc:        svc,
+				policyName: *policyName,
+				roleName:   *role.RoleName,
+			})
+		}
+	}
+
+	return resources, nil
+}
+
+func (e *IAMRolePolicy) Remove() error {
+	_, err := e.svc.DeleteRolePolicy(
+		&iam.DeleteRolePolicyInput{
+			RoleName:   &e.roleName,
+			PolicyName: &e.policyName,
+		})
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (e *IAMRolePolicy) String() string {
+	return fmt.Sprintf("%s -> %s", e.roleName, e.policyName)
+}