Package com.salesforce.multicloudj.iam.aws

Class AwsIam

java.lang.Object

com.salesforce.multicloudj.iam.driver.AbstractIam

com.salesforce.multicloudj.iam.aws.AwsIam

All Implemented Interfaces:

Provider, Identity, AutoCloseable

@AutoService(AbstractIam.class)
public class AwsIam
extends AbstractIam

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	AwsIam.Builder

Field Summary

Fields

Modifier and Type	Field	Description
static String	ALLOW
static String	ARN_AWS_IAM_PREFIX
static String	ARN_PREFIX
static String	AWS_ACCOUNT_ID_REGEX
static com.fasterxml.jackson.databind.ObjectMapper	OBJECT_MAPPER
static String	POLICY_VERSION
static String	ROOT_SUFFIX
static String	SERVICE_PRINCIPAL_SUFFIX
static String	STS_ASSUME_ROLE

Fields inherited from class com.salesforce.multicloudj.iam.driver.AbstractIam

credentialsOverrider, region

Constructor Summary

Constructors

Constructor	Description
AwsIam()
AwsIam(AwsIam.Builder builder)

Method Summary

Modifier and Type	Method	Description
Provider.Builder	builder()	Creates and returns a new Builder instance for this provider.
void	close()
protected void	doAttachInlinePolicy(AttachInlinePolicyRequest request)	Attaches an inline policy to an identity.
protected String	doCreateIdentity(CreateIdentityRequest request)	Create IAM Role with optional Trust Configuration and Create Options.
protected void	doDeleteIdentity(DeleteIdentityRequest request)	Delete IAM Role.
protected List<String>	doGetAttachedPolicies(GetAttachedPoliciesRequest request)	Lists all inline policies attached to an IAM role.
protected String	doGetIdentity(GetIdentityRequest request)	Get IAM Role.
protected String	doGetInlinePolicyDetails(GetInlinePolicyDetailsRequest request)	Get inline policy document attached to an IAM role.
protected void	doRemovePolicy(RemovePolicyRequest request)	Removes an inline policy from an IAM role.
Class<? extends SubstrateSdkException>	getException(Throwable t)	Maps a given Throwable from the provider implementation to a specific SubstrateSdkException.

Methods inherited from class com.salesforce.multicloudj.iam.driver.AbstractIam

attachInlinePolicy, createIdentity, deleteIdentity, getAttachedPolicies, getIdentity, getInlinePolicyDetails, getProviderId, removePolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

POLICY_VERSION

public static final String POLICY_VERSION

See Also:

Constant Field Values

ALLOW

public static final String ALLOW

See Also:

Constant Field Values

STS_ASSUME_ROLE

public static final String STS_ASSUME_ROLE

See Also:

Constant Field Values

ARN_PREFIX

public static final String ARN_PREFIX

See Also:

Constant Field Values

AWS_ACCOUNT_ID_REGEX

public static final String AWS_ACCOUNT_ID_REGEX

See Also:

Constant Field Values

ARN_AWS_IAM_PREFIX

public static final String ARN_AWS_IAM_PREFIX

See Also:

Constant Field Values

ROOT_SUFFIX

public static final String ROOT_SUFFIX

See Also:

Constant Field Values

SERVICE_PRINCIPAL_SUFFIX

public static final String SERVICE_PRINCIPAL_SUFFIX

See Also:

Constant Field Values

OBJECT_MAPPER

public static final com.fasterxml.jackson.databind.ObjectMapper OBJECT_MAPPER

Constructor Detail

AwsIam

public AwsIam(AwsIam.Builder builder)

AwsIam

public AwsIam()

Method Detail

builder

public Provider.Builder builder()

Description copied from interface: Provider

Creates and returns a new Builder instance for this provider.

Returns:

A Builder instance for constructing this provider.

getException

public Class<? extends SubstrateSdkException> getException(Throwable t)

Description copied from interface: Provider

Maps a given Throwable from the provider implementation to a specific SubstrateSdkException. This is used for exception handling abstraction.

Parameters:

t - The Throwable to be mapped.

Returns:

The Class of the corresponding SubstrateSdkException.

close

public void close()
           throws Exception

Throws:

Exception

doCreateIdentity

protected String doCreateIdentity(CreateIdentityRequest request)

Create IAM Role with optional Trust Configuration and Create Options.

Specified by:

doCreateIdentity in class AbstractIam

Parameters:

request - the request containing identity name, description, tenant ID, region, trust config, and options.

Returns:

the IAM role ARN.

doAttachInlinePolicy

protected void doAttachInlinePolicy(AttachInlinePolicyRequest request)

Description copied from class: AbstractIam

Attaches an inline policy to an identity. Provider-specific implementations should override this method.

Specified by:

doAttachInlinePolicy in class AbstractIam

Parameters:

request - the request containing policy document, tenant ID, region, and identity/role names

doGetInlinePolicyDetails

protected String doGetInlinePolicyDetails(GetInlinePolicyDetailsRequest request)

Get inline policy document attached to an IAM role.

Specified by:

doGetInlinePolicyDetails in class AbstractIam

Parameters:

request - the request containing relevant fields from identity name, policy name, role name, tenant ID, and region

Returns:

the inline policy document as a JSON string

doGetAttachedPolicies

protected List<String> doGetAttachedPolicies(GetAttachedPoliciesRequest request)

Lists all inline policies attached to an IAM role.

Specified by:

doGetAttachedPolicies in class AbstractIam

Parameters:

request - the request; AWS uses roleName only (IAM role to list policies for)

Returns:

a list of inline policy names attached to the role.

doRemovePolicy

protected void doRemovePolicy(RemovePolicyRequest request)

Removes an inline policy from an IAM role.

Specified by:

doRemovePolicy in class AbstractIam

Parameters:

request - the request containing identity name, policy name, tenant ID, and region.

doDeleteIdentity

protected void doDeleteIdentity(DeleteIdentityRequest request)

Delete IAM Role.

Specified by:

doDeleteIdentity in class AbstractIam

Parameters:

request - the request containing identity name, tenant ID, and region.

doGetIdentity

protected String doGetIdentity(GetIdentityRequest request)

Get IAM Role.

Specified by:

doGetIdentity in class AbstractIam

Parameters:

request - the request containing identity name, tenant ID, and region.

Returns:

the IAM role ARN.