Skip to content

Commit 29a8eb7

Browse files
authored
feat(IAMAssumeAuthenticator): introduce a new authenticator (#211)
This commit introduces the new `IAMAssumeAuthenticator` which will fetch an IAM access token using the IAM `get_token` operation's "assume" grant type. The resulting access token allows the application to assume the identity of a trusted profile, similar to the "sudo" feature of Linux. Signed-off-by: Norbert Biczo <[email protected]>
1 parent dc37d94 commit 29a8eb7

21 files changed

+1084
-33
lines changed

.secrets.baseline

Lines changed: 95 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"files": "package-lock.json|^.secrets.baseline$",
44
"lines": null
55
},
6-
"generated_at": "2024-09-16T18:49:02Z",
6+
"generated_at": "2024-10-10T16:00:10Z",
77
"plugins_used": [
88
{
99
"name": "AWSKeyDetector"
@@ -70,23 +70,55 @@
7070
"hashed_secret": "91dfd9ddb4198affc5c194cd8ce6d338fde470e2",
7171
"is_secret": false,
7272
"is_verified": false,
73-
"line_number": 65,
73+
"line_number": 66,
74+
"type": "Secret Keyword",
75+
"verified_result": null
76+
},
77+
{
78+
"hashed_secret": "4f51cde3ac0a5504afa4bc06859b098366592c19",
79+
"is_secret": false,
80+
"is_verified": false,
81+
"line_number": 207,
82+
"type": "Secret Keyword",
83+
"verified_result": null
84+
},
85+
{
86+
"hashed_secret": "e87559ed7decb62d0733ae251ae58d42a55291d8",
87+
"is_secret": false,
88+
"is_verified": false,
89+
"line_number": 209,
90+
"type": "Secret Keyword",
91+
"verified_result": null
92+
},
93+
{
94+
"hashed_secret": "12f4a68ed3d0863e56497c9cdb1e2e4e91d5cb68",
95+
"is_secret": false,
96+
"is_verified": false,
97+
"line_number": 273,
98+
"type": "Secret Keyword",
99+
"verified_result": null
100+
},
101+
{
102+
"hashed_secret": "c837b75d7cd93ef9c2243ca28d6e5156259fd253",
103+
"is_secret": false,
104+
"is_verified": false,
105+
"line_number": 277,
74106
"type": "Secret Keyword",
75107
"verified_result": null
76108
},
77109
{
78110
"hashed_secret": "98635b2eaa2379f28cd6d72a38299f286b81b459",
79111
"is_secret": false,
80112
"is_verified": false,
81-
"line_number": 387,
113+
"line_number": 502,
82114
"type": "Secret Keyword",
83115
"verified_result": null
84116
},
85117
{
86118
"hashed_secret": "47fcf185ee7e15fe05cae31fbe9e4ebe4a06a40d",
87119
"is_secret": false,
88120
"is_verified": false,
89-
"line_number": 482,
121+
"line_number": 597,
90122
"type": "Secret Keyword",
91123
"verified_result": null
92124
}
@@ -96,7 +128,7 @@
96128
"hashed_secret": "fdee05598fdd57ff8e9ae29e92c25a04f2c52fa6",
97129
"is_secret": false,
98130
"is_verified": false,
99-
"line_number": 30,
131+
"line_number": 31,
100132
"type": "Secret Keyword",
101133
"verified_result": null
102134
}
@@ -151,6 +183,16 @@
151183
"verified_result": null
152184
}
153185
],
186+
"resources/ibm-credentials-iam-assume.env": [
187+
{
188+
"hashed_secret": "f2e7745f43b0ef0e2c2faf61d6c6a28be2965750",
189+
"is_secret": false,
190+
"is_verified": false,
191+
"line_number": 2,
192+
"type": "Secret Keyword",
193+
"verified_result": null
194+
}
195+
],
154196
"resources/ibm-credentials-iam.env": [
155197
{
156198
"hashed_secret": "b9cad336062c0dc3bb30145b1a6697fccfe755a6",
@@ -299,6 +341,50 @@
299341
"verified_result": null
300342
}
301343
],
344+
"test/test_iam_assume_authenticator.py": [
345+
{
346+
"hashed_secret": "4080eeeaf54faf879b9e8d99c49a8503f7e855bb",
347+
"is_secret": false,
348+
"is_verified": false,
349+
"line_number": 17,
350+
"type": "Secret Keyword",
351+
"verified_result": null
352+
},
353+
{
354+
"hashed_secret": "37e94c31b6a756ba2afd2fe9a9765172cd79ac47",
355+
"is_secret": false,
356+
"is_verified": false,
357+
"line_number": 102,
358+
"type": "Secret Keyword",
359+
"verified_result": null
360+
},
361+
{
362+
"hashed_secret": "da2f27d2c57a0e1ed2dc3a34b4ef02faf2f7a4c2",
363+
"is_secret": false,
364+
"is_verified": false,
365+
"line_number": 123,
366+
"type": "Hex High Entropy String",
367+
"verified_result": null
368+
}
369+
],
370+
"test/test_iam_assume_token_manager.py": [
371+
{
372+
"hashed_secret": "da2f27d2c57a0e1ed2dc3a34b4ef02faf2f7a4c2",
373+
"is_secret": false,
374+
"is_verified": false,
375+
"line_number": 62,
376+
"type": "Hex High Entropy String",
377+
"verified_result": null
378+
},
379+
{
380+
"hashed_secret": "37e94c31b6a756ba2afd2fe9a9765172cd79ac47",
381+
"is_secret": false,
382+
"is_verified": false,
383+
"line_number": 205,
384+
"type": "Secret Keyword",
385+
"verified_result": null
386+
}
387+
],
302388
"test/test_iam_authenticator.py": [
303389
{
304390
"hashed_secret": "4080eeeaf54faf879b9e8d99c49a8503f7e855bb",
@@ -426,31 +512,31 @@
426512
"hashed_secret": "34a0a47a51d5bf739df0214450385e29ee7e9847",
427513
"is_secret": false,
428514
"is_verified": false,
429-
"line_number": 439,
515+
"line_number": 453,
430516
"type": "Secret Keyword",
431517
"verified_result": null
432518
},
433519
{
434520
"hashed_secret": "f2e7745f43b0ef0e2c2faf61d6c6a28be2965750",
435521
"is_secret": false,
436522
"is_verified": false,
437-
"line_number": 450,
523+
"line_number": 464,
438524
"type": "Secret Keyword",
439525
"verified_result": null
440526
},
441527
{
442528
"hashed_secret": "2863fa4b5510c46afc2bd2998dfbc0cf3d6df032",
443529
"is_secret": false,
444530
"is_verified": false,
445-
"line_number": 531,
531+
"line_number": 545,
446532
"type": "Secret Keyword",
447533
"verified_result": null
448534
},
449535
{
450536
"hashed_secret": "b9cad336062c0dc3bb30145b1a6697fccfe755a6",
451537
"is_secret": false,
452538
"is_verified": false,
453-
"line_number": 592,
539+
"line_number": 606,
454540
"type": "Secret Keyword",
455541
"verified_result": null
456542
}

0 commit comments

Comments
 (0)