-
Notifications
You must be signed in to change notification settings - Fork 2
Open
Labels
enhancementNew feature or requestNew feature or requeststaleNo recent activity has been detected on this issue/PR and it will be closedNo recent activity has been detected on this issue/PR and it will be closed
Description
Is your feature request related to a problem? Please describe.
To get the latest details from the AWS IAM Credential Report, which Powerpipe dashboards like AWS CIS v4.0.0 rely on, you need to run the aws iam generate-credential-report CLI command ahead of time. Would be great for Flowpipe to have a pipeline to execute this command in the AWS Library Mod.
Describe the solution you'd like
pipelines/iam/generate_iam_credential_report.fp
something like:
pipeline "generate_iam_credential_report" {
title = "Generate IAM Credential Report"
description = "Generates the IAM Credential Report."
param "conn" {
type = connection.aws
description = local.conn_param_description
default = connection.aws.default
}
step "container" "generate_iam_credential_report" {
image = "public.ecr.aws/aws-cli/aws-cli"
cmd = [
"iam",
"generate-credential-report"
]
env = param.conn.env
}
output "status" {
description = "A structure with status details about the credentials report generates."
value = jsondecode(step.container.generate_iam_credential_report.stdout)
}
}
This will go a long way for folks to run a scheduled pipeline locally or in Pipes every x hours to generate the report behind the scenes.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requeststaleNo recent activity has been detected on this issue/PR and it will be closedNo recent activity has been detected on this issue/PR and it will be closed