Update veracode aws cli
This commit is contained in:
parent
b71d16c7cf
commit
a12585068a
@ -222,6 +222,188 @@ let
|
|||||||
role = "EngineerAdmin";
|
role = "EngineerAdmin";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
old-world = {
|
||||||
|
"932961976631" = {
|
||||||
|
name = "Veracode Laputa";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"747166839737" = {
|
||||||
|
name = "Alternator Prod";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"849762296401" = {
|
||||||
|
name = "aws-cloudloop";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"555828001259" = {
|
||||||
|
name = "aws-devops";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"095180515219" = {
|
||||||
|
name = "aws-disco-dev";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"602400992919" = {
|
||||||
|
name = "aws-disco-prod";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"671440995558" = {
|
||||||
|
name = "aws-mpt";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"390809507444" = {
|
||||||
|
name = "aws-research";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"547681985753" = {
|
||||||
|
name = "aws-static-dev";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"576836758243" = {
|
||||||
|
name = "aws-static-prod";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"272739225222" = {
|
||||||
|
name = "Greenlight Dev";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"187309115203" = {
|
||||||
|
name = "Greenlight Prod";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"312566581319" = {
|
||||||
|
name = "mvsa-prod";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"528304698271" = {
|
||||||
|
name = "ops1";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"178484873978" = {
|
||||||
|
name = "ops2";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"036935693235" = {
|
||||||
|
name = "platform-integrations-dev";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"101042440253" = {
|
||||||
|
name = "platform-integrations-prod";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"769404944768" = {
|
||||||
|
name = "Veracode GovCloud Parent Staging";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"227458413628" = {
|
||||||
|
name = "veracode-asc-ilt";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"637659597440" = {
|
||||||
|
name = "veracode-dataservices-dev";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"360252896736" = {
|
||||||
|
name = "veracode-dataservices-production";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"634743813634" = {
|
||||||
|
name = "veracode-elearning-nonprod";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"231131777030" = {
|
||||||
|
name = "veracode-gov-parent-nonproduction";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"391700338873" = {
|
||||||
|
name = "veracode-gov-parent-production";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"083679226615" = {
|
||||||
|
name = "veracode-hackathon";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"228885042232" = {
|
||||||
|
name = "veracode-info-sec";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"653330403905" = {
|
||||||
|
name = "veracode-mpt-mffc";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"566201213358" = {
|
||||||
|
name = "veracode-nonproduction";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"518031149952" = {
|
||||||
|
name = "veracode-production";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"966752150300" = {
|
||||||
|
name = "veracode-qaoncloud-nonproduction";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"221433242586" = {
|
||||||
|
name = "veracode-solutions-architect";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
"576647558819" = {
|
||||||
|
name = "VeraRadio";
|
||||||
|
role = "EngineerAdmin";
|
||||||
|
};
|
||||||
|
|
||||||
|
};
|
||||||
|
|
||||||
|
longbow = {
|
||||||
|
"520315734741" = {
|
||||||
|
name = "Audit";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
"853528449373" = {
|
||||||
|
name = "demo";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
"058887878640" = {
|
||||||
|
name = "Dev";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
"539590419140" = {
|
||||||
|
name = "Hans Gruber";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
"048352314288" = {
|
||||||
|
name = "Log archive";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
"066179854877" = {
|
||||||
|
name = "Production";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
"388353868666" = {
|
||||||
|
name = "SaaS Seller Account";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
"057168112839" = {
|
||||||
|
name = "Sandbox";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
"704459292453" = {
|
||||||
|
name = "Shared Services";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
"108911762463" = {
|
||||||
|
name = "Staging";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
"252894127310" = {
|
||||||
|
name = "TalonX";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
"932480454180" = {
|
||||||
|
name = "Test Customer";
|
||||||
|
role = "AWS-Engineer-Admin";
|
||||||
|
};
|
||||||
|
};
|
||||||
};
|
};
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
@ -240,16 +422,26 @@ in
|
|||||||
sso_region = eu-central-1
|
sso_region = eu-central-1
|
||||||
sso_registration_scopes = sso:account:access
|
sso_registration_scopes = sso:account:access
|
||||||
|
|
||||||
|
[sso-session veracode-old-world]
|
||||||
|
sso_start_url = https://d-90679ac9ea.awsapps.com/start
|
||||||
|
sso_region = us-east-1
|
||||||
|
sso_registration_scopes = sso:account:access
|
||||||
|
|
||||||
|
[sso-session veracode-longbow]
|
||||||
|
sso_start_url = https://d-90677f445e.awsapps.com/start
|
||||||
|
sso_region = eu-central-1
|
||||||
|
sso_registration_scopes = sso:account:access
|
||||||
|
|
||||||
${builtins.concatStringsSep "\n" (
|
${builtins.concatStringsSep "\n" (
|
||||||
lib.mapAttrsToList (id: account: ''
|
lib.mapAttrsToList (id: account: ''
|
||||||
[profile ${account.name}]
|
[profile ${builtins.replaceStrings [ " " ] [ "" ] account.name}]
|
||||||
sso_account_id = ${id}
|
sso_account_id = ${id}
|
||||||
sso_role_name = ${account.role}
|
sso_role_name = ${account.role}
|
||||||
sso_session = veracode-us
|
sso_session = veracode-us
|
||||||
region = us-east-1
|
region = us-east-1
|
||||||
output = json
|
output = json
|
||||||
|
|
||||||
[profile us-${account.name}]
|
[profile us-${builtins.replaceStrings [ " " ] [ "" ] account.name}]
|
||||||
sso_account_id = ${id}
|
sso_account_id = ${id}
|
||||||
sso_role_name = ${account.role}
|
sso_role_name = ${account.role}
|
||||||
sso_session = veracode-us
|
sso_session = veracode-us
|
||||||
@ -260,16 +452,21 @@ in
|
|||||||
|
|
||||||
${builtins.concatStringsSep "\n" (
|
${builtins.concatStringsSep "\n" (
|
||||||
lib.mapAttrsToList (id: account: ''
|
lib.mapAttrsToList (id: account: ''
|
||||||
${if lib.any (usAccount: usAccount.name == account.name) (lib.attrValues accounts.us) then "" else ''
|
${
|
||||||
[profile ${account.name}]
|
if lib.any (usAccount: usAccount.name == account.name) (lib.attrValues accounts.us) then
|
||||||
|
""
|
||||||
|
else
|
||||||
|
''
|
||||||
|
[profile ${builtins.replaceStrings [ " " ] [ "" ] account.name}]
|
||||||
sso_account_id = ${id}
|
sso_account_id = ${id}
|
||||||
sso_role_name = ${account.role}
|
sso_role_name = ${account.role}
|
||||||
sso_session = veracode-eu
|
sso_session = veracode-eu
|
||||||
region = eu-central-1
|
region = eu-central-1
|
||||||
output = json
|
output = json
|
||||||
''}
|
''
|
||||||
|
}
|
||||||
|
|
||||||
[profile eu-${account.name}]
|
[profile eu-${builtins.replaceStrings [ " " ] [ "" ] account.name}]
|
||||||
sso_account_id = ${id}
|
sso_account_id = ${id}
|
||||||
sso_role_name = ${account.role}
|
sso_role_name = ${account.role}
|
||||||
sso_session = veracode-eu
|
sso_session = veracode-eu
|
||||||
@ -277,6 +474,64 @@ in
|
|||||||
output = json
|
output = json
|
||||||
'') accounts.eu
|
'') accounts.eu
|
||||||
)}
|
)}
|
||||||
|
|
||||||
|
${builtins.concatStringsSep "\n" (
|
||||||
|
lib.mapAttrsToList (id: account: ''
|
||||||
|
${
|
||||||
|
if
|
||||||
|
lib.any (otherAccount: otherAccount.name == account.name) (
|
||||||
|
lib.attrValues (accounts.us // accounts.eu)
|
||||||
|
)
|
||||||
|
then
|
||||||
|
""
|
||||||
|
else
|
||||||
|
''
|
||||||
|
[profile ${builtins.replaceStrings [ " " ] [ "" ] account.name}]
|
||||||
|
sso_account_id = ${id}
|
||||||
|
sso_role_name = ${account.role}
|
||||||
|
sso_session = veracode-old-world
|
||||||
|
region = eu-central-1
|
||||||
|
output = json
|
||||||
|
''
|
||||||
|
}
|
||||||
|
|
||||||
|
[profile old-world-${builtins.replaceStrings [ " " ] [ "" ] account.name}]
|
||||||
|
sso_account_id = ${id}
|
||||||
|
sso_role_name = ${account.role}
|
||||||
|
sso_session = veracode-old-world
|
||||||
|
region = eu-central-1
|
||||||
|
output = json
|
||||||
|
'') accounts.old-world
|
||||||
|
)}
|
||||||
|
|
||||||
|
${builtins.concatStringsSep "\n" (
|
||||||
|
lib.mapAttrsToList (id: account: ''
|
||||||
|
${
|
||||||
|
if
|
||||||
|
lib.any (otherAccount: otherAccount.name == account.name) (
|
||||||
|
lib.attrValues (accounts.us // accounts.eu // accounts.old-world)
|
||||||
|
)
|
||||||
|
then
|
||||||
|
""
|
||||||
|
else
|
||||||
|
''
|
||||||
|
[profile ${builtins.replaceStrings [ " " ] [ "" ] account.name}]
|
||||||
|
sso_account_id = ${id}
|
||||||
|
sso_role_name = ${account.role}
|
||||||
|
sso_session = veracode-longbow
|
||||||
|
region = eu-central-1
|
||||||
|
output = json
|
||||||
|
''
|
||||||
|
}
|
||||||
|
|
||||||
|
[profile longbow-${builtins.replaceStrings [ " " ] [ "" ] account.name}]
|
||||||
|
sso_account_id = ${id}
|
||||||
|
sso_role_name = ${account.role}
|
||||||
|
sso_session = veracode-longbow
|
||||||
|
region = eu-central-1
|
||||||
|
output = json
|
||||||
|
'') accounts.longbow
|
||||||
|
)}
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
@ -304,8 +559,9 @@ in
|
|||||||
|
|
||||||
veracode-login = ''${pkgs.writeShellScript "veracode-login" ''
|
veracode-login = ''${pkgs.writeShellScript "veracode-login" ''
|
||||||
for region in us eu; do
|
for region in us eu; do
|
||||||
aws sso login --profile $region-shared-services
|
aws sso login --profile $region-shared-services &
|
||||||
done
|
done
|
||||||
|
aws sso login --profile old-world-aws-devops &
|
||||||
''}'';
|
''}'';
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user