@contrast/contrast 2.0.2-beta.3 → 2.0.2-beta.4

package/src/lambda/__mocks__/aws.ts

@@ -1,32 +0,0 @@
-import { Lambda, FunctionConfiguration } from '@aws-sdk/client-lambda'
-import { LambdaOptions } from '../lambda'
-import lambdaConfig from './lambdaConfig.json'
-
-const getLambdaClient = (lambdaOptions: LambdaOptions) => {
-  return {}
-}
-
-const getLambdaFunctionConfiguration = async (
-  client: Lambda,
-  lambdaOptions: LambdaOptions
-) => {
-  return Promise.resolve(lambdaConfig)
-}
-
-const getLayersLinks = async (
-  client: Lambda,
-  functionConfiguration: FunctionConfiguration
-) => {
-  return []
-}
-const getLambdaPolicies = async (
-  functionConfiguration: FunctionConfiguration,
-  lambdaOptions: LambdaOptions
-) => []
-
-export {
-  getLambdaClient,
-  getLambdaFunctionConfiguration,
-  getLayersLinks,
-  getLambdaPolicies
-}

package/src/lambda/__mocks__/lambdaConfig.json

@@ -1,42 +0,0 @@
-{
-  "$metadata": {
-    "httpStatusCode": 200,
-    "requestId": "c1495998-4606-46ba-b4fc-f7d0d165172d",
-    "attempts": 1,
-    "totalRetryDelay": 0
-  },
-  "Code": {
-    "Location": "https://awslambda-eu-cent-1-tasks.s3.eu-central-1.amazonaws.com/snapshots/123456789012/FunctionLambda-90e7680-c598cb5f-6bc9-4107-9fe7-13c126eb3b9e?versionId=ThxUComOVL.qnyEN9Bmi3xzK1JshuKA3&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEGcaDGV1LWNlbnRyYWwtMSJIMEYCIQDAMKTGQ5WEMHM9H7cZQugjEX8QWvq5zRxtXg%2Fz6m9lmAIhAMst%2F5iQkOPJ%2BNfflPiwD4GQchajTfvbNvVeGlz%2BdFi%2FKokECPD%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEQAxoMNjgwNjg2NTU5NDM0IgwPQDJYINU9W7Csw4sq3QO52WKm5PvlVEeLrwstuDqPPKxhdK57A6z2foEF0Bp%2Bz%2Fp%2Flei2DzbpqjPDluzljZmzh3kP8QKPwq25Yk59%2BfXnxlSkHYe3GXO6W6VLBkPk81T0C9keVwdMijW1ZV94KN8qBB17kERR3sFIhBWXJRLhXSAdLREAfNLaE%2FgnP1eC1b5MZCBW46lbjmYHhHshgZJEUD2fy%2BRuOB4HijldLkpHKgZfwiD0ICXkvxF5NQT6tUhlQPNN%2BCrC2RQ0NSkmjXiaL2BXaDxaQVhZwMTGzBEyLAonA9bSisObWrVEjJcC4%2Bqz9ce25l2yYf77lEXWymEp9NvFFcUNAt6tt%2FAm2qMixcLxV0Y2NuBUBjIvPnNnTvBop%2FvAC1Rh6033AmWpmkK0tD65wEsTS4XAEtnD%2B%2Bku4r6kzatRJ88Lq9YOTbjs%2BMEccy9YIFp7Rwf2%2Bdw3EKHSqz4aB0R9KYa07NooZ%2Bym1VZWfGLfhFRJwKRLk3qKkY%2Bj4laizIE%2BBgqC7f7%2FYXcFk8RGX8vlX5y%2BMKWhBXoMPqAPG7ruoG1RbjQX8TEJvuG0G8c5x76fRjB2VRlykY78wa7%2B83a8oBqMfojq7hQWByNv%2B13KHVIIqrG87tL%2BtrmS7GAoils0vXf0Mvowqt6RkgY6pAGKzTtWpXiIhFLe5n2CNNDMuT9xCSCpQIWf2M9GcNabj%2FAUHIa81gvZwuHzB6DYpEj2cZ7wO22Ve%2FRLIrzdkBROoRYnT0GFevXUJAoO2WolWU13JS7owlBPTW7aET6o7fHJUhwAxPZPCp1cSaFMO5cDN%2BTOVm7V6P4es6m87S1yozp5SzHx3KblhJJF6krPHX6YCWC%2B%2FAu9tu7PqgiZ3RQTZ26f4A%3D%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20220330T153702Z&X-Amz-SignedHeaders=host&X-Amz-Expires=600&X-Amz-Credential=ASIAZ47AUUDFFU2TD45R%2F20220330%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Signature=4f9187001f127561afee310d9a127acacb5064c51688f7cd65f98ccb0a7aaa10",
-    "RepositoryType": "S3"
-  },
-  "Configuration": {
-    "Architectures": ["x86_64"],
-    "CodeSha256": "KNNSfx0YOrZ+pG3fK0qbGBJv/b8V0/gWFFkFw581i4o=",
-    "CodeSize": 39577174,
-    "DeadLetterConfig": {
-      "TargetArn": "arn:aws:sqs:eu-central-1:123456789012:devlocaleuDeadLetterQ-89016d3"
-    },
-    "Description": "",
-    "Environment": {
-      "Variables": {
-        "EVENTS_BUCKET": "devlocaleu-cn-events-4h6eig-eu-central-1-1676820",
-        "AGENTS_TABLE": "devlocaleu.agent.agents"
-      }
-    },
-    "EphemeralStorage": { "Size": 512 },
-    "FunctionArn": "arn:aws:lambda:eu-central-1:123456789012:function:FunctionLambda-90e7680",
-    "FunctionName": "FunctionLambda-90e7680",
-    "Handler": "com.contrastsecurity.scan.ScanHandler::handleEventDataWithContext",
-    "LastModified": "2022-03-28T11:14:56.000+0000",
-    "LastUpdateStatus": "Successful",
-    "MemorySize": 1024,
-    "PackageType": "Zip",
-    "RevisionId": "d174710a-23ff-499b-a7ba-61036beabd7a",
-    "Role": "arn:aws:iam::123456789012:role/Function_Role",
-    "Runtime": "java11",
-    "State": "Active",
-    "Timeout": 900,
-    "TracingConfig": { "Mode": "PassThrough" },
-    "Version": "$LATEST"
-  }
-}

package/src/lambda/analytics.ts

@@ -1,9 +0,0 @@
-import { getHttpClient } from '../utils/commonApi'
-import { getAuth } from '../utils/paramsUtil/paramHandler'
-import { AnalyticsOption } from './types'
-
-export const postAnalytics = (data: AnalyticsOption, provider = 'aws') => {
-  const config = getAuth()
-  const client = getHttpClient(config)
-  return client.postAnalyticsFunction(config, provider, data)
-}

package/src/lambda/arn.ts

@@ -1,33 +0,0 @@
-import { CliError } from './cliError'
-import { ERRORS } from './constants'
-
-type ARN = {
-  partition: string
-  service: string
-  region: string
-  accountId: string
-  resource: string
-  resourceId?: string
-}
-
-const ARN_REGEX =
-  /arn:(?<partition>[^:\n]*):(?<service>[^:\n]*):(?<region>[^:\n]*):(?<accountId>[^:\n]*):(?<ignore>(?<resource>[^:/\n]*)[:/])?(?<resourceId>.*)/
-
-const parseARN = (arn: string | undefined) => {
-  if (!arn) {
-    throw new CliError(ERRORS.FAILED_TO_START_SCAN, {
-      errorCode: 'failedToParseArn'
-    })
-  }
-
-  const arnMatch = arn.match(ARN_REGEX)
-  if (!arnMatch) {
-    throw new CliError(ERRORS.FAILED_TO_START_SCAN, {
-      errorCode: 'failedToParseArn'
-    })
-  }
-
-  return arnMatch.groups as ARN
-}
-
-export { parseARN, ARN }

package/src/lambda/aws.ts

@@ -1,248 +0,0 @@
-import i18n from 'i18n'
-import {
-  Lambda,
-  GetFunctionCommand,
-  GetLayerVersionByArnCommand,
-  FunctionConfiguration,
-  ResourceNotFoundException,
-  LambdaServiceException
-} from '@aws-sdk/client-lambda'
-import {
-  GetRolePolicyCommand,
-  IAMClient,
-  paginateListRolePolicies,
-  paginateListAttachedRolePolicies,
-  GetPolicyCommand,
-  GetPolicyVersionCommand
-} from '@aws-sdk/client-iam'
-import { fromIni } from '@aws-sdk/credential-provider-ini'
-import { RegionInputConfig } from '@aws-sdk/config-resolver/dist-types/regionConfig/resolveRegionConfig'
-import { EndpointsInputConfig } from '@aws-sdk/config-resolver/dist-types/endpointsConfig/resolveEndpointsConfig'
-import { AwsAuthInputConfig } from '@aws-sdk/middleware-signing/dist-types/configurations'
-import { CliError } from './cliError'
-import { LambdaOptions } from './lambda'
-import { ERRORS } from './constants'
-
-type AWSClientConfig = RegionInputConfig &
-  EndpointsInputConfig &
-  AwsAuthInputConfig
-
-const getAwsClientOptions = ({
-  region,
-  endpointUrl,
-  profile
-}: LambdaOptions): AWSClientConfig => {
-  const credentials = profile ? fromIni({ profile }) : undefined
-  return {
-    region: region || process.env.AWS_DEFAULT_REGION,
-    endpoint: endpointUrl,
-    credentials
-  }
-}
-
-const getLambdaClient = (lambdaOptions: LambdaOptions) => {
-  try {
-    const clientOptions = getAwsClientOptions(lambdaOptions)
-    return new Lambda(clientOptions)
-  } catch (error) {
-    throw new CliError(ERRORS.AWS_ERROR, {
-      description: (error as Error).message
-    })
-  }
-}
-
-const getIAMClient = (lambdaOptions: LambdaOptions) => {
-  const clientOptions = getAwsClientOptions(lambdaOptions)
-  return new IAMClient(clientOptions)
-}
-
-const getLambdaFunctionConfiguration = async (
-  client: Lambda,
-  lambdaOptions: LambdaOptions
-) => {
-  const { functionName: FunctionName } = lambdaOptions
-  const getFunctionCommand = new GetFunctionCommand({ FunctionName })
-  try {
-    return await client.send(getFunctionCommand)
-  } catch (error) {
-    throwAwsError(error)
-  }
-}
-
-const getLayersLinks = async (
-  client: Lambda,
-  functionConfiguration: FunctionConfiguration
-) => {
-  const { Layers: layers = [] } = functionConfiguration
-  const resultPromises = layers.map(async layerDict => {
-    try {
-      const layerArn = layerDict.Arn
-      const getLayerVersionByArnCommand = new GetLayerVersionByArnCommand({
-        Arn: layerArn
-      })
-      const layer = await client.send(getLayerVersionByArnCommand)
-      return {
-        Arn: layerArn,
-        Location: layer.Content?.Location
-      }
-    } catch (e) {
-      if (e instanceof ResourceNotFoundException) {
-        e.message = i18n.__('layerNotFound', {
-          layerArn: layerDict.Arn || 'unknown_arn'
-        })
-        throw e
-      }
-      throw e
-    }
-  })
-  const results = await Promise.allSettled(resultPromises)
-  const validLayers = results.filter(layerResult => {
-    if (layerResult.status === 'rejected') {
-      console.warn(layerResult.reason.message)
-      return false
-    }
-    return true
-  })
-  // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-  // @ts-ignore: value is not recognized
-  return validLayers.map(layer => layer.value)
-}
-
-const getLambdaPolicies = async (
-  functionConfiguration: FunctionConfiguration,
-  lambdaOptions: LambdaOptions
-) => {
-  const { Role: roleArn } = functionConfiguration
-  const roleSplitList = roleArn?.split('/')
-
-  if (roleSplitList) {
-    const roleName = roleSplitList[roleSplitList.length - 1]
-    const client = exports.getIAMClient(lambdaOptions)
-    const rolePolicies = await getRolePolicies(roleName, client)
-    const attachedPolicies = await getAttachedPolicies(roleName, client)
-    return [...rolePolicies, ...attachedPolicies]
-  }
-}
-
-const getRolePolicyNames = async (roleName: string, client: IAMClient) => {
-  const listRolePolicyNames = []
-
-  try {
-    for await (const page of paginateListRolePolicies(
-      { client },
-      { RoleName: roleName }
-    )) {
-      if (page.PolicyNames) {
-        listRolePolicyNames.push(...page.PolicyNames)
-      }
-    }
-  } catch (error) {
-    throwAwsError(error)
-  }
-
-  return listRolePolicyNames
-}
-
-const getAttachedPolicyNames = async (roleName: string, client: IAMClient) => {
-  const listAttachedPolicies = []
-  for await (const page of paginateListAttachedRolePolicies(
-    { client },
-    { RoleName: roleName }
-  )) {
-    if (page.AttachedPolicies) {
-      listAttachedPolicies.push(...page.AttachedPolicies)
-    }
-  }
-  return listAttachedPolicies
-}
-
-const getRolePolicies = async (roleName: string, client: IAMClient) => {
-  const listRolePolicyNames = await exports.getRolePolicyNames(roleName, client)
-
-  if (listRolePolicyNames) {
-    const rolePoliciesPromises = listRolePolicyNames.map(
-      async (policyName: any) => {
-        const getRolePolicyCommand = new GetRolePolicyCommand({
-          PolicyName: policyName,
-          RoleName: roleName
-        })
-
-        const rolePolicy = await client.send(getRolePolicyCommand)
-        const policyDoc = JSON.parse(
-          decodeURIComponent(rolePolicy?.PolicyDocument || '{}')
-        )
-        policyDoc.PolicyName = policyName
-        return policyDoc
-      }
-    )
-
-    const rolePolicies = await Promise.all(rolePoliciesPromises)
-    return rolePolicies
-  }
-
-  return []
-}
-
-const getAttachedPolicies = async (roleName: string, client: IAMClient) => {
-  const listAttachedPolicies = await exports.getAttachedPolicyNames(
-    roleName,
-    client
-  )
-  const attachedPoliciesPromises = listAttachedPolicies.map(
-    async (policyDict: { PolicyArn: any; PolicyName: any }) => {
-      const { PolicyArn, PolicyName } = policyDict
-      const getPolicyCommand = new GetPolicyCommand({ PolicyArn })
-      const policy = await client.send(getPolicyCommand)
-
-      if (policy.Policy) {
-        const getPolicyVersionCommand = new GetPolicyVersionCommand({
-          PolicyArn: policy.Policy.Arn,
-          VersionId: policy.Policy.DefaultVersionId
-        })
-        const policyVersion = await client.send(getPolicyVersionCommand)
-        const policyDoc = JSON.parse(
-          decodeURIComponent(policyVersion?.PolicyVersion?.Document || '{}')
-        )
-
-        policyDoc['PolicyName'] = PolicyName
-        policyDoc['PolicyArn'] = PolicyArn
-        return policyDoc
-      }
-    }
-  )
-
-  const attachedPolicies = await Promise.all(attachedPoliciesPromises)
-  return attachedPolicies
-}
-
-/**
- *
- * @param error any error
- * @returns throw AWS error in union format
- */
-const throwAwsError = (error: any) => {
-  const serviceError = error as LambdaServiceException
-
-  if (error instanceof Error && serviceError.$metadata) {
-    const { httpStatusCode } = serviceError.$metadata
-    const { message } = error
-
-    throw new CliError(ERRORS.AWS_ERROR, {
-      statusCode: httpStatusCode,
-      description: message
-    })
-  }
-
-  throw error
-}
-
-export {
-  getAttachedPolicyNames,
-  getRolePolicyNames,
-  getIAMClient,
-  getLambdaClient,
-  getLambdaFunctionConfiguration,
-  getLayersLinks,
-  getLambdaPolicies,
-  throwAwsError
-}

package/src/lambda/cliError.ts

@@ -1,72 +0,0 @@
-import i18n from 'i18n'
-import * as errorHandling from '../common/errorHandling'
-
-type ErrorDetails = {
-  statusCode?: number // API statusCode
-  errorCode?: string // internal errorCode
-  description?: string // free usage
-  data?: any //
-}
-
-class CliError extends Error {
-  statusCode?: number
-  errorCode?: string
-  description?: string
-  data?: any
-
-  statusCodeDescription?: string
-  errorCodeDescription?: string
-
-  constructor(headerMessage: string, details?: ErrorDetails) {
-    const message = i18n.__(headerMessage || '')
-    super(message)
-
-    const { statusCode, errorCode, data, description } = details || {}
-
-    this.statusCode = statusCode
-    this.errorCode = errorCode
-    this.data = data
-    this.description = description
-
-    if (errorCode) {
-      this.errorCodeDescription = i18n.__(errorCode || '')
-    }
-
-    if (statusCode) {
-      this.statusCodeDescription = this.getMessageByStatusCode(statusCode)
-    }
-  }
-
-  getErrorMessage() {
-    let finalDesc =
-      this.errorCodeDescription || this.statusCodeDescription || ''
-
-    if (this.description) {
-      finalDesc += finalDesc ? `\n${this.description}` : this.description
-    }
-    return errorHandling.getErrorMessage(this.message, finalDesc)
-  }
-
-  getMessageByStatusCode(statusCode: number) {
-    switch (statusCode) {
-      case 200:
-        return ''
-      case 400:
-        return i18n.__('badRequestErrorHeader')
-      case 401:
-        return i18n.__('unauthenticatedErrorHeader')
-      case 403:
-        return i18n.__('forbiddenRequestErrorHeader')
-      case 404:
-        return i18n.__('not_found_404')
-      case 423:
-        return i18n.__('resourceLockedErrorHeader')
-      case 500:
-        return i18n.__('internalServerErrorHeader')
-      default:
-        return i18n.__('something_went_wrong')
-    }
-  }
-}
-
-export { CliError }

package/src/lambda/constants.ts

@@ -1,11 +0,0 @@
-// TODO: don't forget to add translation in `src/constants/lambda.js` for each value
-
-const ERRORS = Object.freeze({
-  AWS_ERROR: 'awsError',
-  FAILED_TO_START_SCAN: 'failedToStartScan',
-  FAILED_TO_GET_SCAN: 'failedToGetScan',
-  FAILED_TO_GET_RESULTS: 'failedToGetResults',
-  VALIDATION_FAILED: 'validationFailed'
-})
-
-export { ERRORS }

package/src/lambda/help.ts

@@ -1,92 +0,0 @@
-import commandLineUsage from 'command-line-usage'
-import i18n from 'i18n'
-import { commonHelpLinks } from '../common/commonHelp'
-
-const lambdaUsageGuide = commandLineUsage([
-  {
-    header: i18n.__('constantsHeader')
-  },
-  {
-    header: i18n.__('lambdaHeader'),
-    content: [i18n.__('lambdaSummary')]
-  },
-  {
-    header: i18n.__('constantsPrerequisitesHeader'),
-    content: [
-      '{bold ' +
-        i18n.__('lambdaPrerequisitesContentLambdaLanguages') +
-        '}\n\n' +
-        '{bold ' +
-        i18n.__('lambdaPrerequisitesContentLambdaDescriptionTitle') +
-        '}' +
-        i18n.__('lambdaPrerequisitesContentLambdaDescription')
-    ]
-  },
-  {
-    header: i18n.__('constantsUsage'),
-    content: [i18n.__('lambdaUsage')]
-  },
-  {
-    header: i18n.__('constantsOptions'),
-    content: [
-      {
-        name: '{bold ' + i18n.__('lambdaFunctionNameOption') + '}',
-        summary: i18n.__('lambdaFunctionNameSummery')
-      },
-      {
-        name: '{bold ' + i18n.__('lambdaListFunctionsOption') + '}',
-        summary: i18n.__('lambdaListFunctionsSummery')
-      },
-      {
-        name: '{bold ' + i18n.__('lambdaEndpointOption') + '}',
-        summary:
-          '{bold ' +
-          i18n.__('constantsOptional') +
-          '}: ' +
-          i18n.__('lambdaEndpointSummery')
-      },
-      {
-        name: '{bold ' + i18n.__('lambdaRegionOption') + '}',
-        summary:
-          '{bold ' +
-          i18n.__('constantsOptional') +
-          '}: ' +
-          i18n.__('lambdaRegionSummery')
-      },
-      {
-        name: '{bold ' + i18n.__('lambdaProfileOption') + '}',
-        summary:
-          '{bold ' +
-          i18n.__('constantsOptional') +
-          '}: ' +
-          i18n.__('lambdaProfileSummery')
-      },
-      {
-        name: '{bold ' + i18n.__('lambdaJsonOption') + '}',
-        summary:
-          '{bold ' +
-          i18n.__('constantsOptional') +
-          '}: ' +
-          i18n.__('lambdaJsonSummery')
-      },
-      {
-        name: '{bold ' + i18n.__('lambdaVerboseOption') + '}',
-        summary:
-          '{bold ' +
-          i18n.__('constantsOptional') +
-          '}: ' +
-          i18n.__('lambdaVerbosSummery')
-      }
-    ]
-  },
-  {
-    content: [
-      { name: i18n.__('lambdaHelpOption'), summary: i18n.__('helpSummary') }
-    ]
-  },
-  commonHelpLinks()[0],
-  commonHelpLinks()[1],
-  commonHelpLinks()[2]
-])
-
-export { lambdaUsageGuide }