cartography 0.113.0__py3-none-any.whl → 0.114.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of cartography might be problematic. Click here for more details.

Files changed (69) hide show
  1. cartography/_version.py +2 -2
  2. cartography/cli.py +8 -0
  3. cartography/config.py +4 -0
  4. cartography/data/indexes.cypher +0 -27
  5. cartography/intel/aws/iam.py +741 -492
  6. cartography/intel/aws/organizations.py +7 -8
  7. cartography/intel/aws/permission_relationships.py +4 -16
  8. cartography/intel/azure/__init__.py +16 -0
  9. cartography/intel/azure/app_service.py +105 -0
  10. cartography/intel/azure/functions.py +124 -0
  11. cartography/intel/entra/__init__.py +31 -0
  12. cartography/intel/entra/app_role_assignments.py +277 -0
  13. cartography/intel/entra/applications.py +4 -238
  14. cartography/intel/entra/federation/__init__.py +0 -0
  15. cartography/intel/entra/federation/aws_identity_center.py +77 -0
  16. cartography/intel/entra/service_principals.py +217 -0
  17. cartography/intel/gcp/__init__.py +136 -440
  18. cartography/intel/gcp/clients.py +65 -0
  19. cartography/intel/gcp/compute.py +18 -44
  20. cartography/intel/gcp/crm/__init__.py +0 -0
  21. cartography/intel/gcp/crm/folders.py +108 -0
  22. cartography/intel/gcp/crm/orgs.py +65 -0
  23. cartography/intel/gcp/crm/projects.py +109 -0
  24. cartography/intel/gcp/gke.py +72 -113
  25. cartography/intel/github/__init__.py +41 -0
  26. cartography/intel/github/commits.py +423 -0
  27. cartography/intel/github/repos.py +73 -39
  28. cartography/models/aws/iam/access_key.py +103 -0
  29. cartography/models/aws/iam/account_role.py +24 -0
  30. cartography/models/aws/iam/federated_principal.py +60 -0
  31. cartography/models/aws/iam/group.py +60 -0
  32. cartography/models/aws/iam/group_membership.py +26 -0
  33. cartography/models/aws/iam/inline_policy.py +78 -0
  34. cartography/models/aws/iam/managed_policy.py +51 -0
  35. cartography/models/aws/iam/policy_statement.py +57 -0
  36. cartography/models/aws/iam/role.py +83 -0
  37. cartography/models/aws/iam/root_principal.py +52 -0
  38. cartography/models/aws/iam/service_principal.py +30 -0
  39. cartography/models/aws/iam/sts_assumerole_allow.py +38 -0
  40. cartography/models/aws/iam/user.py +54 -0
  41. cartography/models/azure/__init__.py +0 -0
  42. cartography/models/azure/app_service.py +59 -0
  43. cartography/models/azure/function_app.py +59 -0
  44. cartography/models/entra/entra_user_to_aws_sso.py +41 -0
  45. cartography/models/entra/service_principal.py +104 -0
  46. cartography/models/gcp/compute/subnet.py +74 -0
  47. cartography/models/gcp/crm/__init__.py +0 -0
  48. cartography/models/gcp/crm/folders.py +98 -0
  49. cartography/models/gcp/crm/organizations.py +21 -0
  50. cartography/models/gcp/crm/projects.py +100 -0
  51. cartography/models/gcp/gke.py +69 -0
  52. cartography/models/github/commits.py +63 -0
  53. {cartography-0.113.0.dist-info → cartography-0.114.0.dist-info}/METADATA +7 -5
  54. {cartography-0.113.0.dist-info → cartography-0.114.0.dist-info}/RECORD +58 -32
  55. cartography/data/jobs/cleanup/aws_import_account_access_key_cleanup.json +0 -17
  56. cartography/data/jobs/cleanup/aws_import_groups_cleanup.json +0 -13
  57. cartography/data/jobs/cleanup/aws_import_principals_cleanup.json +0 -30
  58. cartography/data/jobs/cleanup/aws_import_roles_cleanup.json +0 -13
  59. cartography/data/jobs/cleanup/aws_import_users_cleanup.json +0 -8
  60. cartography/data/jobs/cleanup/gcp_compute_vpc_subnet_cleanup.json +0 -35
  61. cartography/data/jobs/cleanup/gcp_crm_folder_cleanup.json +0 -23
  62. cartography/data/jobs/cleanup/gcp_crm_organization_cleanup.json +0 -17
  63. cartography/data/jobs/cleanup/gcp_crm_project_cleanup.json +0 -23
  64. cartography/data/jobs/cleanup/gcp_gke_cluster_cleanup.json +0 -17
  65. cartography/intel/gcp/crm.py +0 -355
  66. {cartography-0.113.0.dist-info → cartography-0.114.0.dist-info}/WHEEL +0 -0
  67. {cartography-0.113.0.dist-info → cartography-0.114.0.dist-info}/entry_points.txt +0 -0
  68. {cartography-0.113.0.dist-info → cartography-0.114.0.dist-info}/licenses/LICENSE +0 -0
  69. {cartography-0.113.0.dist-info → cartography-0.114.0.dist-info}/top_level.txt +0 -0
cartography/_version.py CHANGED
@@ -28,7 +28,7 @@ version_tuple: VERSION_TUPLE
28
28
  commit_id: COMMIT_ID
29
29
  __commit_id__: COMMIT_ID
30
30
 
31
- __version__ = version = '0.113.0'
32
- __version_tuple__ = version_tuple = (0, 113, 0)
31
+ __version__ = version = '0.114.0'
32
+ __version_tuple__ = version_tuple = (0, 114, 0)
33
33
 
34
34
  __commit_id__ = commit_id = None
cartography/cli.py CHANGED
@@ -328,6 +328,14 @@ class CLI:
328
328
  "Required if you are using the GitHub intel module. Ignored otherwise."
329
329
  ),
330
330
  )
331
+ parser.add_argument(
332
+ "--github-commit-lookback-days",
333
+ type=int,
334
+ default=30,
335
+ help=(
336
+ "Number of days to look back for tracking GitHub users committing to repositories. Defaults to 30 days."
337
+ ),
338
+ )
331
339
  parser.add_argument(
332
340
  "--digitalocean-token-env-var",
333
341
  type=str,
cartography/config.py CHANGED
@@ -70,6 +70,8 @@ class Config:
70
70
  :param okta_saml_role_regex: The regex used to map okta groups to AWS roles. Optional.
71
71
  :type github_config: str
72
72
  :param github_config: Base64 encoded config object for GitHub ingestion. Optional.
73
+ :type github_commit_lookback_days: int
74
+ :param github_commit_lookback_days: Number of days to look back for GitHub commit tracking. Optional.
73
75
  :type digitalocean_token: str
74
76
  :param digitalocean_token: DigitalOcean access token. Optional.
75
77
  :type permission_relationships_file: str
@@ -210,6 +212,7 @@ class Config:
210
212
  okta_api_key=None,
211
213
  okta_saml_role_regex=None,
212
214
  github_config=None,
215
+ github_commit_lookback_days=30,
213
216
  digitalocean_token=None,
214
217
  permission_relationships_file=None,
215
218
  jamf_base_uri=None,
@@ -301,6 +304,7 @@ class Config:
301
304
  self.okta_api_key = okta_api_key
302
305
  self.okta_saml_role_regex = okta_saml_role_regex
303
306
  self.github_config = github_config
307
+ self.github_commit_lookback_days = github_commit_lookback_days
304
308
  self.digitalocean_token = digitalocean_token
305
309
  self.permission_relationships_file = permission_relationships_file
306
310
  self.jamf_base_uri = jamf_base_uri
cartography/data/indexes.cypher CHANGED
@@ -21,23 +21,12 @@ CREATE INDEX IF NOT EXISTS FOR (n:AWSDNSRecord) ON (n.lastupdated);
21
21
  CREATE INDEX IF NOT EXISTS FOR (n:AWSDNSZone) ON (n.name);
22
22
  CREATE INDEX IF NOT EXISTS FOR (n:AWSDNSZone) ON (n.zoneid);
23
23
  CREATE INDEX IF NOT EXISTS FOR (n:AWSDNSZone) ON (n.lastupdated);
24
- CREATE INDEX IF NOT EXISTS FOR (n:AWSGroup) ON (n.arn);
25
- CREATE INDEX IF NOT EXISTS FOR (n:AWSGroup) ON (n.lastupdated);
26
24
  CREATE INDEX IF NOT EXISTS FOR (n:AWSInternetGateway) ON (n.id);
27
25
  CREATE INDEX IF NOT EXISTS FOR (n:AWSInternetGateway) ON (n.lastupdated);
28
26
  CREATE INDEX IF NOT EXISTS FOR (n:AWSIpv4CidrBlock) ON (n.id);
29
27
  CREATE INDEX IF NOT EXISTS FOR (n:AWSIpv4CidrBlock) ON (n.lastupdated);
30
28
  CREATE INDEX IF NOT EXISTS FOR (n:AWSIpv6CidrBlock) ON (n.id);
31
29
  CREATE INDEX IF NOT EXISTS FOR (n:AWSIpv6CidrBlock) ON (n.lastupdated);
32
- CREATE INDEX IF NOT EXISTS FOR (n:AWSPolicy) ON (n.id);
33
- CREATE INDEX IF NOT EXISTS FOR (n:AWSPolicy) ON (n.name);
34
- CREATE INDEX IF NOT EXISTS FOR (n:AWSPolicy) ON (n.lastupdated);
35
- CREATE INDEX IF NOT EXISTS FOR (n:AWSPolicyStatement) ON (n.id);
36
- CREATE INDEX IF NOT EXISTS FOR (n:AWSPolicyStatement) ON (n.lastupdated);
37
- CREATE INDEX IF NOT EXISTS FOR (n:AWSPrincipal) ON (n.arn);
38
- CREATE INDEX IF NOT EXISTS FOR (n:AWSPrincipal) ON (n.lastupdated);
39
- CREATE INDEX IF NOT EXISTS FOR (n:AWSRole) ON (n.arn);
40
- CREATE INDEX IF NOT EXISTS FOR (n:AWSRole) ON (n.lastupdated);
41
30
  CREATE INDEX IF NOT EXISTS FOR (n:AWSTag) ON (n.id);
42
31
  CREATE INDEX IF NOT EXISTS FOR (n:AWSTag) ON (n.key);
43
32
  CREATE INDEX IF NOT EXISTS FOR (n:AWSTag) ON (n.lastupdated);
@@ -46,11 +35,6 @@ CREATE INDEX IF NOT EXISTS FOR (n:AWSTransitGateway) ON (n.id);
46
35
  CREATE INDEX IF NOT EXISTS FOR (n:AWSTransitGateway) ON (n.lastupdated);
47
36
  CREATE INDEX IF NOT EXISTS FOR (n:AWSTransitGatewayAttachment) ON (n.id);
48
37
  CREATE INDEX IF NOT EXISTS FOR (n:AWSTransitGatewayAttachment) ON (n.lastupdated);
49
- CREATE INDEX IF NOT EXISTS FOR (n:AWSUser) ON (n.arn);
50
- CREATE INDEX IF NOT EXISTS FOR (n:AWSUser) ON (n.name);
51
- CREATE INDEX IF NOT EXISTS FOR (n:AWSUser) ON (n.lastupdated);
52
- CREATE INDEX IF NOT EXISTS FOR (n:AccountAccessKey) ON (n.accesskeyid);
53
- CREATE INDEX IF NOT EXISTS FOR (n:AccountAccessKey) ON (n.lastupdated);
54
38
  CREATE INDEX IF NOT EXISTS FOR (n:AutoScalingGroup) ON (n.arn);
55
39
  CREATE INDEX IF NOT EXISTS FOR (n:AutoScalingGroup) ON (n.lastupdated);
56
40
  CREATE INDEX IF NOT EXISTS FOR (n:CVE) ON (n.id);
@@ -100,8 +84,6 @@ CREATE INDEX IF NOT EXISTS FOR (n:ESDomain) ON (n.arn);
100
84
  CREATE INDEX IF NOT EXISTS FOR (n:ESDomain) ON (n.id);
101
85
  CREATE INDEX IF NOT EXISTS FOR (n:ESDomain) ON (n.name);
102
86
  CREATE INDEX IF NOT EXISTS FOR (n:ESDomain) ON (n.lastupdated);
103
- CREATE INDEX IF NOT EXISTS FOR (n:GCPFolder) ON (n.id);
104
- CREATE INDEX IF NOT EXISTS FOR (n:GCPFolder) ON (n.lastupdated);
105
87
  CREATE INDEX IF NOT EXISTS FOR (n:GCPForwardingRule) ON (n.id);
106
88
  CREATE INDEX IF NOT EXISTS FOR (n:GCPForwardingRule) ON (n.lastupdated);
107
89
  CREATE INDEX IF NOT EXISTS FOR (n:GCPInstance) ON (n.id);
@@ -112,23 +94,14 @@ CREATE INDEX IF NOT EXISTS FOR (n:GCPNetworkTag) ON (n.id);
112
94
  CREATE INDEX IF NOT EXISTS FOR (n:GCPNetworkTag) ON (n.lastupdated);
113
95
  CREATE INDEX IF NOT EXISTS FOR (n:GCPNicAccessConfig) ON (n.id);
114
96
  CREATE INDEX IF NOT EXISTS FOR (n:GCPNicAccessConfig) ON (n.lastupdated);
115
- CREATE INDEX IF NOT EXISTS FOR (n:GCPOrganization) ON (n.id);
116
- CREATE INDEX IF NOT EXISTS FOR (n:GCPOrganization) ON (n.lastupdated);
117
- CREATE INDEX IF NOT EXISTS FOR (n:GCPProject) ON (n.id);
118
- CREATE INDEX IF NOT EXISTS FOR (n:GCPProject) ON (n.projectnumber);
119
- CREATE INDEX IF NOT EXISTS FOR (n:GCPProject) ON (n.lastupdated);
120
97
  CREATE INDEX IF NOT EXISTS FOR (n:GCPBucket) ON (n.id);
121
98
  CREATE INDEX IF NOT EXISTS FOR (n:GCPBucket) ON (n.lastupdated);
122
99
  CREATE INDEX IF NOT EXISTS FOR (n:GCPBucketLabel) ON (n.key);
123
100
  CREATE INDEX IF NOT EXISTS FOR (n:GCPBucketLabel) ON (n.lastupdated);
124
- CREATE INDEX IF NOT EXISTS FOR (n:GCPSubnet) ON (n.id);
125
- CREATE INDEX IF NOT EXISTS FOR (n:GCPSubnet) ON (n.lastupdated);
126
101
  CREATE INDEX IF NOT EXISTS FOR (n:GCPVpc) ON (n.id);
127
102
  CREATE INDEX IF NOT EXISTS FOR (n:GCPVpc) ON (n.lastupdated);
128
103
  CREATE INDEX IF NOT EXISTS FOR (n:GitHubRepository) ON (n.id);
129
104
  CREATE INDEX IF NOT EXISTS FOR (n:GitHubRepository) ON (n.lastupdated);
130
- CREATE INDEX IF NOT EXISTS FOR (n:GKECluster) ON (n.id);
131
- CREATE INDEX IF NOT EXISTS FOR (n:GKECluster) ON (n.lastupdated);
132
105
  CREATE INDEX IF NOT EXISTS FOR (n:GSuiteGroup) ON (n.email);
133
106
  CREATE INDEX IF NOT EXISTS FOR (n:GSuiteGroup) ON (n.id);
134
107
  CREATE INDEX IF NOT EXISTS FOR (n:GSuiteGroup) ON (n.lastupdated);