cartography 0.84.0__py3-none-any.whl → 0.85.1__py3-none-any.whl

cartography/models/aws/ec2/privateip_networkinterface.py

@@ -0,0 +1,72 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EC2PrivateIpNetworkInterfaceNodeProperties(CartographyNodeProperties):
+    """
+    Selection of properties of a private IP as known by an EC2 network interface
+    """
+    id: PropertyRef = PropertyRef('Id')
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+    network_interface_id: PropertyRef = PropertyRef('NetworkInterfaceId')
+    primary: PropertyRef = PropertyRef('Primary')
+    private_ip_address: PropertyRef = PropertyRef('PrivateIpAddress')
+    public_ip: PropertyRef = PropertyRef('PublicIp')
+    ip_owner_id: PropertyRef = PropertyRef('IpOwnerId')
+
+
+@dataclass(frozen=True)
+class EC2PrivateIpToAwsAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2PrivateIpToAWSAccount(CartographyRelSchema):
+    target_node_label: str = 'AWSAccount'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('AWS_ID', set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EC2PrivateIpToAwsAccountRelProperties = EC2PrivateIpToAwsAccountRelProperties()
+
+
+@dataclass(frozen=True)
+class EC2NetworkInterfaceToPrivateIpRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2PrivateIpToNetworkInterface(CartographyRelSchema):
+    target_node_label: str = 'NetworkInterface'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('NetworkInterfaceId')},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "PRIVATE_IP_ADDRESS"
+    properties: EC2NetworkInterfaceToPrivateIpRelProperties = EC2NetworkInterfaceToPrivateIpRelProperties()
+
+
+@dataclass(frozen=True)
+class EC2PrivateIpNetworkInterfaceSchema(CartographyNodeSchema):
+    """
+    PrivateIp as known by a Network Interface
+    """
+    label: str = 'EC2PrivateIp'
+    properties: EC2PrivateIpNetworkInterfaceNodeProperties = EC2PrivateIpNetworkInterfaceNodeProperties()
+    sub_resource_relationship: EC2PrivateIpToAWSAccount = EC2PrivateIpToAWSAccount()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            EC2PrivateIpToNetworkInterface(),
+        ],
+    )

cartography/models/aws/ec2/{securitygroups.py → securitygroup_instance.py}

@@ -12,8 +12,8 @@ from cartography.models.core.relationships import TargetNodeMatcher
 
 
 @dataclass(frozen=True)
-class EC2SecurityGroupNodeProperties(CartographyNodeProperties):
-    # arn: PropertyRef = PropertyRef('Arn', extra_index=True) # TODO decide on this
+class EC2SecurityGroupInstanceNodeProperties(CartographyNodeProperties):
+    # arn: PropertyRef = PropertyRef('Arn', extra_index=True) # TODO use arn; #1024
     id: PropertyRef = PropertyRef('GroupId')
     groupid: PropertyRef = PropertyRef('GroupId', extra_index=True)
     region: PropertyRef = PropertyRef('Region', set_in_kwargs=True)
@@ -37,7 +37,7 @@ class EC2SecurityGroupToAWSAccount(CartographyRelSchema):
 
 
 @dataclass(frozen=True)
-class EC2SubnetToEC2InstanceRelProperties(CartographyRelProperties):
+class EC2SecurityGroupToEC2InstanceRelProperties(CartographyRelProperties):
     lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
 
 
@@ -49,13 +49,16 @@ class EC2SecurityGroupToEC2Instance(CartographyRelSchema):
     )
     direction: LinkDirection = LinkDirection.INWARD
     rel_label: str = "MEMBER_OF_EC2_SECURITY_GROUP"
-    properties: EC2SubnetToEC2InstanceRelProperties = EC2SubnetToEC2InstanceRelProperties()
+    properties: EC2SecurityGroupToEC2InstanceRelProperties = EC2SecurityGroupToEC2InstanceRelProperties()
 
 
 @dataclass(frozen=True)
-class EC2SecurityGroupSchema(CartographyNodeSchema):
+class EC2SecurityGroupInstanceSchema(CartographyNodeSchema):
+    """
+    Security groups as known by describe-ec2-instances
+    """
     label: str = 'EC2SecurityGroup'
-    properties: EC2SecurityGroupNodeProperties = EC2SecurityGroupNodeProperties()
+    properties: EC2SecurityGroupInstanceNodeProperties = EC2SecurityGroupInstanceNodeProperties()
     sub_resource_relationship: EC2SecurityGroupToAWSAccount = EC2SecurityGroupToAWSAccount()
     other_relationships: OtherRelationships = OtherRelationships(
         [

cartography/models/aws/ec2/securitygroup_networkinterface.py

@@ -0,0 +1,52 @@
+from dataclasses import dataclass
+
+from cartography.models.aws.ec2.securitygroup_instance import EC2SecurityGroupToAWSAccount
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EC2SecurityGroupNetworkInterfaceNodeProperties(CartographyNodeProperties):
+    # arn: PropertyRef = PropertyRef('Arn', extra_index=True) # TODO use arn; issue #1024
+    id: PropertyRef = PropertyRef('GroupId')
+    groupid: PropertyRef = PropertyRef('GroupId', extra_index=True)
+    region: PropertyRef = PropertyRef('Region', set_in_kwargs=True)
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SubnetToNetworkInterfaceRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SecurityGroupToNetworkInterface(CartographyRelSchema):
+    target_node_label: str = 'NetworkInterface'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('NetworkInterfaceId')},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MEMBER_OF_EC2_SECURITY_GROUP"
+    properties: EC2SubnetToNetworkInterfaceRelProperties = EC2SubnetToNetworkInterfaceRelProperties()
+
+
+@dataclass(frozen=True)
+class EC2SecurityGroupNetworkInterfaceSchema(CartographyNodeSchema):
+    """
+    Security groups as known by describe-network-interfaces.
+    """
+    label: str = 'EC2SecurityGroup'
+    properties: EC2SecurityGroupNetworkInterfaceNodeProperties = EC2SecurityGroupNetworkInterfaceNodeProperties()
+    sub_resource_relationship: EC2SecurityGroupToAWSAccount = EC2SecurityGroupToAWSAccount()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            EC2SecurityGroupToNetworkInterface(),
+        ],
+    )

cartography/models/aws/ec2/{subnets.py → subnet_instance.py}

@@ -12,8 +12,8 @@ from cartography.models.core.relationships import TargetNodeMatcher
 
 
 @dataclass(frozen=True)
-class EC2SubnetNodeProperties(CartographyNodeProperties):
-    # arn: PropertyRef = PropertyRef('Arn', extra_index=True) TODO decide this
+class EC2SubnetInstanceNodeProperties(CartographyNodeProperties):
+    # arn: PropertyRef = PropertyRef('Arn', extra_index=True) TODO use arn; issue #1024
     id: PropertyRef = PropertyRef('SubnetId')
     subnet_id: PropertyRef = PropertyRef('SubnetId', extra_index=True)
     region: PropertyRef = PropertyRef('Region', set_in_kwargs=True)
@@ -53,9 +53,12 @@ class EC2SubnetToEC2Instance(CartographyRelSchema):
 
 
 @dataclass(frozen=True)
-class EC2SubnetSchema(CartographyNodeSchema):
+class EC2SubnetInstanceSchema(CartographyNodeSchema):
+    """
+    EC2 Subnet as known by describe-ec2-instances
+    """
     label: str = 'EC2Subnet'
-    properties: EC2SubnetNodeProperties = EC2SubnetNodeProperties()
+    properties: EC2SubnetInstanceNodeProperties = EC2SubnetInstanceNodeProperties()
     sub_resource_relationship: EC2SubnetToAWSAccount = EC2SubnetToAWSAccount()
     other_relationships: OtherRelationships = OtherRelationships(
         [

cartography/models/aws/ec2/subnet_networkinterface.py

@@ -0,0 +1,87 @@
+from dataclasses import dataclass
+
+from cartography.models.aws.ec2.subnet_instance import EC2SubnetToAWSAccount
+from cartography.models.aws.ec2.subnet_instance import EC2SubnetToEC2Instance
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EC2SubnetNetworkInterfaceNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef('SubnetId')
+    subnet_id: PropertyRef = PropertyRef('SubnetId', extra_index=True)
+    region: PropertyRef = PropertyRef('Region', set_in_kwargs=True)
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SubnetToNetworkInterfaceRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SubnetToNetworkInterface(CartographyRelSchema):
+    target_node_label: str = 'NetworkInterface'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('NetworkInterfaceId')},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "PART_OF_SUBNET"
+    properties: EC2SubnetToNetworkInterfaceRelProperties = EC2SubnetToNetworkInterfaceRelProperties()
+
+
+@dataclass(frozen=True)
+class EC2SubnetToLoadBalancerRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SubnetToLoadBalancer(CartographyRelSchema):
+    target_node_label: str = 'LoadBalancer'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('ElbV1Id')},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "PART_OF_SUBNET"
+    properties: EC2SubnetToLoadBalancerRelProperties = EC2SubnetToLoadBalancerRelProperties()
+
+
+@dataclass(frozen=True)
+class EC2SubnetToLoadBalancerV2RelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SubnetToLoadBalancerV2(CartographyRelSchema):
+    target_node_label: str = 'LoadBalancerV2'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('ElbV2Id')},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "PART_OF_SUBNET"
+    properties: EC2SubnetToLoadBalancerV2RelProperties = EC2SubnetToLoadBalancerV2RelProperties()
+
+
+@dataclass(frozen=True)
+class EC2SubnetNetworkInterfaceSchema(CartographyNodeSchema):
+    """
+    Subnet as known by describe-network-interfaces
+    """
+    label: str = 'EC2Subnet'
+    properties: EC2SubnetNetworkInterfaceNodeProperties = EC2SubnetNetworkInterfaceNodeProperties()
+    sub_resource_relationship: EC2SubnetToAWSAccount = EC2SubnetToAWSAccount()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            EC2SubnetToNetworkInterface(),
+            EC2SubnetToEC2Instance(),
+            EC2SubnetToLoadBalancer(),
+            EC2SubnetToLoadBalancerV2(),
+        ],
+    )

cartography/models/aws/eks/clusters.py

@@ -0,0 +1,50 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EKSClusterNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef('arn')
+    arn: PropertyRef = PropertyRef('arn', extra_index=True)
+    name: PropertyRef = PropertyRef('name', extra_index=True)
+    region: PropertyRef = PropertyRef('Region', set_in_kwargs=True)
+    created_at: PropertyRef = PropertyRef('created_at')
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+    endpoint: PropertyRef = PropertyRef('endpoint')
+    endpoint_public_access: PropertyRef = PropertyRef('ClusterEndpointPublic')
+    rolearn: PropertyRef = PropertyRef('roleArn')
+    version: PropertyRef = PropertyRef('version')
+    platform_version: PropertyRef = PropertyRef('platformVersion')
+    status: PropertyRef = PropertyRef('status')
+    audit_logging: PropertyRef = PropertyRef('ClusterLogging')
+
+
+@dataclass(frozen=True)
+class EKSClusterToAwsAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EKSClusterToAWSAccount(CartographyRelSchema):
+    target_node_label: str = 'AWSAccount'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('AWS_ID', set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EKSClusterToAwsAccountRelProperties = EKSClusterToAwsAccountRelProperties()
+
+
+@dataclass(frozen=True)
+class EKSClusterSchema(CartographyNodeSchema):
+    label: str = 'EKSCluster'
+    properties: EKSClusterNodeProperties = EKSClusterNodeProperties()
+    sub_resource_relationship: EKSClusterToAWSAccount = EKSClusterToAWSAccount()

cartography/models/aws/inspector/findings.py

@@ -0,0 +1,124 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class AWSInspectorNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef('id')
+    arn: PropertyRef = PropertyRef('arn', extra_index=True)
+    awsaccount: PropertyRef = PropertyRef('awsaccount')
+    name: PropertyRef = PropertyRef('title')
+    instanceid: PropertyRef = PropertyRef('instanceid')
+    ecrimageid: PropertyRef = PropertyRef('ecrimageid')
+    ecrrepositoryid: PropertyRef = PropertyRef('ecrrepositoryid')
+    severity: PropertyRef = PropertyRef('severity')
+    firstobservedat: PropertyRef = PropertyRef('firstobservedat')
+    updatedat: PropertyRef = PropertyRef('updatedat')
+    description: PropertyRef = PropertyRef('description')
+    type: PropertyRef = PropertyRef('type')
+    cvssscore: PropertyRef = PropertyRef('cvssscore', extra_index=True)
+    protocol: PropertyRef = PropertyRef('protocol')
+    portrange: PropertyRef = PropertyRef('portrange')
+    portrangebegin: PropertyRef = PropertyRef('portrangebegin')
+    portrangeend: PropertyRef = PropertyRef('portrangeend')
+    vulnerabilityid: PropertyRef = PropertyRef('vulnerabilityid')
+    referenceurls: PropertyRef = PropertyRef('referenceurls')
+    relatedvulnerabilities: PropertyRef = PropertyRef('relatedvulnerabilities')
+    source: PropertyRef = PropertyRef('source')
+    sourceurl: PropertyRef = PropertyRef('sourceurl')
+    status: PropertyRef = PropertyRef('status')
+    vendorcreatedat: PropertyRef = PropertyRef('vendorcreatedat')
+    vendorseverity: PropertyRef = PropertyRef('vendorseverity')
+    vendorupdatedat: PropertyRef = PropertyRef('vendorupdatedat')
+    vulnerablepackageids: PropertyRef = PropertyRef('vulnerablepackageids')
+    region: PropertyRef = PropertyRef('Region', set_in_kwargs=True)
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class InspectorFindingToAwsAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class InspectorFindingToAWSAccount(CartographyRelSchema):
+    target_node_label: str = 'AWSAccount'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('AWS_ID', set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: InspectorFindingToAwsAccountRelProperties = InspectorFindingToAwsAccountRelProperties()
+
+
+@dataclass(frozen=True)
+class InspectorFindingToEC2InstanceRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class InspectorFindingToEC2Instance(CartographyRelSchema):
+    target_node_label: str = 'EC2Instance'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('instanceid')},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "AFFECTS"
+    properties: InspectorFindingToEC2InstanceRelProperties = InspectorFindingToEC2InstanceRelProperties()
+
+
+@dataclass(frozen=True)
+class InspectorFindingToECRRepositoryRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class InspectorFindingToECRRepository(CartographyRelSchema):
+    target_node_label: str = 'ECRRepository'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('ecrrepositoryid')},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "AFFECTS"
+    properties: InspectorFindingToECRRepositoryRelProperties = InspectorFindingToECRRepositoryRelProperties()
+
+
+@dataclass(frozen=True)
+class InspectorFindingToECRImageRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class InspectorFindingToECRImage(CartographyRelSchema):
+    target_node_label: str = 'ECRImage'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('ecrimageid')},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "AFFECTS"
+    properties: InspectorFindingToECRImageRelProperties = InspectorFindingToECRImageRelProperties()
+
+
+@dataclass(frozen=True)
+class AWSInspectorFindingSchema(CartographyNodeSchema):
+    label: str = 'AWSInspectorFinding'
+    properties: AWSInspectorNodeProperties = AWSInspectorNodeProperties()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["Risk"])
+    sub_resource_relationship: InspectorFindingToAWSAccount = InspectorFindingToAWSAccount()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            InspectorFindingToEC2Instance(),
+            InspectorFindingToECRRepository(),
+            InspectorFindingToECRImage(),
+        ],
+    )

cartography/models/aws/inspector/packages.py

@@ -0,0 +1,73 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class AWSInspectorPackageNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef('id')
+    region: PropertyRef = PropertyRef('Region', set_in_kwargs=True)
+    awsaccount: PropertyRef = PropertyRef('AWS_ID', set_in_kwargs=True)
+    findingarn: PropertyRef = PropertyRef('findingarn', extra_index=True)
+    name: PropertyRef = PropertyRef('name', extra_index=True)
+    arch: PropertyRef = PropertyRef('arch')
+    version: PropertyRef = PropertyRef('version', extra_index=True)
+    release: PropertyRef = PropertyRef('release', extra_index=True)
+    epoch: PropertyRef = PropertyRef('epoch')
+    manager: PropertyRef = PropertyRef('packageManager')
+    filepath: PropertyRef = PropertyRef('filePath')
+    fixedinversion: PropertyRef = PropertyRef('fixedInVersion')
+    sourcelayerhash: PropertyRef = PropertyRef('sourceLayerHash')
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class InspectorPackageToAwsAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class InspectorPackageToAWSAccount(CartographyRelSchema):
+    target_node_label: str = 'AWSAccount'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('AWS_ID', set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: InspectorPackageToAwsAccountRelProperties = InspectorPackageToAwsAccountRelProperties()
+
+
+@dataclass(frozen=True)
+class InspectorPackageToFindingRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef('lastupdated', set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class InspectorPackageToFinding(CartographyRelSchema):
+    target_node_label: str = 'AWSInspectorFinding'
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {'id': PropertyRef('findingarn')},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS"
+    properties: InspectorPackageToFindingRelProperties = InspectorPackageToFindingRelProperties()
+
+
+@dataclass(frozen=True)
+class AWSInspectorPackageSchema(CartographyNodeSchema):
+    label: str = 'AWSInspectorPackage'
+    properties: AWSInspectorPackageNodeProperties = AWSInspectorPackageNodeProperties()
+    sub_resource_relationship: InspectorPackageToAWSAccount = InspectorPackageToAWSAccount()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            InspectorPackageToFinding(),
+        ],
+    )

cartography/util.py

@@ -49,6 +49,14 @@ def run_analysis_job(
     common_job_parameters: Dict,
     package: str = 'cartography.data.jobs.analysis',
 ) -> None:
+    """
+    Enriches existing graph data with analysis jobs. This is designed for use with the sync stage
+    cartography.intel.analysis.
+    Runs the queries in the given Python `package` directory (cartography.data.jobs.analysis by default) for the given
+    `filename`. All queries in this directory are intended to be run at the end of a full graph sync. As such, they are
+    not scoped to a single sub resource. That is they will apply to _all_ AWS accounts/_all_ GCP projects/_all_ Okta
+    organizations/etc.
+    """
     GraphJob.run_from_json(
         neo4j_session,
         read_text(

{cartography-0.84.0.dist-info → cartography-0.85.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: cartography
-Version: 0.84.0
+Version: 0.85.1
 Summary: Explore assets and their relationships across your technical infrastructure.
 Home-page: https://www.github.com/lyft/cartography
 Maintainer: Lyft