reverse-diagrams 0.2.5__py3-none-any.whl → 1.0.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {reverse_diagrams-0.2.5.dist-info → reverse_diagrams-1.0.0.dist-info}/METADATA +36 -24
- reverse_diagrams-1.0.0.dist-info/RECORD +20 -0
- {reverse_diagrams-0.2.5.dist-info → reverse_diagrams-1.0.0.dist-info}/WHEEL +1 -1
- reverse_diagrams-1.0.0.dist-info/licenses/LICENSE +13 -0
- src/aws/describe_identity_store.py +172 -49
- src/aws/describe_organization.py +91 -36
- src/aws/describe_sso.py +133 -20
- src/banner/banner.py +7 -2
- src/dgms/graph_mapper.py +76 -32
- src/dgms/graph_template.py +4 -4
- src/export_report/export_csv.py +3 -2
- src/reports/save_results.py +24 -0
- src/reverse_diagrams.py +325 -169
- src/version.py +2 -0
- docs/graph_org.py +0 -8
- docs/graph_sso.py +0 -39
- docs/graph_sso_complete.py +0 -596
- reverse_diagrams-0.2.5.dist-info/RECORD +0 -21
- reverse_diagrams-0.2.5.dist-info/licenses/LICENSE +0 -21
- {reverse_diagrams-0.2.5.dist-info → reverse_diagrams-1.0.0.dist-info}/entry_points.txt +0 -0
- /__init__.py → /src/reports/__init__.py +0 -0
docs/graph_sso_complete.py
DELETED
|
@@ -1,596 +0,0 @@
|
|
|
1
|
-
|
|
2
|
-
from diagrams import Diagram, Cluster, Edge
|
|
3
|
-
|
|
4
|
-
from diagrams.aws.management import Organizations, OrganizationsAccount, OrganizationsOrganizationalUnit
|
|
5
|
-
from diagrams.aws.general import Users, User
|
|
6
|
-
from diagrams.aws.security import IAMPermissions
|
|
7
|
-
with Diagram("IAM Identity Center", show=False, direction="LR"):
|
|
8
|
-
gg = Users("Group")
|
|
9
|
-
uu = User("User")
|
|
10
|
-
pp= IAMPermissions("PermissionsSet")
|
|
11
|
-
ou = OrganizationsOrganizationalUnit("PermissionsAssignments")
|
|
12
|
-
|
|
13
|
-
with Cluster('Account: Log archive'):
|
|
14
|
-
|
|
15
|
-
with Cluster('Group: AWSSecurityAuditPowerUsers'):
|
|
16
|
-
|
|
17
|
-
gg_AWSSecurityAuditPowerUsers=Users("AWSSecurityAudit\nPowerUsers")
|
|
18
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
19
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
20
|
-
- IAMPermissions("AWSPowerUserAcce\nss")
|
|
21
|
-
mm_AWSSecurityAuditPowerUsers=[]
|
|
22
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
23
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
24
|
-
- mm_AWSSecurityAuditPowerUsers
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
with Cluster('Group: AWSControlTowerAdmins'):
|
|
28
|
-
|
|
29
|
-
gg_AWSControlTowerAdmins=Users("AWSControlTowerA\ndmins")
|
|
30
|
-
gg_AWSControlTowerAdmins \
|
|
31
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
32
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
33
|
-
mm_AWSControlTowerAdmins=[User("velez94@protonma\nil.com"),]
|
|
34
|
-
gg_AWSControlTowerAdmins \
|
|
35
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
36
|
-
- mm_AWSControlTowerAdmins
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
with Cluster('Group: AWSLogArchiveAdmins'):
|
|
40
|
-
|
|
41
|
-
gg_AWSLogArchiveAdmins=Users("AWSLogArchiveAdm\nins")
|
|
42
|
-
gg_AWSLogArchiveAdmins \
|
|
43
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
44
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
45
|
-
mm_AWSLogArchiveAdmins=[]
|
|
46
|
-
gg_AWSLogArchiveAdmins \
|
|
47
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
48
|
-
- mm_AWSLogArchiveAdmins
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
with Cluster('Group: AWSSecurityAuditors'):
|
|
52
|
-
|
|
53
|
-
gg_AWSSecurityAuditors=Users("AWSSecurityAudit\nors")
|
|
54
|
-
gg_AWSSecurityAuditors \
|
|
55
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
56
|
-
- IAMPermissions("AWSReadOnlyAccess")
|
|
57
|
-
mm_AWSSecurityAuditors=[]
|
|
58
|
-
gg_AWSSecurityAuditors \
|
|
59
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
60
|
-
- mm_AWSSecurityAuditors
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
with Cluster('Group: AWSLogArchiveViewers'):
|
|
64
|
-
|
|
65
|
-
gg_AWSLogArchiveViewers=Users("AWSLogArchiveVie\nwers")
|
|
66
|
-
gg_AWSLogArchiveViewers \
|
|
67
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
68
|
-
- IAMPermissions("AWSReadOnlyAccess")
|
|
69
|
-
mm_AWSLogArchiveViewers=[]
|
|
70
|
-
gg_AWSLogArchiveViewers \
|
|
71
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
72
|
-
- mm_AWSLogArchiveViewers
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
with Cluster('Account: SecOps'):
|
|
76
|
-
|
|
77
|
-
with Cluster('Group: AWSSecurityAuditPowerUsers'):
|
|
78
|
-
|
|
79
|
-
gg_AWSSecurityAuditPowerUsers=Users("AWSSecurityAudit\nPowerUsers")
|
|
80
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
81
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
82
|
-
- IAMPermissions("AWSPowerUserAcce\nss")
|
|
83
|
-
mm_AWSSecurityAuditPowerUsers=[]
|
|
84
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
85
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
86
|
-
- mm_AWSSecurityAuditPowerUsers
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
with Cluster('User: w.alejovl+secops-labs@gmail.com'):
|
|
90
|
-
|
|
91
|
-
uu_walejovlsecopslabsgmailcom=User("w.alejovl+secops\n-labs@gmail.com")
|
|
92
|
-
uu_walejovlsecopslabsgmailcom \
|
|
93
|
-
- Edge(color="brown", style="dotted") \
|
|
94
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
95
|
-
|
|
96
|
-
with Cluster('Group: AWSSecurityAuditors'):
|
|
97
|
-
|
|
98
|
-
gg_AWSSecurityAuditors=Users("AWSSecurityAudit\nors")
|
|
99
|
-
gg_AWSSecurityAuditors \
|
|
100
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
101
|
-
- IAMPermissions("AWSReadOnlyAccess")
|
|
102
|
-
mm_AWSSecurityAuditors=[]
|
|
103
|
-
gg_AWSSecurityAuditors \
|
|
104
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
105
|
-
- mm_AWSSecurityAuditors
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
with Cluster('Group: AWSControlTowerAdmins'):
|
|
109
|
-
|
|
110
|
-
gg_AWSControlTowerAdmins=Users("AWSControlTowerA\ndmins")
|
|
111
|
-
gg_AWSControlTowerAdmins \
|
|
112
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
113
|
-
- IAMPermissions("AWSOrganizations\nFullAccess")
|
|
114
|
-
mm_AWSControlTowerAdmins=[User("velez94@protonma\nil.com"),]
|
|
115
|
-
gg_AWSControlTowerAdmins \
|
|
116
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
117
|
-
- mm_AWSControlTowerAdmins
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
with Cluster('Account: Prod'):
|
|
121
|
-
|
|
122
|
-
with Cluster('Group: AWSSecurityAuditPowerUsers'):
|
|
123
|
-
|
|
124
|
-
gg_AWSSecurityAuditPowerUsers=Users("AWSSecurityAudit\nPowerUsers")
|
|
125
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
126
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
127
|
-
- IAMPermissions("AWSPowerUserAcce\nss")
|
|
128
|
-
mm_AWSSecurityAuditPowerUsers=[]
|
|
129
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
130
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
131
|
-
- mm_AWSSecurityAuditPowerUsers
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
with Cluster('Group: DevSecOps_Admins'):
|
|
135
|
-
|
|
136
|
-
gg_DevSecOps_Admins=Users("DevSecOps_Admins")
|
|
137
|
-
gg_DevSecOps_Admins \
|
|
138
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
139
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
140
|
-
mm_DevSecOps_Admins=[User("DevSecOpsAdm"),]
|
|
141
|
-
gg_DevSecOps_Admins \
|
|
142
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
143
|
-
- mm_DevSecOps_Admins
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
with Cluster('User: w.alejovl+prod-labs@gmail.com'):
|
|
147
|
-
|
|
148
|
-
uu_walejovlprodlabsgmailcom=User("w.alejovl+prod-l\nabs@gmail.com")
|
|
149
|
-
uu_walejovlprodlabsgmailcom \
|
|
150
|
-
- Edge(color="brown", style="dotted") \
|
|
151
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
152
|
-
|
|
153
|
-
with Cluster('Group: AWSSecurityAuditors'):
|
|
154
|
-
|
|
155
|
-
gg_AWSSecurityAuditors=Users("AWSSecurityAudit\nors")
|
|
156
|
-
gg_AWSSecurityAuditors \
|
|
157
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
158
|
-
- IAMPermissions("AWSReadOnlyAccess")
|
|
159
|
-
mm_AWSSecurityAuditors=[]
|
|
160
|
-
gg_AWSSecurityAuditors \
|
|
161
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
162
|
-
- mm_AWSSecurityAuditors
|
|
163
|
-
|
|
164
|
-
|
|
165
|
-
with Cluster('Group: AWSControlTowerAdmins'):
|
|
166
|
-
|
|
167
|
-
gg_AWSControlTowerAdmins=Users("AWSControlTowerA\ndmins")
|
|
168
|
-
gg_AWSControlTowerAdmins \
|
|
169
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
170
|
-
- IAMPermissions("AWSOrganizations\nFullAccess")
|
|
171
|
-
mm_AWSControlTowerAdmins=[User("velez94@protonma\nil.com"),]
|
|
172
|
-
gg_AWSControlTowerAdmins \
|
|
173
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
174
|
-
- mm_AWSControlTowerAdmins
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
with Cluster('Account: SecurityTooling'):
|
|
178
|
-
|
|
179
|
-
with Cluster('Group: AWSSecurityAuditPowerUsers'):
|
|
180
|
-
|
|
181
|
-
gg_AWSSecurityAuditPowerUsers=Users("AWSSecurityAudit\nPowerUsers")
|
|
182
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
183
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
184
|
-
- IAMPermissions("AWSPowerUserAcce\nss")
|
|
185
|
-
mm_AWSSecurityAuditPowerUsers=[]
|
|
186
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
187
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
188
|
-
- mm_AWSSecurityAuditPowerUsers
|
|
189
|
-
|
|
190
|
-
|
|
191
|
-
with Cluster('Group: SecOps_Adms'):
|
|
192
|
-
|
|
193
|
-
gg_SecOps_Adms=Users("SecOps_Adms")
|
|
194
|
-
gg_SecOps_Adms \
|
|
195
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
196
|
-
- IAMPermissions("LabvelSecOpsAdms")
|
|
197
|
-
mm_SecOps_Adms=[User("w.alejovl+secops\n-labs@gmail.com"),]
|
|
198
|
-
gg_SecOps_Adms \
|
|
199
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
200
|
-
- mm_SecOps_Adms
|
|
201
|
-
|
|
202
|
-
|
|
203
|
-
with Cluster('Group: AWSControlTowerAdmins'):
|
|
204
|
-
|
|
205
|
-
gg_AWSControlTowerAdmins=Users("AWSControlTowerA\ndmins")
|
|
206
|
-
gg_AWSControlTowerAdmins \
|
|
207
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
208
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
209
|
-
mm_AWSControlTowerAdmins=[User("velez94@protonma\nil.com"),]
|
|
210
|
-
gg_AWSControlTowerAdmins \
|
|
211
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
212
|
-
- mm_AWSControlTowerAdmins
|
|
213
|
-
|
|
214
|
-
|
|
215
|
-
with Cluster('Group: AWSAuditAccountAdmins'):
|
|
216
|
-
|
|
217
|
-
gg_AWSAuditAccountAdmins=Users("AWSAuditAccountA\ndmins")
|
|
218
|
-
gg_AWSAuditAccountAdmins \
|
|
219
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
220
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
221
|
-
mm_AWSAuditAccountAdmins=[]
|
|
222
|
-
gg_AWSAuditAccountAdmins \
|
|
223
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
224
|
-
- mm_AWSAuditAccountAdmins
|
|
225
|
-
|
|
226
|
-
|
|
227
|
-
with Cluster('Group: AWSSecurityAuditors'):
|
|
228
|
-
|
|
229
|
-
gg_AWSSecurityAuditors=Users("AWSSecurityAudit\nors")
|
|
230
|
-
gg_AWSSecurityAuditors \
|
|
231
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
232
|
-
- IAMPermissions("AWSReadOnlyAccess")
|
|
233
|
-
mm_AWSSecurityAuditors=[]
|
|
234
|
-
gg_AWSSecurityAuditors \
|
|
235
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
236
|
-
- mm_AWSSecurityAuditors
|
|
237
|
-
|
|
238
|
-
|
|
239
|
-
with Cluster('Account: DevSecOps'):
|
|
240
|
-
|
|
241
|
-
with Cluster('Group: AWSSecurityAuditPowerUsers'):
|
|
242
|
-
|
|
243
|
-
gg_AWSSecurityAuditPowerUsers=Users("AWSSecurityAudit\nPowerUsers")
|
|
244
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
245
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
246
|
-
- IAMPermissions("AWSPowerUserAcce\nss")
|
|
247
|
-
mm_AWSSecurityAuditPowerUsers=[]
|
|
248
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
249
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
250
|
-
- mm_AWSSecurityAuditPowerUsers
|
|
251
|
-
|
|
252
|
-
|
|
253
|
-
with Cluster('Group: DevSecOps_Admins'):
|
|
254
|
-
|
|
255
|
-
gg_DevSecOps_Admins=Users("DevSecOps_Admins")
|
|
256
|
-
gg_DevSecOps_Admins \
|
|
257
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
258
|
-
- IAMPermissions("LabvelDevSecOpsU\nsers")
|
|
259
|
-
mm_DevSecOps_Admins=[User("DevSecOpsAdm"),]
|
|
260
|
-
gg_DevSecOps_Admins \
|
|
261
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
262
|
-
- mm_DevSecOps_Admins
|
|
263
|
-
|
|
264
|
-
|
|
265
|
-
with Cluster('Group: DevSecOps_Admins'):
|
|
266
|
-
|
|
267
|
-
gg_DevSecOps_Admins=Users("DevSecOps_Admins")
|
|
268
|
-
gg_DevSecOps_Admins \
|
|
269
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
270
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
271
|
-
mm_DevSecOps_Admins=[User("DevSecOpsAdm"),]
|
|
272
|
-
gg_DevSecOps_Admins \
|
|
273
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
274
|
-
- mm_DevSecOps_Admins
|
|
275
|
-
|
|
276
|
-
|
|
277
|
-
with Cluster('User: w.alejovl+devsecops-labs@gmail.com'):
|
|
278
|
-
|
|
279
|
-
uu_walejovldevsecopslabsgmailcom=User("w.alejovl+devsec\nops-labs@gmail.com")
|
|
280
|
-
uu_walejovldevsecopslabsgmailcom \
|
|
281
|
-
- Edge(color="brown", style="dotted") \
|
|
282
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
283
|
-
|
|
284
|
-
with Cluster('Group: DevSecOps_Admins'):
|
|
285
|
-
|
|
286
|
-
gg_DevSecOps_Admins=Users("DevSecOps_Admins")
|
|
287
|
-
gg_DevSecOps_Admins \
|
|
288
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
289
|
-
- IAMPermissions("LabvelDevSecOpsRW")
|
|
290
|
-
mm_DevSecOps_Admins=[User("DevSecOpsAdm"),]
|
|
291
|
-
gg_DevSecOps_Admins \
|
|
292
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
293
|
-
- mm_DevSecOps_Admins
|
|
294
|
-
|
|
295
|
-
|
|
296
|
-
with Cluster('Group: AWSSecurityAuditors'):
|
|
297
|
-
|
|
298
|
-
gg_AWSSecurityAuditors=Users("AWSSecurityAudit\nors")
|
|
299
|
-
gg_AWSSecurityAuditors \
|
|
300
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
301
|
-
- IAMPermissions("AWSReadOnlyAccess")
|
|
302
|
-
mm_AWSSecurityAuditors=[]
|
|
303
|
-
gg_AWSSecurityAuditors \
|
|
304
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
305
|
-
- mm_AWSSecurityAuditors
|
|
306
|
-
|
|
307
|
-
|
|
308
|
-
with Cluster('Group: AWSControlTowerAdmins'):
|
|
309
|
-
|
|
310
|
-
gg_AWSControlTowerAdmins=Users("AWSControlTowerA\ndmins")
|
|
311
|
-
gg_AWSControlTowerAdmins \
|
|
312
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
313
|
-
- IAMPermissions("AWSOrganizations\nFullAccess")
|
|
314
|
-
mm_AWSControlTowerAdmins=[User("velez94@protonma\nil.com"),]
|
|
315
|
-
gg_AWSControlTowerAdmins \
|
|
316
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
317
|
-
- mm_AWSControlTowerAdmins
|
|
318
|
-
|
|
319
|
-
|
|
320
|
-
with Cluster('Account: Ops'):
|
|
321
|
-
|
|
322
|
-
with Cluster('Group: AWSSecurityAuditPowerUsers'):
|
|
323
|
-
|
|
324
|
-
gg_AWSSecurityAuditPowerUsers=Users("AWSSecurityAudit\nPowerUsers")
|
|
325
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
326
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
327
|
-
- IAMPermissions("AWSPowerUserAcce\nss")
|
|
328
|
-
mm_AWSSecurityAuditPowerUsers=[]
|
|
329
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
330
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
331
|
-
- mm_AWSSecurityAuditPowerUsers
|
|
332
|
-
|
|
333
|
-
|
|
334
|
-
with Cluster('User: w.alejovl+ct-labs@gmail.com'):
|
|
335
|
-
|
|
336
|
-
uu_walejovlctlabsgmailcom=User("w.alejovl+ct-lab\ns@gmail.com")
|
|
337
|
-
uu_walejovlctlabsgmailcom \
|
|
338
|
-
- Edge(color="brown", style="dotted") \
|
|
339
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
340
|
-
|
|
341
|
-
with Cluster('Group: AWSSecurityAuditors'):
|
|
342
|
-
|
|
343
|
-
gg_AWSSecurityAuditors=Users("AWSSecurityAudit\nors")
|
|
344
|
-
gg_AWSSecurityAuditors \
|
|
345
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
346
|
-
- IAMPermissions("AWSReadOnlyAccess")
|
|
347
|
-
mm_AWSSecurityAuditors=[]
|
|
348
|
-
gg_AWSSecurityAuditors \
|
|
349
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
350
|
-
- mm_AWSSecurityAuditors
|
|
351
|
-
|
|
352
|
-
|
|
353
|
-
with Cluster('Group: AWSControlTowerAdmins'):
|
|
354
|
-
|
|
355
|
-
gg_AWSControlTowerAdmins=Users("AWSControlTowerA\ndmins")
|
|
356
|
-
gg_AWSControlTowerAdmins \
|
|
357
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
358
|
-
- IAMPermissions("AWSOrganizations\nFullAccess")
|
|
359
|
-
mm_AWSControlTowerAdmins=[User("velez94@protonma\nil.com"),]
|
|
360
|
-
gg_AWSControlTowerAdmins \
|
|
361
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
362
|
-
- mm_AWSControlTowerAdmins
|
|
363
|
-
|
|
364
|
-
|
|
365
|
-
with Cluster('Account: SharedServices'):
|
|
366
|
-
|
|
367
|
-
with Cluster('Group: AWSSecurityAuditPowerUsers'):
|
|
368
|
-
|
|
369
|
-
gg_AWSSecurityAuditPowerUsers=Users("AWSSecurityAudit\nPowerUsers")
|
|
370
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
371
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
372
|
-
- IAMPermissions("AWSPowerUserAcce\nss")
|
|
373
|
-
mm_AWSSecurityAuditPowerUsers=[]
|
|
374
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
375
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
376
|
-
- mm_AWSSecurityAuditPowerUsers
|
|
377
|
-
|
|
378
|
-
|
|
379
|
-
with Cluster('Group: DevSecOps_Admins'):
|
|
380
|
-
|
|
381
|
-
gg_DevSecOps_Admins=Users("DevSecOps_Admins")
|
|
382
|
-
gg_DevSecOps_Admins \
|
|
383
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
384
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
385
|
-
mm_DevSecOps_Admins=[User("DevSecOpsAdm"),]
|
|
386
|
-
gg_DevSecOps_Admins \
|
|
387
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
388
|
-
- mm_DevSecOps_Admins
|
|
389
|
-
|
|
390
|
-
|
|
391
|
-
with Cluster('User: w.alejovl+shared-labs@gmail.com'):
|
|
392
|
-
|
|
393
|
-
uu_walejovlsharedlabsgmailcom=User("w.alejovl+shared\n-labs@gmail.com")
|
|
394
|
-
uu_walejovlsharedlabsgmailcom \
|
|
395
|
-
- Edge(color="brown", style="dotted") \
|
|
396
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
397
|
-
|
|
398
|
-
with Cluster('Group: AWSSecurityAuditors'):
|
|
399
|
-
|
|
400
|
-
gg_AWSSecurityAuditors=Users("AWSSecurityAudit\nors")
|
|
401
|
-
gg_AWSSecurityAuditors \
|
|
402
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
403
|
-
- IAMPermissions("AWSReadOnlyAccess")
|
|
404
|
-
mm_AWSSecurityAuditors=[]
|
|
405
|
-
gg_AWSSecurityAuditors \
|
|
406
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
407
|
-
- mm_AWSSecurityAuditors
|
|
408
|
-
|
|
409
|
-
|
|
410
|
-
with Cluster('Group: AWSControlTowerAdmins'):
|
|
411
|
-
|
|
412
|
-
gg_AWSControlTowerAdmins=Users("AWSControlTowerA\ndmins")
|
|
413
|
-
gg_AWSControlTowerAdmins \
|
|
414
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
415
|
-
- IAMPermissions("AWSOrganizations\nFullAccess")
|
|
416
|
-
mm_AWSControlTowerAdmins=[User("velez94@protonma\nil.com"),]
|
|
417
|
-
gg_AWSControlTowerAdmins \
|
|
418
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
419
|
-
- mm_AWSControlTowerAdmins
|
|
420
|
-
|
|
421
|
-
|
|
422
|
-
with Cluster('Account: LabVel'):
|
|
423
|
-
|
|
424
|
-
with Cluster('Group: AWSSecurityAuditPowerUsers'):
|
|
425
|
-
|
|
426
|
-
gg_AWSSecurityAuditPowerUsers=Users("AWSSecurityAudit\nPowerUsers")
|
|
427
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
428
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
429
|
-
- IAMPermissions("AWSPowerUserAcce\nss")
|
|
430
|
-
mm_AWSSecurityAuditPowerUsers=[]
|
|
431
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
432
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
433
|
-
- mm_AWSSecurityAuditPowerUsers
|
|
434
|
-
|
|
435
|
-
|
|
436
|
-
with Cluster('Group: AWSAccountFactory'):
|
|
437
|
-
|
|
438
|
-
gg_AWSAccountFactory=Users("AWSAccountFactory")
|
|
439
|
-
gg_AWSAccountFactory \
|
|
440
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
441
|
-
- IAMPermissions("AWSServiceCatalo\ngEndUserAccess")
|
|
442
|
-
mm_AWSAccountFactory=[User("velez94@protonma\nil.com"),]
|
|
443
|
-
gg_AWSAccountFactory \
|
|
444
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
445
|
-
- mm_AWSAccountFactory
|
|
446
|
-
|
|
447
|
-
|
|
448
|
-
with Cluster('Group: AWSControlTowerAdmins'):
|
|
449
|
-
|
|
450
|
-
gg_AWSControlTowerAdmins=Users("AWSControlTowerA\ndmins")
|
|
451
|
-
gg_AWSControlTowerAdmins \
|
|
452
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
453
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
454
|
-
mm_AWSControlTowerAdmins=[User("velez94@protonma\nil.com"),]
|
|
455
|
-
gg_AWSControlTowerAdmins \
|
|
456
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
457
|
-
- mm_AWSControlTowerAdmins
|
|
458
|
-
|
|
459
|
-
|
|
460
|
-
with Cluster('Group: AWSSecurityAuditors'):
|
|
461
|
-
|
|
462
|
-
gg_AWSSecurityAuditors=Users("AWSSecurityAudit\nors")
|
|
463
|
-
gg_AWSSecurityAuditors \
|
|
464
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
465
|
-
- IAMPermissions("AWSReadOnlyAccess")
|
|
466
|
-
mm_AWSSecurityAuditors=[]
|
|
467
|
-
gg_AWSSecurityAuditors \
|
|
468
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
469
|
-
- mm_AWSSecurityAuditors
|
|
470
|
-
|
|
471
|
-
|
|
472
|
-
with Cluster('Group: AWSServiceCatalogAdmins'):
|
|
473
|
-
|
|
474
|
-
gg_AWSServiceCatalogAdmins=Users("AWSServiceCatalo\ngAdmins")
|
|
475
|
-
gg_AWSServiceCatalogAdmins \
|
|
476
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
477
|
-
- IAMPermissions("AWSServiceCatalo\ngAdminFullAccess")
|
|
478
|
-
mm_AWSServiceCatalogAdmins=[]
|
|
479
|
-
gg_AWSServiceCatalogAdmins \
|
|
480
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
481
|
-
- mm_AWSServiceCatalogAdmins
|
|
482
|
-
|
|
483
|
-
|
|
484
|
-
with Cluster('Account: OrganizationManager'):
|
|
485
|
-
|
|
486
|
-
with Cluster('Group: AWSSecurityAuditPowerUsers'):
|
|
487
|
-
|
|
488
|
-
gg_AWSSecurityAuditPowerUsers=Users("AWSSecurityAudit\nPowerUsers")
|
|
489
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
490
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
491
|
-
- IAMPermissions("AWSPowerUserAcce\nss")
|
|
492
|
-
mm_AWSSecurityAuditPowerUsers=[]
|
|
493
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
494
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
495
|
-
- mm_AWSSecurityAuditPowerUsers
|
|
496
|
-
|
|
497
|
-
|
|
498
|
-
with Cluster('Group: SecOps_Adms'):
|
|
499
|
-
|
|
500
|
-
gg_SecOps_Adms=Users("SecOps_Adms")
|
|
501
|
-
gg_SecOps_Adms \
|
|
502
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
503
|
-
- IAMPermissions("LabvelSecOpsAdms")
|
|
504
|
-
mm_SecOps_Adms=[User("w.alejovl+secops\n-labs@gmail.com"),]
|
|
505
|
-
gg_SecOps_Adms \
|
|
506
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
507
|
-
- mm_SecOps_Adms
|
|
508
|
-
|
|
509
|
-
|
|
510
|
-
with Cluster('User: w.alejovl+orgman-labs@gmail.com'):
|
|
511
|
-
|
|
512
|
-
uu_walejovlorgmanlabsgmailcom=User("w.alejovl+orgman\n-labs@gmail.com")
|
|
513
|
-
uu_walejovlorgmanlabsgmailcom \
|
|
514
|
-
- Edge(color="brown", style="dotted") \
|
|
515
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
516
|
-
|
|
517
|
-
with Cluster('Group: AWSSecurityAuditors'):
|
|
518
|
-
|
|
519
|
-
gg_AWSSecurityAuditors=Users("AWSSecurityAudit\nors")
|
|
520
|
-
gg_AWSSecurityAuditors \
|
|
521
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
522
|
-
- IAMPermissions("AWSReadOnlyAccess")
|
|
523
|
-
mm_AWSSecurityAuditors=[]
|
|
524
|
-
gg_AWSSecurityAuditors \
|
|
525
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
526
|
-
- mm_AWSSecurityAuditors
|
|
527
|
-
|
|
528
|
-
|
|
529
|
-
with Cluster('Group: AWSControlTowerAdmins'):
|
|
530
|
-
|
|
531
|
-
gg_AWSControlTowerAdmins=Users("AWSControlTowerA\ndmins")
|
|
532
|
-
gg_AWSControlTowerAdmins \
|
|
533
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
534
|
-
- IAMPermissions("AWSOrganizations\nFullAccess")
|
|
535
|
-
mm_AWSControlTowerAdmins=[User("velez94@protonma\nil.com"),]
|
|
536
|
-
gg_AWSControlTowerAdmins \
|
|
537
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
538
|
-
- mm_AWSControlTowerAdmins
|
|
539
|
-
|
|
540
|
-
|
|
541
|
-
with Cluster('Account: Dev'):
|
|
542
|
-
|
|
543
|
-
with Cluster('Group: AWSSecurityAuditPowerUsers'):
|
|
544
|
-
|
|
545
|
-
gg_AWSSecurityAuditPowerUsers=Users("AWSSecurityAudit\nPowerUsers")
|
|
546
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
547
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
548
|
-
- IAMPermissions("AWSPowerUserAcce\nss")
|
|
549
|
-
mm_AWSSecurityAuditPowerUsers=[]
|
|
550
|
-
gg_AWSSecurityAuditPowerUsers \
|
|
551
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
552
|
-
- mm_AWSSecurityAuditPowerUsers
|
|
553
|
-
|
|
554
|
-
|
|
555
|
-
with Cluster('Group: DevSecOps_Admins'):
|
|
556
|
-
|
|
557
|
-
gg_DevSecOps_Admins=Users("DevSecOps_Admins")
|
|
558
|
-
gg_DevSecOps_Admins \
|
|
559
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
560
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
561
|
-
mm_DevSecOps_Admins=[User("DevSecOpsAdm"),]
|
|
562
|
-
gg_DevSecOps_Admins \
|
|
563
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
564
|
-
- mm_DevSecOps_Admins
|
|
565
|
-
|
|
566
|
-
|
|
567
|
-
with Cluster('User: w.alejovl+dev-labs@gmail.com'):
|
|
568
|
-
|
|
569
|
-
uu_walejovldevlabsgmailcom=User("w.alejovl+dev-la\nbs@gmail.com")
|
|
570
|
-
uu_walejovldevlabsgmailcom \
|
|
571
|
-
- Edge(color="brown", style="dotted") \
|
|
572
|
-
- IAMPermissions("AWSAdministrator\nAccess")
|
|
573
|
-
|
|
574
|
-
with Cluster('Group: AWSSecurityAuditors'):
|
|
575
|
-
|
|
576
|
-
gg_AWSSecurityAuditors=Users("AWSSecurityAudit\nors")
|
|
577
|
-
gg_AWSSecurityAuditors \
|
|
578
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
579
|
-
- IAMPermissions("AWSReadOnlyAccess")
|
|
580
|
-
mm_AWSSecurityAuditors=[]
|
|
581
|
-
gg_AWSSecurityAuditors \
|
|
582
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
583
|
-
- mm_AWSSecurityAuditors
|
|
584
|
-
|
|
585
|
-
|
|
586
|
-
with Cluster('Group: AWSControlTowerAdmins'):
|
|
587
|
-
|
|
588
|
-
gg_AWSControlTowerAdmins=Users("AWSControlTowerA\ndmins")
|
|
589
|
-
gg_AWSControlTowerAdmins \
|
|
590
|
-
- Edge(color="brown", style="dotted", label="Permissions Set") \
|
|
591
|
-
- IAMPermissions("AWSOrganizations\nFullAccess")
|
|
592
|
-
mm_AWSControlTowerAdmins=[User("velez94@protonma\nil.com"),]
|
|
593
|
-
gg_AWSControlTowerAdmins \
|
|
594
|
-
- Edge(color="darkgreen", style="dotted", label="Member") \
|
|
595
|
-
- mm_AWSControlTowerAdmins
|
|
596
|
-
|
|
@@ -1,21 +0,0 @@
|
|
|
1
|
-
__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
2
|
-
docs/graph_org.py,sha256=wfETOd1O44ENRV-sN4B5qTXmmEeFTjfS8KzAjqsKqwI,299
|
|
3
|
-
docs/graph_sso.py,sha256=F1sVXTJR1ziVI60BzWPxm-8wGM3omTeTM9YCyA7gvk8,1016
|
|
4
|
-
docs/graph_sso_complete.py,sha256=lEuaOzroPL7aOnhpif1Junn2wCor8iRLDcpQy9-CePE,27380
|
|
5
|
-
src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
6
|
-
src/reverse_diagrams.py,sha256=fM3YlubgFHzRBK3vmjBrI29RVv8hlPSl8POEqcy4t1c,8654
|
|
7
|
-
src/aws/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
8
|
-
src/aws/describe_identity_store.py,sha256=seZ1Uu4HscRDPgMNuNN8zLsa9okNQI8jRj_PBGJFA9U,5201
|
|
9
|
-
src/aws/describe_organization.py,sha256=ki0o3VhtH6mMV6EmZzlKPRfL5SKKVZGweK3NEiChXfY,3053
|
|
10
|
-
src/aws/describe_sso.py,sha256=AOob-7fQk6paWjBT3dBx0Fizb5IhjWp1IIrOIv6s-yQ,1720
|
|
11
|
-
src/banner/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
12
|
-
src/banner/banner.py,sha256=D4XgGeWINUEpaQeMNIyuU1gY54bgv4UhantsDRj7TBQ,901
|
|
13
|
-
src/dgms/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
14
|
-
src/dgms/graph_mapper.py,sha256=PmDf_zpX2H2mT0qio1dNtVUYeUegOoAnuhn6hgGab-4,6255
|
|
15
|
-
src/dgms/graph_template.py,sha256=4twiySM5MFl3oRpLkjTGgdswIwi2ee3lTjPmTx5SmG4,1170
|
|
16
|
-
src/export_report/export_csv.py,sha256=6A3ZpoBnk6l1GVVmpH-_id6vKdd6JGipNCUwURtyIUs,88
|
|
17
|
-
reverse_diagrams-0.2.5.dist-info/METADATA,sha256=KhHox6Za_GZZy03nZkHxbpp-kczNbGc6i_VyTCuuzg8,5395
|
|
18
|
-
reverse_diagrams-0.2.5.dist-info/WHEEL,sha256=hKi7AIIx6qfnsRbr087vpeJnrVUuDokDHZacPPMW7-Y,87
|
|
19
|
-
reverse_diagrams-0.2.5.dist-info/entry_points.txt,sha256=VZNkrc7qUDbddTCH3pGd83EhUT3PHTx9MzpAk6bb6qc,63
|
|
20
|
-
reverse_diagrams-0.2.5.dist-info/licenses/LICENSE,sha256=IaXsSIrH5zPkhwGm3_eitFhOsUeh8vnvs_ZazfXa4fM,1095
|
|
21
|
-
reverse_diagrams-0.2.5.dist-info/RECORD,,
|
|
@@ -1,21 +0,0 @@
|
|
|
1
|
-
MIT License
|
|
2
|
-
|
|
3
|
-
Copyright (c) [2023] [Alejandro Velez]
|
|
4
|
-
|
|
5
|
-
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
6
|
-
of this software and associated documentation files (the "Software"), to deal
|
|
7
|
-
in the Software without restriction, including without limitation the rights
|
|
8
|
-
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
9
|
-
copies of the Software, and to permit persons to whom the Software is
|
|
10
|
-
furnished to do so, subject to the following conditions:
|
|
11
|
-
|
|
12
|
-
The above copyright notice and this permission notice shall be included in all
|
|
13
|
-
copies or substantial portions of the Software.
|
|
14
|
-
|
|
15
|
-
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
16
|
-
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
17
|
-
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
18
|
-
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
19
|
-
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
20
|
-
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
21
|
-
SOFTWARE.
|
|
File without changes
|
|
File without changes
|