Fix support for signing-certificates

goldfiglabs · Aug 4, 2021 · 8e116e8 · 8e116e8
1 parent 665c062
commit 8e116e8
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/introspector/aws/transforms/iam/signing-certificate.yml b/introspector/aws/transforms/iam/signing-certificate.yml
@@ -12,4 +12,5 @@ resources:
     - CertificateBody
     - Status
     - UploadDate
+  resource_name: signing-certificate
   category: Certificate
diff --git a/introspector/aws/transforms/iam/user.yml b/introspector/aws/transforms/iam/user.yml
@@ -60,6 +60,8 @@ resources:
         parent_path: Arn
       certificate_id:
         path: CertificateId
+      resource_name:
+        value: signing-certificate
     invert: true
 subresources:
 - type: signing-certificate

diff --git a/introspector/aws/uri.py b/introspector/aws/uri.py
@@ -17,6 +17,8 @@ def _iam_uri_fn(resource_name: str, partition: str, account_id: str,
     return f'{account_id}/PasswordPolicy'
   elif resource_name == 'instance-profile':
     return f'arn:{partition}:iam::{account_id}:{resource_name}/{kwargs["id"]}'
+  elif resource_name == 'signing-certificate':
+    return f'arn:{partition}:iam::{account_id}:{resource_name}/{kwargs["certificate_id"]}'
   raise GFInternal(f'Failed IAM ARN ({resource_name}) {kwargs}')
 
 
@@ -72,6 +74,7 @@ def _require_account_id(args: Dict) -> str:
     raise GFInternal(f'Invalid path {path}')
   return path_parts[1]
 
+
 def _security_group_by_name(partition: str, **kwargs) -> DbFn:
   from introspector.models.resource import Resource, ResourceId