def run(self): grants = keymanager.get_grants() for grant in grants: kms_client.revoke_grant(KeyId=keymanager.get_key_id( app.config['AUTH_KEY']), GrantId=grant['GrantId']) app.logger.info('Finished revoking grants.')
def run(self): grants = keymanager.get_grants() for grant in grants: kms.revoke_grant( KeyId=keymanager.get_key_id(app.config['AUTH_KEY']), GrantId=grant['GrantId'] ) logging.info('Finished revoking grants.')
def run(self): grants = keymanager.get_grants() try: roles = [x for x in iam.roles.all()] except ClientError: logging.error('Failed to fetch IAM roles.') return services = [] for service in Service.data_type_date_index.query('service'): services.append(service.id) for role in roles: if role.name in services: logging.info('Managing grants for {0}.'.format(role.name)) keymanager._ensure_grants(role, grants) logging.info('Finished managing grants.')
def run(self): grants = keymanager.get_grants() try: roles = [x for x in iam_resource.roles.all()] except ClientError: app.logger.error('Failed to fetch IAM roles.') return services = [] for service in Service.data_type_date_index.query('service'): services.append(service.id) for role in roles: if role.name in services: app.logger.info('Managing grants for {0}.'.format(role.name)) keymanager._ensure_grants(role, grants) app.logger.info('Finished managing grants.')