Python get_binding_deltas Examples

Example #1

File: gcp_data_model.py Project: panther-labs/panther-analysis

def get_admin_map(event):
    roles_assigned = {}
    for delta in get_binding_deltas(event):
        if delta.get("action") == "ADD":
            roles_assigned[delta.get("member")] = delta.get("role")

    return roles_assigned

Example #2

File: gcp_data_model.py Project: zigmax/panther-analysis

def get_event_type(event):
    # currently, only tracking a handful of event types
    for delta in get_binding_deltas(event):
        if delta["action"] == "ADD":
            if any((fnmatch(delta.get("role", ""), admin_role_pattern)
                    for admin_role_pattern in ADMIN_ROLES)):
                return event_type.ADMIN_ROLE_ASSIGNED

    return None

Example #3

File: gcp_iam_admin_role_assigned.py Project: ttrues/panther-analysis

def rule(event):
    for delta in get_binding_deltas(event):
        if delta.get('action') != 'ADD':
            continue
        if any([
                fnmatch(delta.get('role', ''), admin_role_pattern)
                for admin_role_pattern in ADMIN_ROLES
        ]):
            return True
    return False

Example #4

File: gcp_data_model.py Project: ttrues/panther-analysis

def get_event_type(event):
    # currently, only tracking a handful of event types
    for delta in get_binding_deltas(event):
        if delta['action'] == 'ADD':
            if any([
                    fnmatch(delta.get('role', ''), admin_role_pattern)
                    for admin_role_pattern in ADMIN_ROLES
            ]):
                return event_type.ADMIN_ROLE_ASSIGNED

    return None

Example #5

def rule(event):
    for delta in get_binding_deltas(event):
        if delta.get("action") != "ADD":
            continue
        if any(
            (
                fnmatch(delta.get("role", ""), admin_role_pattern)
                for admin_role_pattern in ADMIN_ROLES
            )
        ):
            return True
    return False