def run(self):
grants = keymanager.get_grants()
for grant in grants:
kms_client.revoke_grant(KeyId=keymanager.get_key_id(
app.config['AUTH_KEY']),
GrantId=grant['GrantId'])
app.logger.info('Finished revoking grants.')
def run(self):
grants = keymanager.get_grants()
for grant in grants:
kms.revoke_grant(
KeyId=keymanager.get_key_id(app.config['AUTH_KEY']),
GrantId=grant['GrantId']
)
logging.info('Finished revoking grants.')
def run(self):
grants = keymanager.get_grants()
try:
roles = [x for x in iam.roles.all()]
except ClientError:
logging.error('Failed to fetch IAM roles.')
return
services = []
for service in Service.data_type_date_index.query('service'):
services.append(service.id)
for role in roles:
if role.name in services:
logging.info('Managing grants for {0}.'.format(role.name))
keymanager._ensure_grants(role, grants)
logging.info('Finished managing grants.')
def run(self):
grants = keymanager.get_grants()
try:
roles = [x for x in iam_resource.roles.all()]
except ClientError:
app.logger.error('Failed to fetch IAM roles.')
return
services = []
for service in Service.data_type_date_index.query('service'):
services.append(service.id)
for role in roles:
if role.name in services:
app.logger.info('Managing grants for {0}.'.format(role.name))
keymanager._ensure_grants(role, grants)
app.logger.info('Finished managing grants.')
