feat(aws): Add Support for Cloudwatch Logs Resource Policy (#4883)

bbernays · web-flow · commit 84cb081b1854 · 2022-11-22T14:16:12.000Z
#### Summary

&lt;!--
Explain what problem this PR addresses
--&gt;

&lt;!--
diff --git a/plugins/source/aws/codegen/recipes/cloudwatchlogs.go b/plugins/source/aws/codegen/recipes/cloudwatchlogs.go
@@ -8,6 +8,20 @@ import (
 
 func CloudWatchLogsResources() []*Resource {
 	resources := []*Resource{
+		{
+			SubService:  "resource_policies",
+			Struct:      &types.ResourcePolicy{},
+			Description: "https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ResourcePolicy.html",
+			PKColumns:   []string{"account_id", "region", "policy_name"},
+			SkipFields:  []string{"PolicyDocument"},
+			ExtraColumns: append(defaultRegionalColumns, []codegen.ColumnDefinition{
+				{
+					Name:     "policy_document",
+					Type:     schema.TypeJSON,
+					Resolver: `schema.PathResolver("PolicyDocument")`,
+				},
+			}...),
+		},
 		{
 			SubService:  "metric_filters",
 			Struct:      &types.MetricFilter{},
diff --git a/plugins/source/aws/docs/tables/README.md b/plugins/source/aws/docs/tables/README.md
@@ -82,6 +82,7 @@
 | [aws_cloudhsmv2_backups](aws_cloudhsmv2_backups.md) |
 | [aws_cloudtrail_trails](aws_cloudtrail_trails.md) |
 | ↳ [aws_cloudtrail_trail_event_selectors](aws_cloudtrail_trail_event_selectors.md) |
+| [aws_cloudwatchlogs_resource_policies](aws_cloudwatchlogs_resource_policies.md) |
 | [aws_cloudwatchlogs_metric_filters](aws_cloudwatchlogs_metric_filters.md) |
 | [aws_cloudwatchlogs_log_groups](aws_cloudwatchlogs_log_groups.md) |
 | [aws_cloudwatch_alarms](aws_cloudwatch_alarms.md) |
diff --git a/plugins/source/aws/docs/tables/aws_cloudwatchlogs_resource_policies.md b/plugins/source/aws/docs/tables/aws_cloudwatchlogs_resource_policies.md
@@ -0,0 +1,19 @@
+# Table: aws_cloudwatchlogs_resource_policies
+
+https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_ResourcePolicy.html
+
+The composite primary key for this table is (**account_id**, **region**, **policy_name**).
+
+
+## Columns
+| Name          | Type          |
+| ------------- | ------------- |
+|_cq_source_name|String|
+|_cq_sync_time|Timestamp|
+|_cq_id|UUID|
+|_cq_parent_id|UUID|
+|account_id (PK)|String|
+|region (PK)|String|
+|policy_document|JSON|
+|last_updated_time|Int|
+|policy_name (PK)|String|
diff --git a/plugins/source/aws/resources/plugin/tables.go b/plugins/source/aws/resources/plugin/tables.go
diff --git a/plugins/source/aws/resources/services/cloudwatchlogs/resource_policies.go b/plugins/source/aws/resources/services/cloudwatchlogs/resource_policies.go
diff --git a/plugins/source/aws/resources/services/cloudwatchlogs/resource_policies_fetch.go b/plugins/source/aws/resources/services/cloudwatchlogs/resource_policies_fetch.go
@@ -0,0 +1,28 @@
+package cloudwatchlogs
+
+import (
+	"context"
+
+	"github.com/aws/aws-sdk-go-v2/aws"
+	"github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs"
+	"github.com/cloudquery/cloudquery/plugins/source/aws/client"
+	"github.com/cloudquery/plugin-sdk/schema"
+)
+
+func fetchCloudwatchlogsResourcePolicies(ctx context.Context, meta schema.ClientMeta, parent *schema.Resource, res chan<- interface{}) error {
+	var config cloudwatchlogs.DescribeResourcePoliciesInput
+	c := meta.(*client.Client)
+	svc := c.Services().Cloudwatchlogs
+	for {
+		response, err := svc.DescribeResourcePolicies(ctx, &config)
+		if err != nil {
+			return err
+		}
+		res <- response.ResourcePolicies
+		if aws.ToString(response.NextToken) == "" {
+			break
+		}
+		config.NextToken = response.NextToken
+	}
+	return nil
+}
diff --git a/plugins/source/aws/resources/services/cloudwatchlogs/resource_policies_mock_test.go b/plugins/source/aws/resources/services/cloudwatchlogs/resource_policies_mock_test.go
@@ -0,0 +1,32 @@
+package cloudwatchlogs
+
+import (
+	"testing"
+
+	"github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs"
+	"github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types"
+	"github.com/cloudquery/cloudquery/plugins/source/aws/client"
+	"github.com/cloudquery/cloudquery/plugins/source/aws/client/mocks"
+	"github.com/cloudquery/plugin-sdk/faker"
+	"github.com/golang/mock/gomock"
+)
+
+func buildResourcePolicies(t *testing.T, ctrl *gomock.Controller) client.Services {
+	m := mocks.NewMockCloudwatchlogsClient(ctrl)
+	rp := types.ResourcePolicy{}
+	err := faker.FakeObject(&rp)
+	if err != nil {
+		t.Fatal(err)
+	}
+	m.EXPECT().DescribeResourcePolicies(gomock.Any(), gomock.Any(), gomock.Any()).Return(
+		&cloudwatchlogs.DescribeResourcePoliciesOutput{
+			ResourcePolicies: []types.ResourcePolicy{rp},
+		}, nil)
+	return client.Services{
+		Cloudwatchlogs: m,
+	}
+}
+
+func TestResourcePolicies(t *testing.T) {
+	client.AwsMockTestHelper(t, ResourcePolicies(), buildResourcePolicies, client.TestOptions{})
+}
