Skip to content

Commit 53b3dc2

Browse files
jordanpadamsjordanpadams
authored
Merge pull request #243 from NASA-PDS/242_sanitize_localstack_configs
Localstack config sanitization
2 parents 7577e50 + 42afeaa commit 53b3dc2

4 files changed

Lines changed: 34 additions & 122 deletions

File tree

‎integration/config/localstack.ingress.config.ini.tmpl‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ resource = request
99
[COGNITO]
1010
client_id = __COGNITO_CLIENT_ID__
1111
username = __USERNAME__
12-
password = @Pa55w0rd@
12+
password = not_a_real_password_this_is_only_used_with_localstack_deployments
1313
region = localhost
1414

1515
[OTHER]

‎integration/config/localstack.tfvars.tmpl‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# Terraform override variables for use with the localstack AWS environment
22
localstack_context = true
3-
venue = "test"
3+
venue = "localstack"
44

55
profile = "default"
66
credential_file = "/Users/__USERNAME__/.aws/credentials"

‎integration/config/pds-nucleus-dum-lambda-api-gateway-policy.json‎

Lines changed: 16 additions & 65 deletions
Original file line numberDiff line numberDiff line change
@@ -11,17 +11,10 @@
1111
"Resource": "*",
1212
"Sid": ""
1313
},
14-
{
15-
"Action": "dynamodb:ListTables",
16-
"Effect": "Allow",
17-
"Resource": "*",
18-
"Sid": ""
19-
},
2014
{
2115
"Action": [
2216
"s3:PutObject",
2317
"s3:PutObjectTagging",
24-
"s3:PutObjectVersion",
2518
"s3:PutObjectVersionTagging",
2619
"s3:ListMultipartUploadParts",
2720
"s3:GetObject*",
@@ -31,24 +24,22 @@
3124
],
3225
"Effect": "Allow",
3326
"Resource": [
34-
"arn:aws:s3:::pds-prod-nucleus-dum",
35-
"arn:aws:s3:::pds-prod-nucleus-dum/*",
36-
"arn:aws:s3:::pds-eng-staging-prod",
37-
"arn:aws:s3:::pds-eng-staging-prod/*",
38-
"arn:aws:s3:::pds-geo-staging-prod",
39-
"arn:aws:s3:::pds-geo-staging-prod/*",
40-
"arn:aws:s3:::pds-img-staging-prod",
41-
"arn:aws:s3:::pds-img-staging-prod/*",
42-
"arn:aws:s3:::pds-naif-staging-prod",
43-
"arn:aws:s3:::pds-naif-staging-prod/*",
44-
"arn:aws:s3:::pds-ppi-staging-prod",
45-
"arn:aws:s3:::pds-ppi-staging-prod/*",
46-
"arn:aws:s3:::pds-rms-staging-prod",
47-
"arn:aws:s3:::pds-rms-staging-prod/*",
48-
"arn:aws:s3:::pds-rs-staging-prod",
49-
"arn:aws:s3:::pds-rs-staging-prod/*",
50-
"arn:aws:s3:::pds-sbn-staging-prod",
51-
"arn:aws:s3:::pds-sbn-staging-prod/*"
27+
"arn:aws:s3:::pds-eng-staging-localstack",
28+
"arn:aws:s3:::pds-eng-staging-localstack/*",
29+
"arn:aws:s3:::pds-geo-staging-localstack",
30+
"arn:aws:s3:::pds-geo-staging-localstack/*",
31+
"arn:aws:s3:::pds-img-staging-localstack",
32+
"arn:aws:s3:::pds-img-staging-localstack/*",
33+
"arn:aws:s3:::pds-naif-staging-localstack",
34+
"arn:aws:s3:::pds-naif-staging-localstack/*",
35+
"arn:aws:s3:::pds-ppi-staging-localstack",
36+
"arn:aws:s3:::pds-ppi-staging-localstack/*",
37+
"arn:aws:s3:::pds-rms-staging-localstack",
38+
"arn:aws:s3:::pds-rms-staging-localstack/*",
39+
"arn:aws:s3:::pds-rs-staging-localstack",
40+
"arn:aws:s3:::pds-rs-staging-localstack/*",
41+
"arn:aws:s3:::pds-sbn-staging-localstack",
42+
"arn:aws:s3:::pds-sbn-staging-localstack/*"
5243
],
5344
"Sid": ""
5445
},
@@ -58,17 +49,6 @@
5849
"Resource": "*",
5950
"Sid": ""
6051
},
61-
{
62-
"Action": [
63-
"sns:publish",
64-
"sns:Unsubscribe",
65-
"sns:Subscribe",
66-
"sns:List*"
67-
],
68-
"Effect": "Allow",
69-
"Resource": "*",
70-
"Sid": ""
71-
},
7252
{
7353
"Action": [
7454
"cloudwatch:List*",
@@ -85,35 +65,6 @@
8565
"Resource": "arn:aws:apigateway:us-west-2::/restapis/*/stages",
8666
"Sid": ""
8767
},
88-
{
89-
"Action": [
90-
"states:GetExecutionHistory",
91-
"states:DescribeStateMachine",
92-
"states:DescribeExecution"
93-
],
94-
"Effect": "Allow",
95-
"Resource": "*",
96-
"Sid": ""
97-
},
98-
{
99-
"Action": [
100-
"ec2:DescribeNetworkInterfaces",
101-
"ec2:DeleteNetworkInterface",
102-
"ec2:CreateNetworkInterface"
103-
],
104-
"Effect": "Allow",
105-
"Resource": "*",
106-
"Sid": ""
107-
},
108-
{
109-
"Action": [
110-
"ses:SendEmail",
111-
"ses:SendRawEmail"
112-
],
113-
"Effect": "Allow",
114-
"Resource": "*",
115-
"Sid": ""
116-
},
11768
{
11869
"Action": [
11970
"sqs:DeleteMessage",

‎integration/config/pds-nucleus-dum-lambda-ingress-policy.json‎

Lines changed: 16 additions & 55 deletions
Original file line numberDiff line numberDiff line change
@@ -11,12 +11,6 @@
1111
"Resource": "*",
1212
"Sid": ""
1313
},
14-
{
15-
"Action": "dynamodb:ListTables",
16-
"Effect": "Allow",
17-
"Resource": "*",
18-
"Sid": ""
19-
},
2014
{
2115
"Action": [
2216
"s3:PutObject",
@@ -31,24 +25,22 @@
3125
],
3226
"Effect": "Allow",
3327
"Resource": [
34-
"arn:aws:s3:::pds-prod-nucleus-dum",
35-
"arn:aws:s3:::pds-prod-nucleus-dum/*",
36-
"arn:aws:s3:::pds-eng-staging-prod",
37-
"arn:aws:s3:::pds-eng-staging-prod/*",
38-
"arn:aws:s3:::pds-geo-staging-prod",
39-
"arn:aws:s3:::pds-geo-staging-prod/*",
40-
"arn:aws:s3:::pds-img-staging-prod",
41-
"arn:aws:s3:::pds-img-staging-prod/*",
42-
"arn:aws:s3:::pds-naif-staging-prod",
43-
"arn:aws:s3:::pds-naif-staging-prod/*",
44-
"arn:aws:s3:::pds-ppi-staging-prod",
45-
"arn:aws:s3:::pds-ppi-staging-prod/*",
46-
"arn:aws:s3:::pds-rms-staging-prod",
47-
"arn:aws:s3:::pds-rms-staging-prod/*",
48-
"arn:aws:s3:::pds-rs-staging-prod",
49-
"arn:aws:s3:::pds-rs-staging-prod/*",
50-
"arn:aws:s3:::pds-sbn-staging-prod",
51-
"arn:aws:s3:::pds-sbn-staging-prod/*"
28+
"arn:aws:s3:::pds-eng-staging-localstack",
29+
"arn:aws:s3:::pds-eng-staging-localstack/*",
30+
"arn:aws:s3:::pds-geo-staging-localstack",
31+
"arn:aws:s3:::pds-geo-staging-localstack/*",
32+
"arn:aws:s3:::pds-img-staging-localstack",
33+
"arn:aws:s3:::pds-img-staging-localstack/*",
34+
"arn:aws:s3:::pds-naif-staging-localstack",
35+
"arn:aws:s3:::pds-naif-staging-localstack/*",
36+
"arn:aws:s3:::pds-ppi-staging-localstack",
37+
"arn:aws:s3:::pds-ppi-staging-localstack/*",
38+
"arn:aws:s3:::pds-rms-staging-localstack",
39+
"arn:aws:s3:::pds-rms-staging-localstack/*",
40+
"arn:aws:s3:::pds-rs-staging-localstack",
41+
"arn:aws:s3:::pds-rs-staging-localstack/*",
42+
"arn:aws:s3:::pds-sbn-staging-localstack",
43+
"arn:aws:s3:::pds-sbn-staging-localstack/*"
5244
],
5345
"Sid": ""
5446
},
@@ -58,17 +50,6 @@
5850
"Resource": "*",
5951
"Sid": ""
6052
},
61-
{
62-
"Action": [
63-
"sns:publish",
64-
"sns:Unsubscribe",
65-
"sns:Subscribe",
66-
"sns:List*"
67-
],
68-
"Effect": "Allow",
69-
"Resource": "*",
70-
"Sid": ""
71-
},
7253
{
7354
"Action": [
7455
"cloudwatch:List*",
@@ -84,26 +65,6 @@
8465
"Effect": "Allow",
8566
"Resource": "arn:aws:apigateway:us-west-2::/restapis/*/stages",
8667
"Sid": ""
87-
},
88-
{
89-
"Action": [
90-
"states:GetExecutionHistory",
91-
"states:DescribeStateMachine",
92-
"states:DescribeExecution"
93-
],
94-
"Effect": "Allow",
95-
"Resource": "*",
96-
"Sid": ""
97-
},
98-
{
99-
"Action": [
100-
"ec2:DescribeNetworkInterfaces",
101-
"ec2:DeleteNetworkInterface",
102-
"ec2:CreateNetworkInterface"
103-
],
104-
"Effect": "Allow",
105-
"Resource": "*",
106-
"Sid": ""
10768
}
10869
],
10970
"Version": "2012-10-17"

0 commit comments

Comments
 (0)