bucketwarden-server 0.1.0

BucketWarden storage server runtime.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

use super::*;

impl BucketWarden {
    pub(crate) fn audit_kms_encrypt(
        &mut self,
        principal: &str,
        resource: &str,
        version_id: &str,
        key_id: &str,
    ) {
        self.audit.append(
            principal,
            "kms:Encrypt",
            resource,
            AuditOutcome::Allowed,
            Some(format!("version_id={version_id};key_id={key_id}")),
        );
    }

    pub(crate) fn audit_kms_decrypt(
        &mut self,
        principal: &str,
        resource: &str,
        version_id: &str,
        key_id: &str,
    ) {
        self.audit.append(
            principal,
            "kms:Decrypt",
            resource,
            AuditOutcome::Allowed,
            Some(format!("version_id={version_id};key_id={key_id}")),
        );
    }

    pub(crate) fn audit_kms_unwrap(
        &mut self,
        principal: &str,
        resource: &str,
        version_id: &str,
        key_id: &str,
    ) {
        self.audit.append(
            principal,
            "kms:UnwrapDataKey",
            resource,
            AuditOutcome::Allowed,
            Some(format!("version_id={version_id};key_id={key_id}")),
        );
    }

    pub(crate) fn audit_kms_admin(&mut self, actor: &str, action: &str, key_id: &str) {
        self.audit.append(
            actor,
            action,
            key_id,
            AuditOutcome::Allowed,
            Some("runtime-kms".to_string()),
        );
    }

    pub(crate) fn audit_kms_failure(
        &mut self,
        principal: &str,
        action: &str,
        resource: &str,
        key_id: &str,
        reason: &str,
    ) {
        self.audit.append(
            principal,
            action,
            resource,
            AuditOutcome::Denied,
            Some(format!("key_id={key_id};reason={reason}")),
        );
    }
}