OwlCyberSecurity - MANAGER
Edit File: aws.cpython-38.pyc
U ��g� � @ s� d dl Z d dlZd dlmZmZ d dlmZmZmZm Z m Z d dl m Z dZ dZe efZdZdZd Zd Zd Zd Zd ZdZed Ze�e �e��Z G dd� de �Z dS )� N)�Any�Dict)� exceptions�http�secret_manager�system�util)� PublicCloudAutoAttachInstancez169.254.169.254z[fd00:ec2::254]zhttp://{}/latest/api/tokenz0http://{}/latest/dynamic/instance-identity/pkcs7z3http://{}/latest/dynamic/instance-identity/documentz/sys/hypervisor/uuidz /sys/class/dmi/id/product_serialz /sys/class/dmi/id/product_uuidZ21600zX-aws-ec2-metadata-tokenz -ttl-secondsc @ s� e Zd ZdZdZed�dd�Zeej e j dddgd�e ee f d�d d ���Zej e j dddgd�e d�d d ��Zeed�d d��Zdd� Zej e j dddgd�dd� �Zeed�dd��Zeed�dd��Zed�dd�Zeed�d d �ZdS ) �AWSAutoAttachInstanceN)�urlc C s6 t j||dd�}|jdkr |jS tj|j|jd��d S )N� )�headers�timeout�� ��code�body)r �readurlr r r �CloudMetadataError)�selfr r �response� r �5/usr/lib/python3/dist-packages/uaclient/clouds/aws.py�_get_imds_url_response s �z,AWSAutoAttachInstance._get_imds_url_responseg �?r )Z retry_sleeps)�returnc C s6 | � � }t�| j�}| j||d�}tj�|� d|iS )N�r Zpkcs7)� _request_imds_v2_token_headers�IMDS_URL�format� _ip_addressr r �secrets� add_secret)r r r Zimds_url_responser r r � identity_doc* s z"AWSAutoAttachInstance.identity_docc C sj | � � }t�| j�}zt�| j||d��}W n8 tjk rd } zt� d|� i W Y �S d}~X Y nX |S )a Get the instance identity doc associated with the current instance. See https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/retrieve-iid.html for more context. @return: Dict containing the instance identity document. r z-Error decoding instance identity document: %sN) r � _IMDS_IID_URLr r �json�loadsr ZJSONDecodeError�LOG�debug)r r r �ii_doc�er r r � _get_ii_doc3 s � z!AWSAutoAttachInstance._get_ii_docc C s0 | � � }|�dd�}|�dd�}t|�p.t|�S )a Determines if the instance is likely Ubuntu Pro. Criteria: if any billing-product or marketplace-product-code is present, then is likely a Pro instance. @return: Boolean indicating if the instance is likely pro or not. ZbillingProductsNZmarketplaceProductCodes)r* �get�bool)r r( Zbilling_productsZmarketplace_product_codesr r r � is_likely_proI s z#AWSAutoAttachInstance.is_likely_proc C s~ t D ]X}z| j|d�}W n8 tk rP } zt�d|t|dd�� W 5 d }~X Y qX || _ q^q| jd krztjd� t �d��|S )N)� ip_addressz*Could not reach AWS IMDS at http://%s: %s �reason� z, )Z addresses) �IMDS_IP_ADDRESS�_get_imds_v2_token_headers� Exceptionr& Zwarning�getattrr r ZAWSNoValidIMDS�join)r Zaddressr r) r r r r X s � �z4AWSAutoAttachInstance._request_imds_v2_token_headers� � c C s� | j dkrd S | j r t| j iS tjt�|�dttidd�}|jdkrd|j | _ t j � | j � t| j iS |jdkrxd| _ d S t j|j|j d��d S )NZIMDSv1ZPUTr )�methodr r r i� r )� _api_token�AWS_TOKEN_PUT_HEADERr r �IMDS_V2_TOKEN_URLr �AWS_TOKEN_REQ_HEADER�AWS_TOKEN_TTL_SECONDSr r r r r! r r )r r. r r r r r2 k s* � �z0AWSAutoAttachInstance._get_imds_v2_token_headersc C s dS )NZawsr �r r r r � cloud_type� s z AWSAutoAttachInstance.cloud_typec C s� z$t �t�}d|dd� kr"W dS W n tk r8 Y nX t �t��� }t �t��� }d|dd� krz|dd� kr�n ndS dS )z$This machine is a viable AWSInstanceZec2r � TF)r Z load_file�SYS_HYPERVISOR_PRODUCT_UUID�FileNotFoundError�DMI_PRODUCT_UUID�lower�DMI_PRODUCT_SERIAL)r Zhypervisor_uuidZdmi_uuidZ dmi_serialr r r � is_viable� s (z AWSAutoAttachInstance.is_viablec C s dS )Z UnsupportedFr r> r r r �should_poll_for_pro_license� s z1AWSAutoAttachInstance.should_poll_for_pro_license)�wait_for_changer c C s t �� �d S )N)r Z InPlaceUpgradeNotSupportedError)r rH r r r �is_pro_license_present� s z,AWSAutoAttachInstance.is_pro_license_present)�__name__� __module__� __qualname__r9 r �strr �propertyr Zretryr r r r r" r* r, r- r r2 r? rF rG rI r r r r r s& r ) r$ Zlogging�typingr r Zuaclientr r r r r Zuaclient.cloudsr ZIMDS_IPV4_ADDRESSZIMDS_IPV6_ADDRESSr1 r; r r# rA rE rC r= r: r< Z getLoggerZ replace_top_level_logger_namerJ r& r r r r r �<module> s$