Add WAFv2 resources (#542)

resources/wafv2-ipsets.go

@@ -0,0 +1,100 @@
+package resources
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/session"
+	"github.com/aws/aws-sdk-go/service/wafv2"
+	"github.com/rebuy-de/aws-nuke/pkg/types"
+)
+
+type WAFv2IPSet struct {
+	svc       *wafv2.WAFV2
+	id        *string
+	name      *string
+	lockToken *string
+	scope     *string
+}
+
+func init() {
+	register("WAFv2IPSet", ListWAFv2IPSets)
+}
+
+func ListWAFv2IPSets(sess *session.Session) ([]Resource, error) {
+	svc := wafv2.New(sess)
+	resources := []Resource{}
+
+	params := &wafv2.ListIPSetsInput{
+		Limit: aws.Int64(50),
+		Scope: aws.String("REGIONAL"),
+	}
+
+	output, err := getIPSets(svc, params)
+	if err != nil {
+		return []Resource{}, err
+	}
+
+	resources = append(resources, output...)
+
+	if *sess.Config.Region == "us-east-1" {
+		params.Scope = aws.String("CLOUDFRONT")
+
+		output, err := getIPSets(svc, params)
+		if err != nil {
+			return []Resource{}, err
+		}
+
+		resources = append(resources, output...)
+	}
+
+	return resources, nil
+}
+
+func getIPSets(svc *wafv2.WAFV2, params *wafv2.ListIPSetsInput) ([]Resource, error) {
+	resources := []Resource{}
+	for {
+		resp, err := svc.ListIPSets(params)
+		if err != nil {
+			return nil, err
+		}
+
+		for _, set := range resp.IPSets {
+			resources = append(resources, &WAFv2IPSet{
+				svc:       svc,
+				id:        set.Id,
+				name:      set.Name,
+				lockToken: set.LockToken,
+				scope:     params.Scope,
+			})
+		}
+
+		if resp.NextMarker == nil {
+			break
+		}
+
+		params.NextMarker = resp.NextMarker
+	}
+
+	return resources, nil
+}
+
+func (r *WAFv2IPSet) Remove() error {
+	_, err := r.svc.DeleteIPSet(&wafv2.DeleteIPSetInput{
+		Id:        r.id,
+		Name:      r.name,
+		Scope:     r.scope,
+		LockToken: r.lockToken,
+	})
+
+	return err
+}
+
+func (r *WAFv2IPSet) Properties() types.Properties {
+	return types.NewProperties().
+		Set("ID", r.id).
+		Set("Name", r.name).
+		Set("Scope", r.scope)
+}
+
+func (r *WAFv2IPSet) String() string {
+	return *r.id
+}

resources/wafv2-regex-pattern-sets.go

@@ -0,0 +1,100 @@
+package resources
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/session"
+	"github.com/aws/aws-sdk-go/service/wafv2"
+	"github.com/rebuy-de/aws-nuke/pkg/types"
+)
+
+type WAFv2RegexPatternSet struct {
+	svc       *wafv2.WAFV2
+	id        *string
+	name      *string
+	lockToken *string
+	scope     *string
+}
+
+func init() {
+	register("WAFv2RegexPatternSet", ListWAFv2RegexPatternSets)
+}
+
+func ListWAFv2RegexPatternSets(sess *session.Session) ([]Resource, error) {
+	svc := wafv2.New(sess)
+	resources := []Resource{}
+
+	params := &wafv2.ListRegexPatternSetsInput{
+		Limit: aws.Int64(50),
+		Scope: aws.String("REGIONAL"),
+	}
+
+	output, err := getRegexPatternSets(svc, params)
+	if err != nil {
+		return []Resource{}, err
+	}
+
+	resources = append(resources, output...)
+
+	if *sess.Config.Region == "us-east-1" {
+		params.Scope = aws.String("CLOUDFRONT")
+
+		output, err := getRegexPatternSets(svc, params)
+		if err != nil {
+			return []Resource{}, err
+		}
+
+		resources = append(resources, output...)
+	}
+
+	return resources, nil
+}
+
+func getRegexPatternSets(svc *wafv2.WAFV2, params *wafv2.ListRegexPatternSetsInput) ([]Resource, error) {
+	resources := []Resource{}
+	for {
+		resp, err := svc.ListRegexPatternSets(params)
+		if err != nil {
+			return nil, err
+		}
+
+		for _, set := range resp.RegexPatternSets {
+			resources = append(resources, &WAFv2RegexPatternSet{
+				svc:       svc,
+				id:        set.Id,
+				name:      set.Name,
+				lockToken: set.LockToken,
+				scope:     params.Scope,
+			})
+		}
+
+		if resp.NextMarker == nil {
+			break
+		}
+
+		params.NextMarker = resp.NextMarker
+	}
+
+	return resources, nil
+}
+
+func (r *WAFv2RegexPatternSet) Remove() error {
+	_, err := r.svc.DeleteRegexPatternSet(&wafv2.DeleteRegexPatternSetInput{
+		Id:        r.id,
+		Name:      r.name,
+		Scope:     r.scope,
+		LockToken: r.lockToken,
+	})
+
+	return err
+}
+
+func (r *WAFv2RegexPatternSet) Properties() types.Properties {
+	return types.NewProperties().
+		Set("ID", r.id).
+		Set("Name", r.name).
+		Set("Scope", r.scope)
+}
+
+func (r *WAFv2RegexPatternSet) String() string {
+	return *r.id
+}

resources/wafv2-rulegroup.go

@@ -0,0 +1,102 @@
+package resources
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/session"
+	"github.com/aws/aws-sdk-go/service/wafv2"
+	"github.com/rebuy-de/aws-nuke/pkg/types"
+)
+
+type WAFv2RuleGroup struct {
+	svc       *wafv2.WAFV2
+	ID        *string
+	name      *string
+	lockToken *string
+	scope     *string
+}
+
+func init() {
+	register("WAFv2RuleGroup", ListWAFv2RuleGroups)
+}
+
+func ListWAFv2RuleGroups(sess *session.Session) ([]Resource, error) {
+	svc := wafv2.New(sess)
+	resources := []Resource{}
+
+	params := &wafv2.ListRuleGroupsInput{
+		Limit: aws.Int64(50),
+		Scope: aws.String("REGIONAL"),
+	}
+
+	output, err := getRuleGroups(svc, params)
+	if err != nil {
+		return []Resource{}, err
+	}
+
+	resources = append(resources, output...)
+
+	if *sess.Config.Region == "us-east-1" {
+		params.Scope = aws.String("CLOUDFRONT")
+
+		output, err := getRuleGroups(svc, params)
+		if err != nil {
+			return []Resource{}, err
+		}
+
+		resources = append(resources, output...)
+	}
+
+	return resources, nil
+}
+
+func getRuleGroups(svc *wafv2.WAFV2, params *wafv2.ListRuleGroupsInput) ([]Resource, error) {
+	resources := []Resource{}
+	for {
+		resp, err := svc.ListRuleGroups(params)
+		if err != nil {
+			return nil, err
+		}
+
+		for _, webACL := range resp.RuleGroups {
+			resources = append(resources, &WAFv2RuleGroup{
+				svc:       svc,
+				ID:        webACL.Id,
+				name:      webACL.Name,
+				lockToken: webACL.LockToken,
+				scope:     params.Scope,
+			})
+		}
+
+		if resp.NextMarker == nil {
+			break
+		}
+
+		params.NextMarker = resp.NextMarker
+	}
+	return resources, nil
+}
+
+func (f *WAFv2RuleGroup) Remove() error {
+	_, err := f.svc.DeleteRuleGroup(&wafv2.DeleteRuleGroupInput{
+		Id:        f.ID,
+		Name:      f.name,
+		Scope:     f.scope,
+		LockToken: f.lockToken,
+	})
+
+	return err
+}
+
+func (f *WAFv2RuleGroup) String() string {
+	return *f.ID
+}
+
+func (f *WAFv2RuleGroup) Properties() types.Properties {
+	properties := types.NewProperties()
+
+	properties.
+		Set("ID", f.ID).
+		Set("Name", f.name).
+		Set("Scope", f.scope)
+	return properties
+}