/usr/lib/python2.7/dist-packages/elastalert/auth.py is in elastalert 0.1.28-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 | # -*- coding: utf-8 -*-
import os
import boto3
from aws_requests_auth.aws_auth import AWSRequestsAuth
class RefeshableAWSRequestsAuth(AWSRequestsAuth):
"""
A class ensuring that AWS request signing uses a refreshed credential
"""
def __init__(self,
refreshable_credential,
aws_host,
aws_region,
aws_service):
"""
:param refreshable_credential: A credential class that refreshes STS or IAM Instance Profile credentials
:type refreshable_credential: :class:`botocore.credentials.RefreshableCredentials`
"""
self.refreshable_credential = refreshable_credential
self.aws_host = aws_host
self.aws_region = aws_region
self.service = aws_service
@property
def aws_access_key(self):
return self.refreshable_credential.access_key
@property
def aws_secret_access_key(self):
return self.refreshable_credential.secret_key
@property
def aws_token(self):
return self.refreshable_credential.token
class Auth(object):
def __call__(self, host, username, password, aws_region, profile_name):
""" Return the authorization header.
:param host: Elasticsearch host.
:param username: Username used for authenticating the requests to Elasticsearch.
:param password: Password used for authenticating the requests to Elasticsearch.
:param aws_region: AWS Region to use. Only required when signing requests.
:param profile_name: AWS profile to use for connecting. Only required when signing requests.
"""
if username and password:
return username + ':' + password
if not aws_region and not os.environ.get('AWS_DEFAULT_REGION'):
return None
session = boto3.session.Session(profile_name=profile_name, region_name=aws_region)
return RefeshableAWSRequestsAuth(
refreshable_credential=session.get_credentials(),
aws_host=host,
aws_region=session.region_name,
aws_service='es')
|