o !d:@sddlZddlmZddlmZddlmZddlmZddl m Z m Z m Z m Z mZeeZddZd d Zd d Zd dZGdddeZdS)N)CLIOperationCaller)get_policy_arn_suffix) BasicCommand)IAM) RESOURCES$LIFECYCLE_DEFAULT_ROLE_ASSUME_POLICYPOLICY_ARN_PATTERNRESOURCE_TYPE_SNAPSHOTRESOURCE_TYPE_IMAGEcCs.|dd|ddd|i}|||S)NZResponseMetadataZ RolePolicy)popupdate)create_role_responseget_policy_responseresultrOusr/lib/python3.10/site-packages/awscli/customizations/dlm/createdefaultrole.py_construct_results   rcCs&|durt|}||||dSdSN)rZ_display_response)sessionZoperation_namerparsed_globalsZcli_operation_callerrrrdisplay_response's rcCst|}t||}|Sr)rrformat)regionZ policy_nameZ region_suffixZrole_arnrrrget_policy_arn1s rcCs|j}|dur |d}|S)Nr)rZget_config_variable)rrrrrr get_region8s rcs\eZdZdZdZdddddeeegdeeefd gZfd d Zd d Z ddZ Z S)CreateDefaultRolezcreate-default-rolezCreates the default IAM role which will be used by Lifecycle service. If the role does not exist, create-default-role will automatically create it and set its policy. If the role has been already created, create-default-role will not update its policy. z iam-endpointTz

The IAM endpoint to call for creating the roles. This is optional and should only be specified when a custom endpoint should be called for IAM operations.

)nameZ no_paramfile help_textz resource-typez

The resource type for which the role needs to be created. The available options are '%s' and '%s'. This parameter defaults to '%s'.

)rdefaultchoicesrcstt||dSr)superr__init__)selfr __class__rrr!\szCreateDefaultRole.__init__cCs\t|j||_|j|_|j|_t|jjd|j|j|j d|_ | |}t |jd||dS)zCall to run the commandsZiam)Z region_nameZ endpoint_urlZverifyZ create_roler) r_sessionZ_regionZ iam_endpointZ _endpoint_urlZ resource_type_resource_typerZ create_clientZ verify_ssl _iam_client"_create_default_role_if_not_existsr)r"Z parsed_argsrrrrr _run_main_s" zCreateDefaultRole._run_maincCst|jd}t}|j|rtd|dStd|t|j|}|dur+t dt |t|jd}|j |sCtd|dStd||j ||}|j |||j|}t||S) zXMethod to create default lifecycle role if it doesn't exist already Zdefault_role_namezRole %s existsNz;Role %s does not exist. Creating default role for LifecyclezYYou must specify a region. You can also configure your region by running "aws configure".Zdefault_policy_namez!Managed Policy %s does not exist.zManaged Policy %s exists.)rr&rr'Zcheck_if_role_existsLOGdebugrr% ValueErrorrZcheck_if_policy_existsZcreate_role_with_trust_policyZattach_policy_to_roleZ get_policyr)r"rZ role_nameZassume_role_policyrZmanaged_policy_arnr rrrrr(ws<         z4CreateDefaultRole._create_default_role_if_not_exists) __name__ __module__ __qualname__NAMEZ DESCRIPTIONr r Z ARG_TABLEr!r)r( __classcell__rrr#rr?s(  r)loggingZawscli.clidriverrZawscli.customizations.utilsrZawscli.customizations.commandsrZawscli.customizations.dlm.iamrZ#awscli.customizations.dlm.constantsrrrr r getLoggerr-r*rrrrrrrrrs