com.mozilla.secops.identity

Class IdentityManager

java.lang.Object

com.mozilla.secops.identity.IdentityManager

public class IdentityManager
extends Object

IdentityManager supports translations from values such as user names to a global identifier

In addition to username identity translation, this class can also handle translations from values such as AWS account IDs to a more description account name.

Constructor Summary

Constructors

Constructor and Description
IdentityManager() Create new empty IdentityManager

Method Summary

Modifier and Type	Method and Description
Map<String,String>	getAwsAccountMap() Get AWS account map
Map<String,Identity>	getIdentities() Get all known identities
Identity	getIdentity(String identifier) Get specific identity
Map<String,String>	getNamedSubnets() Get named subnets
static IdentityManager	load(String path) Load identity manager configuration from a resource file
void	logWarnings() Analyze the loaded identity manager configuration, logging warnings if required
String	lookupAlias(String username) Given supplied alias, return any matching global identity
String	lookupNamedSubnet(String address) Given supplied IP address, return matching named subnet

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IdentityManager

public IdentityManager()

Create new empty IdentityManager

Method Detail

load

public static IdentityManager load(String path)
                            throws IOException

Load identity manager configuration from a resource file

Parameters:

path - Path to load JSON file from, resource path or GCS URL

Returns:

IdentityManager

Throws:

IOException - IOException

logWarnings

public void logWarnings()

Analyze the loaded identity manager configuration, logging warnings if required

Review identity manager configuration and log any possible issues with the configuration as warnings. Purely informational and will not throw exceptions if misconfigurations exist.

getAwsAccountMap

public Map<String,String> getAwsAccountMap()

Get AWS account map

Returns:

Map of AWS account identifiers to descriptive names

getIdentities

public Map<String,Identity> getIdentities()

Get all known identities

Returns:

Map of identities, where key is global standardized name

getNamedSubnets

public Map<String,String> getNamedSubnets()

Get named subnets

Returns:

Map of names to subnets

getIdentity

public Identity getIdentity(String identifier)

Get specific identity

Parameters:

identifier - Global identifier to return Identity for

Returns:

Identity, null if not found

lookupAlias

public String lookupAlias(String username)

Given supplied alias, return any matching global identity

Parameters:

username - Username to search for

Returns:

Resolved global identity string

lookupNamedSubnet

public String lookupNamedSubnet(String address)

Given supplied IP address, return matching named subnet

Parameters:

address - IP address for lookup

Returns:

Named subnet, or null if no match