| Index: third_party/gsutil/boto/rds/dbsecuritygroup.py
|
| diff --git a/third_party/gsutil/boto/rds/dbsecuritygroup.py b/third_party/gsutil/boto/rds/dbsecuritygroup.py
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..6a69ddb0dc93e41bccedfd8f26c3fa828d229acf
|
| --- /dev/null
|
| +++ b/third_party/gsutil/boto/rds/dbsecuritygroup.py
|
| @@ -0,0 +1,177 @@
|
| +# Copyright (c) 2009 Mitch Garnaat http://garnaat.org/
|
| +#
|
| +# Permission is hereby granted, free of charge, to any person obtaining a
|
| +# copy of this software and associated documentation files (the
|
| +# "Software"), to deal in the Software without restriction, including
|
| +# without limitation the rights to use, copy, modify, merge, publish, dis-
|
| +# tribute, sublicense, and/or sell copies of the Software, and to permit
|
| +# persons to whom the Software is furnished to do so, subject to the fol-
|
| +# lowing conditions:
|
| +#
|
| +# The above copyright notice and this permission notice shall be included
|
| +# in all copies or substantial portions of the Software.
|
| +#
|
| +# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
|
| +# OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABIL-
|
| +# ITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT
|
| +# SHALL THE AUTHOR BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
|
| +# WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
| +# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
|
| +# IN THE SOFTWARE.
|
| +
|
| +"""
|
| +Represents an DBSecurityGroup
|
| +"""
|
| +from boto.ec2.securitygroup import SecurityGroup
|
| +
|
| +class DBSecurityGroup(object):
|
| + """
|
| + Represents an RDS database security group
|
| +
|
| + Properties reference available from the AWS documentation at http://docs.amazonwebservices.com/AmazonRDS/latest/APIReference/API_DeleteDBSecurityGroup.html
|
| +
|
| + :ivar Status: The current status of the security group. Possibile values are [ active, ? ]. Reference documentation lacks specifics of possibilities
|
| + :ivar connection: boto.rds.RDSConnection associated with the current object
|
| + :ivar description: The description of the security group
|
| + :ivar ec2_groups: List of EC2SecurityGroup objects that this security group PERMITS
|
| + :ivar ip_ranges: List of IPRange objects (containing CIDR addresses) that this security group PERMITS
|
| + :ivar name: Name of the security group
|
| + :ivar owner_id: ID of the owner of the security group. Can be 'None'
|
| + """
|
| + def __init__(self, connection=None, owner_id=None,
|
| + name=None, description=None):
|
| + self.connection = connection
|
| + self.owner_id = owner_id
|
| + self.name = name
|
| + self.description = description
|
| + self.ec2_groups = []
|
| + self.ip_ranges = []
|
| +
|
| + def __repr__(self):
|
| + return 'DBSecurityGroup:%s' % self.name
|
| +
|
| + def startElement(self, name, attrs, connection):
|
| + if name == 'IPRange':
|
| + cidr = IPRange(self)
|
| + self.ip_ranges.append(cidr)
|
| + return cidr
|
| + elif name == 'EC2SecurityGroup':
|
| + ec2_grp = EC2SecurityGroup(self)
|
| + self.ec2_groups.append(ec2_grp)
|
| + return ec2_grp
|
| + else:
|
| + return None
|
| +
|
| + def endElement(self, name, value, connection):
|
| + if name == 'OwnerId':
|
| + self.owner_id = value
|
| + elif name == 'DBSecurityGroupName':
|
| + self.name = value
|
| + elif name == 'DBSecurityGroupDescription':
|
| + self.description = value
|
| + elif name == 'IPRanges':
|
| + pass
|
| + else:
|
| + setattr(self, name, value)
|
| +
|
| + def delete(self):
|
| + return self.connection.delete_dbsecurity_group(self.name)
|
| +
|
| + def authorize(self, cidr_ip=None, ec2_group=None):
|
| + """
|
| + Add a new rule to this DBSecurity group.
|
| + You need to pass in either a CIDR block to authorize or
|
| + and EC2 SecurityGroup.
|
| +
|
| + @type cidr_ip: string
|
| + @param cidr_ip: A valid CIDR IP range to authorize
|
| +
|
| + @type ec2_group: :class:`boto.ec2.securitygroup.SecurityGroup>`
|
| +
|
| + @rtype: bool
|
| + @return: True if successful.
|
| + """
|
| + if isinstance(ec2_group, SecurityGroup):
|
| + group_name = ec2_group.name
|
| + group_owner_id = ec2_group.owner_id
|
| + else:
|
| + group_name = None
|
| + group_owner_id = None
|
| + return self.connection.authorize_dbsecurity_group(self.name,
|
| + cidr_ip,
|
| + group_name,
|
| + group_owner_id)
|
| +
|
| + def revoke(self, cidr_ip=None, ec2_group=None):
|
| + """
|
| + Revoke access to a CIDR range or EC2 SecurityGroup.
|
| + You need to pass in either a CIDR block or
|
| + an EC2 SecurityGroup from which to revoke access.
|
| +
|
| + @type cidr_ip: string
|
| + @param cidr_ip: A valid CIDR IP range to revoke
|
| +
|
| + @type ec2_group: :class:`boto.ec2.securitygroup.SecurityGroup>`
|
| +
|
| + @rtype: bool
|
| + @return: True if successful.
|
| + """
|
| + if isinstance(ec2_group, SecurityGroup):
|
| + group_name = ec2_group.name
|
| + group_owner_id = ec2_group.owner_id
|
| + return self.connection.revoke_dbsecurity_group(
|
| + self.name,
|
| + ec2_security_group_name=group_name,
|
| + ec2_security_group_owner_id=group_owner_id)
|
| +
|
| + # Revoking by CIDR IP range
|
| + return self.connection.revoke_dbsecurity_group(
|
| + self.name, cidr_ip=cidr_ip)
|
| +
|
| +class IPRange(object):
|
| + """
|
| + Describes a CIDR address range for use in a DBSecurityGroup
|
| + """
|
| +
|
| + def __init__(self, parent=None):
|
| + self.parent = parent
|
| + self.cidr_ip = None
|
| + self.status = None
|
| +
|
| + def __repr__(self):
|
| + return 'IPRange:%s' % self.cidr_ip
|
| +
|
| + def startElement(self, name, attrs, connection):
|
| + pass
|
| +
|
| + def endElement(self, name, value, connection):
|
| + if name == 'CIDRIP':
|
| + self.cidr_ip = value
|
| + elif name == 'Status':
|
| + self.status = value
|
| + else:
|
| + setattr(self, name, value)
|
| +
|
| +class EC2SecurityGroup(object):
|
| + """
|
| + Describes an EC2 security group for use in a DBSecurityGroup
|
| + """
|
| +
|
| + def __init__(self, parent=None):
|
| + self.parent = parent
|
| + self.name = None
|
| + self.owner_id = None
|
| +
|
| + def __repr__(self):
|
| + return 'EC2SecurityGroup:%s' % self.name
|
| +
|
| + def startElement(self, name, attrs, connection):
|
| + pass
|
| +
|
| + def endElement(self, name, value, connection):
|
| + if name == 'EC2SecurityGroupName':
|
| + self.name = value
|
| + elif name == 'EC2SecurityGroupOwnerId':
|
| + self.owner_id = value
|
| + else:
|
| + setattr(self, name, value)
|
|
|