mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-22 15:11:07 +02:00
6e0c771e57
* aws-secrets/add-cross-acc-mgmt-static-roles * refactor * add function pointer for tests * delete commented out code * update * update comment * update func name * add flag * remove docs
30 lines
751 B
Go
30 lines
751 B
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
//go:build !enterprise
|
|
|
|
package aws
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/hashicorp/vault/sdk/framework"
|
|
)
|
|
|
|
// AddStaticAssumeRoleFieldsEnt is a no-op for community edition
|
|
func AddStaticAssumeRoleFieldsEnt(fields map[string]*framework.FieldSchema) {
|
|
// no-op
|
|
}
|
|
|
|
func validateAssumeRoleFields(data *framework.FieldData, config *staticRoleEntry) error {
|
|
_, hasAssumeRoleARN := data.GetOk(paramAssumeRoleARN)
|
|
_, hasRoleSessionName := data.GetOk(paramRoleSessionName)
|
|
_, hasExternalID := data.GetOk(paramExternalID)
|
|
|
|
if hasAssumeRoleARN || hasRoleSessionName || hasExternalID {
|
|
return fmt.Errorf("cross-account static roles are only supported in Vault Enterprise")
|
|
}
|
|
|
|
return nil
|
|
}
|