Merge pull request #7 from carapace-sh/performance

performance: ondemand yaml parsing

Author: rsteube

.gitignore

@@ -1,4 +1,5 @@
 cmd/carapace-aws/carapace-aws
+cmd/carapace-aws/cmd/botocore/botocore_generated.go
 dist
 docs/book
 profile.cov

cmd/carapace-aws/cmd/botocore/aws.accessanalyzer.apply-archive-rule.yaml

@@ -0,0 +1,6 @@
+name: apply-archive-rule
+description: Retroactively applies the archive rule to existing findings that meet the archive rule criteria.
+flags:
+    --analyzer-arn=!: The Amazon resource name (ARN) of the analyzer.
+    --client-token=: A client token.
+    --rule-name=!: The name of the rule to apply.

cmd/carapace-aws/cmd/botocore/aws.accessanalyzer.cancel-policy-generation.yaml

@@ -0,0 +1,4 @@
+name: cancel-policy-generation
+description: Cancels the requested policy generation.
+flags:
+    --job-id=!: The `JobId` that is returned by the `StartPolicyGeneration` operation.

cmd/carapace-aws/cmd/botocore/aws.accessanalyzer.check-access-not-granted.yaml

@@ -0,0 +1,11 @@
+name: check-access-not-granted
+description: Checks whether the specified access isn't allowed by a policy.
+flags:
+    --access=!: An access object containing the permissions that shouldn't be granted by the specified policy.
+    --policy-document=!: The JSON policy document to use as the content for the policy.
+    --policy-type=!: The type of policy.
+completion:
+    flag:
+        policy-type:
+            - IDENTITY_POLICY
+            - RESOURCE_POLICY

cmd/carapace-aws/cmd/botocore/aws.accessanalyzer.check-no-new-access.yaml

@@ -0,0 +1,11 @@
+name: check-no-new-access
+description: Checks whether new access is allowed for an updated policy when compared to the existing policy.
+flags:
+    --existing-policy-document=!: The JSON policy document to use as the content for the existing policy.
+    --new-policy-document=!: The JSON policy document to use as the content for the updated policy.
+    --policy-type=!: The type of policy to compare.
+completion:
+    flag:
+        policy-type:
+            - IDENTITY_POLICY
+            - RESOURCE_POLICY

cmd/carapace-aws/cmd/botocore/aws.accessanalyzer.check-no-public-access.yaml

@@ -0,0 +1,34 @@
+name: check-no-public-access
+description: Checks whether a resource policy can grant public access to the specified resource type.
+flags:
+    --policy-document=!: The JSON policy document to evaluate for public access.
+    --resource-type=!: The type of resource to evaluate for public access.
+completion:
+    flag:
+        resource-type:
+            - AWS::DynamoDB::Table
+            - AWS::DynamoDB::Stream
+            - AWS::EFS::FileSystem
+            - AWS::OpenSearchService::Domain
+            - AWS::Kinesis::Stream
+            - AWS::Kinesis::StreamConsumer
+            - AWS::KMS::Key
+            - AWS::Lambda::Function
+            - AWS::S3::Bucket
+            - AWS::S3::AccessPoint
+            - AWS::S3Express::DirectoryBucket
+            - AWS::S3::Glacier
+            - AWS::S3Outposts::Bucket
+            - AWS::S3Outposts::AccessPoint
+            - AWS::SecretsManager::Secret
+            - AWS::SNS::Topic
+            - AWS::SQS::Queue
+            - AWS::IAM::AssumeRolePolicyDocument
+            - AWS::S3Tables::TableBucket
+            - AWS::ApiGateway::RestApi
+            - AWS::CodeArtifact::Domain
+            - AWS::Backup::BackupVault
+            - AWS::CloudTrail::Dashboard
+            - AWS::CloudTrail::EventDataStore
+            - AWS::S3Tables::Table
+            - AWS::S3Express::AccessPoint

cmd/carapace-aws/cmd/botocore/aws.accessanalyzer.create-access-preview.yaml

@@ -0,0 +1,6 @@
+name: create-access-preview
+description: Creates an access preview that allows you to preview IAM Access Analyzer findings for your resource before deploying resource permissions.
+flags:
+    --analyzer-arn=!: The [ARN of the account analyzer](https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources) used to generate the access preview.
+    --client-token=: A client token.
+    --configurations=!: Access control configuration for your resource that is used to generate the access preview.

cmd/carapace-aws/cmd/botocore/aws.accessanalyzer.create-analyzer.yaml

@@ -0,0 +1,18 @@
+name: create-analyzer
+description: Creates an analyzer for your account.
+flags:
+    --analyzer-name=!: The name of the analyzer to create.
+    --archive-rules=: Specifies the archive rules to add for the analyzer.
+    --client-token=: A client token.
+    --configuration=: Specifies the configuration of the analyzer.
+    --tags=: An array of key-value pairs to apply to the analyzer.
+    --type=!: The type of analyzer to create.
+completion:
+    flag:
+        type:
+            - ACCOUNT
+            - ORGANIZATION
+            - ACCOUNT_UNUSED_ACCESS
+            - ORGANIZATION_UNUSED_ACCESS
+            - ACCOUNT_INTERNAL_ACCESS
+            - ORGANIZATION_INTERNAL_ACCESS

cmd/carapace-aws/cmd/botocore/aws.accessanalyzer.create-archive-rule.yaml

@@ -0,0 +1,7 @@
+name: create-archive-rule
+description: Creates an archive rule for the specified analyzer.
+flags:
+    --analyzer-name=!: The name of the created analyzer.
+    --client-token=: A client token.
+    --filter=!: The criteria for the rule.
+    --rule-name=!: The name of the rule to create.

cmd/carapace-aws/cmd/botocore/aws.accessanalyzer.delete-analyzer.yaml

@@ -0,0 +1,5 @@
+name: delete-analyzer
+description: Deletes the specified analyzer.
+flags:
+    --analyzer-name=!: The name of the analyzer to delete.
+    --client-token=: A client token.