feat(cg-1342): support opsworks services

src/enums/resources.ts

@@ -49,6 +49,9 @@ export default {
   securityGroup: 'aws_security_group',
   securityHub: 'aws_security_hub',
   iamRolePolicy: 'aws_iam_role_policy',
+  opsWorksApp: 'aws_opsworks_application',
+  opsWorksStack: 'aws_opsworks_stack',
+  opsWorksInstance: 'aws_opsworks_instance',
   efsMountTarget: 'aws_efs_mount_target',
   route53ZRecord: 'aws_route53_record',
   lambdaFunction: 'aws_lambda_function',

src/enums/schemasMap.ts

@@ -80,6 +80,9 @@ export default {
   [services.nacl]: 'awsNetworkAcl',
   [services.nat]: 'awsNatGateway',
   [services.networkInterface]: 'awsNetworkInterface',
+  [services.opsWorksApp]: 'awsOpsWorksApp',
+  [services.opsWorksStack]: 'awsOpsWorksStack',
+  [services.opsWorksInstance]: 'awsOpsWorksInstance',
   [services.sg]: 'awsSecurityGroup',
   [services.securityHub]: 'awsSecurityHub',
   [services.subnet]: 'awsSubnet',

src/enums/serviceAliases.ts

@@ -57,6 +57,9 @@ export default {
   [services.mskCluster]: 'mskCluster',
   [services.nat]: 'natGateway',
   [services.networkInterface]: 'networkInterfaces',
+  [services.opsWorksApp]: 'opsWorksApps',
+  [services.opsWorksStack]: 'opsWorksStacks',
+  [services.opsWorksInstance]: 'opsWorksInstances',
   [services.organization]: 'organizations',
   [services.rdsCluster]: 'rdsClusters',
   [services.rdsClusterSnapshot]: 'rdsClusterSnapshots',

src/enums/serviceMap.ts

@@ -48,6 +48,9 @@ import Lambda from '../services/lambda'
 import NATGateway from '../services/natGateway'
 import NetworkAcl from '../services/nacl'
 import NetworkInterface from '../services/networkInterface'
+import OpsWorksApp from '../services/opsworksApp'
+import OpsWorksStack from '../services/opsworksStack'
+import OpsWorksInstance from '../services/opsworksInstance'
 import RDSCluster from '../services/rdsCluster'
 import RDSDbInstance from '../services/rdsDbInstance'
 import RedshiftCluster from '../services/redshift'
@@ -171,6 +174,9 @@ export default {
   [services.nacl]: NetworkAcl,
   [services.nat]: NATGateway,
   [services.networkInterface]: NetworkInterface,
+  [services.opsWorksApp]: OpsWorksApp,
+  [services.opsWorksStack]: OpsWorksStack,
+  [services.opsWorksInstance]: OpsWorksInstance,
   [services.sg]: AwsSecurityGroup,
   [services.subnet]: AwsSubnet,
   [services.vpc]: VPC,

src/enums/services.ts

@@ -74,6 +74,9 @@ export default {
   nacl: 'nacl',
   nat: 'nat',
   networkInterface: 'networkInterface',
+  opsWorksApp: 'opsWorksApp',
+  opsWorksStack: 'opsWorksStack',
+  opsWorksInstance: 'opsWorksInstance',
   organization: 'organization',
   rdsCluster: 'rdsCluster',
   rdsClusterSnapshot: 'rdsClusterSnapshot',

src/properties/logger.ts

@@ -707,6 +707,15 @@ export default {
   securityHubNotFound: (region: string): string => `Security Hub not found/disabled for region: ${region}`,
   fetchedSecurityHub: (region: string): string => `Security Hub found/enabled for region: ${region}`,
   fetchingSecurityHub: 'Fetching Security Hub data for this AWS account via the AWS SDK...',
+  /**
+   * OpsWorks
+   */
+  fetchedOpsWorksStacks: (num: number): string =>
+    `Fetched ${num} OpsWorks Stacks`,
+  fetchedOpsWorksInstances: (num: number): string =>
+    `Fetched ${num} OpsWorks Instances`,
+  fetchedOpsWorksApps: (num: number): string =>
+    `Fetched ${num} OpsWorks Apps`,
   /**
    * Msk
    */

src/services/ec2/schema.graphql

@@ -116,6 +116,7 @@ type awsEc2 implements awsBaseService @key(fields: "arn") {
   iamInstanceProfile: [awsIamInstanceProfile] @hasInverse(field: ec2Instances)
   iamRole: [awsIamRole] @hasInverse(field: ec2Instances)
   networkInterfaces: [awsNetworkInterface] @hasInverse(field: ec2Instance)
+  opsWorksInstances: [awsOpsWorksInstance] @hasInverse(field: ec2Instance)
   securityGroups: [awsSecurityGroup] @hasInverse(field: ec2Instance)
   subnets: [awsSubnet] @hasInverse(field: ec2Instances)
   systemsManagerInstance: [awsSystemsManagerInstance] @hasInverse(field: ec2Instance)

src/services/opsworksApp/data.ts

@@ -0,0 +1,117 @@
+import CloudGraph from '@cloudgraph/sdk'
+import { AWSError } from 'aws-sdk/lib/error'
+import { Config } from 'aws-sdk/lib/config'
+import isEmpty from 'lodash/isEmpty'
+import flatMap from 'lodash/flatMap'
+import groupBy from 'lodash/groupBy'
+import awsLoggerText from '../../properties/logger'
+import { initTestEndpoint, setAwsRetryOptions } from '../../utils'
+import AwsErrorLog from '../../utils/errorLog'
+import { API_GATEWAY_CUSTOM_DELAY } from '../../config/constants'
+import OpsWorks, { App, DescribeAppsResult } from 'aws-sdk/clients/opsworks'
+import OpsWorksStack from '../opsworksStack'
+import { RawAwsOpsWorksStack } from '../opsworksStack/data'
+
+const lt = { ...awsLoggerText }
+const { logger } = CloudGraph
+const serviceName = 'OpsWorks Stack'
+const errorLog = new AwsErrorLog(serviceName)
+const endpoint = initTestEndpoint(serviceName)
+const customRetrySettings = setAwsRetryOptions({
+  baseDelay: API_GATEWAY_CUSTOM_DELAY,
+})
+
+export const getOpsWorksAppsForRegion = async (
+  opsWorks: OpsWorks,
+  StackId: string,
+): Promise<App[]> =>
+  new Promise(async resolve => {
+    const listAllApps = (): void => {
+      try {
+        opsWorks.describeApps(
+          {StackId},
+          (err: AWSError, data: DescribeAppsResult) => {
+            if (err) {
+              errorLog.generateAwsErrorLog({
+                functionName: 'opsWorks:describeApps',
+                err,
+              })
+            }
+
+            if (isEmpty(data)) {
+              return resolve([])
+            }
+
+            const { Apps: apps = [] } = data || {}
+
+            logger.debug(lt.fetchedOpsWorksApps(apps.length))
+
+            resolve(apps)
+          }
+        );
+      } catch (error) {
+        resolve([])
+      }
+    }
+    listAllApps()
+  })
+
+export interface RawAwsOpsWorksApp extends Omit<App, 'tags'> {
+  region: string
+  account
+}
+
+export default async ({
+  regions,
+  config,
+  account,
+}: {
+  account: string
+  regions: string
+  config: Config
+}): Promise<{
+  [region: string]: RawAwsOpsWorksApp[]
+}> =>
+  new Promise(async resolve => {
+    const opsWorksResult: RawAwsOpsWorksApp[] = []
+    const opsWorksStackClass = new OpsWorksStack({ logger: CloudGraph.logger })
+    const stacksResult = await opsWorksStackClass.getData({
+      ...config,
+      regions,
+    })
+    const opsWorksStacks: RawAwsOpsWorksStack[] = flatMap(stacksResult)
+
+
+    const regionPromises = regions.split(',').map(region => {
+      const opsWorks = new OpsWorks({
+        ...config,
+        region,
+        endpoint,
+        ...customRetrySettings,
+      })
+
+      return new Promise<void>(async resolveOpsWorksData => {
+        // Get OpsWorks Apps Data
+        opsWorksStacks.map(async ({StackId}: RawAwsOpsWorksStack) => {
+          const opsWorksApps = await getOpsWorksAppsForRegion(opsWorks, StackId)
+
+          if (!isEmpty(opsWorksApps)) {
+            for (const app of opsWorksApps) {
+              opsWorksResult.push({
+                ...app,
+                region,
+                account,
+              })
+            }
+          }
+        })
+
+        resolveOpsWorksData()
+      })
+    })
+
+    await Promise.all(regionPromises)
+    errorLog.reset()
+
+    resolve(groupBy(opsWorksResult, 'region'))
+  })

src/services/opsworksApp/format.ts

@@ -0,0 +1,89 @@
+import { generateUniqueId } from '@cloudgraph/sdk'
+
+import { RawAwsOpsWorksApp } from './data'
+import { AwsOpsWorksApp } from '../../types/generated'
+import { opsworksAppArn } from '../../utils/generateArns'
+
+export default ({
+  service,
+  account: accountId,
+  region,
+}: {
+  service: RawAwsOpsWorksApp
+  account: string
+  region: string
+}): AwsOpsWorksApp => {
+  const {
+    AppId: appId,
+    StackId: stackId,
+    Shortname: shortname,
+    Name: name,
+    Description: description,
+    DataSources: dataSources,
+    Type: type,
+    AppSource: appSource,
+    Domains: domains,
+    EnableSsl: enableSsl,
+    SslConfiguration: sslConfiguration,
+    Attributes: attributes,
+    CreatedAt: createdAt,
+    Environment: environment,
+  } = service
+
+  const arn = opsworksAppArn({ region, account: accountId, name: name })
+
+  return {
+    id: appId,
+    accountId,
+    arn,
+    region,
+    stackId,
+    shortname,
+    name,
+    description,
+    dataSources: dataSources.map(ds => ({
+      id: generateUniqueId({
+        arn,
+        ...ds,
+      }),
+      type: ds.Type,
+      arn: ds.Arn,
+      databaseName: ds.DatabaseName,
+    })),
+    type,
+    appSource: {
+      type: appSource?.Type,
+      url: appSource?.Url,
+      username: appSource?.Username,
+      password: appSource?.Password,
+      sshKey: appSource?.SshKey,
+      revision: appSource?.Revision,
+    },
+    domains,
+    enableSsl,
+    sslConfiguration: {
+      certificate: sslConfiguration?.Certificate,
+      privateKey: sslConfiguration?.PrivateKey,
+      chain: sslConfiguration?.Chain,
+    },
+    attributes: Object.keys(attributes).map(key => ({
+      id: generateUniqueId({
+        arn,
+        key,
+        value: attributes[key],
+      }),
+      key,
+      value: attributes[key],
+    })),
+    createdAt,
+    environment: environment.map(e => ({
+      id: generateUniqueId({
+        arn,
+        ...e,
+      }),
+      key: e.Key,
+      value: e.Value,
+      secure: e.Secure,
+    }))
+  }
+}

src/services/opsworksApp/index.ts

@@ -0,0 +1,13 @@
+import { Service } from '@cloudgraph/sdk'
+import BaseService from '../base'
+import format from './format'
+import getData from './data'
+import mutation from './mutation'
+
+export default class OpsWorksApp extends BaseService implements Service {
+  format = format.bind(this)
+
+  getData = getData.bind(this)
+
+  mutation = mutation
+}

src/services/opsworksApp/mutation.ts

@@ -0,0 +1,5 @@
+export default `mutation($input: [AddawsOpsWorksAppInput!]!) {
+  addawsOpsWorksApp(input: $input, upsert: true) {
+    numUids
+  }
+}`

src/services/opsworksApp/schema.graphql

@@ -0,0 +1,76 @@
+type awsOpsWorksAppDataSource
+  @generate(
+    query: { get: false, query: false, aggregate: false }
+    mutation: { add: false, delete: false }
+    subscription: false
+  ) {
+  id: String! @id @search(by: [hash])
+  type: String @search(by: [hash, regexp])
+  arn: String @search(by: [hash, regexp])
+  databaseName: String @search(by: [hash, regexp])
+}
+
+type awsOpsWorksAppSource
+  @generate(
+    query: { get: false, query: false, aggregate: false }
+    mutation: { add: false, delete: false }
+    subscription: false
+  ) {
+  type: String @search(by: [hash, regexp])
+  url: String @search(by: [hash, regexp])
+  username: String @search(by: [hash, regexp])
+  password: String @search(by: [hash, regexp])
+  sshKey: String @search(by: [hash, regexp])
+  revision: String @search(by: [hash, regexp])
+}
+
+type awsOpsWorksAppSslConfiguration
+  @generate(
+    query: { get: false, query: false, aggregate: false }
+    mutation: { add: false, delete: false }
+    subscription: false
+  ) {
+  certificate: String @search(by: [hash, regexp])
+  privateKey: String @search(by: [hash, regexp])
+  chain: String @search(by: [hash, regexp])
+}
+
+type awsOpsWorksAppAttribute
+  @generate(
+    query: { get: false, query: false, aggregate: false }
+    mutation: { add: false, delete: false }
+    subscription: false
+  ) {
+  id: String! @id @search(by: [hash])
+  key: String @search(by: [hash, regexp])
+  value: String @search(by: [hash, regexp])
+}
+
+type awsOpsWorksAppEnvironment
+  @generate(
+    query: { get: false, query: false, aggregate: false }
+    mutation: { add: false, delete: false }
+    subscription: false
+  ) {
+  id: String! @id @search(by: [hash])
+  key: String @search(by: [hash, regexp])
+  value: String @search(by: [hash, regexp])
+  secure: Boolean @search
+}
+
+type awsOpsWorksApp implements awsBaseService @key(fields: "arn") {
+  stackId: String @search(by: [hash, regexp])
+  shortname: String @search(by: [hash, regexp])
+  name: String @search(by: [hash, regexp])
+  description: String @search(by: [hash, regexp])
+  dataSources: [awsOpsWorksAppDataSource]
+  type: String @search(by: [hash, regexp])
+  appSource: awsOpsWorksAppSource
+  domains: [String] @search(by: [hash, regexp])
+  enableSsl: Boolean @search
+  sslConfiguration: awsOpsWorksAppSslConfiguration
+  attributes: [awsOpsWorksAppAttribute]
+  createdAt: String @search(by: [hash, regexp])
+  environment: [awsOpsWorksAppEnvironment]
+  opsWorksStacks: [awsOpsWorksStack] @hasInverse(field: opsWorksApps)
+}