turbot / steampipe-plugin-alicloud Goto Github PK

View Code? Open in Web Editor NEW

10.0 13.0 4.0 927 KB

Use SQL to instantly query Alibaba Cloud resources across regions and accounts. Open source CLI. No DB required.

Home Page: https://hub.steampipe.io/plugins/turbot/alicloud

License: Apache License 2.0

Makefile 0.02% Go 87.50% PLSQL 0.17% JavaScript 3.25% HCL 9.06%

steampipe sql postgresql-fdw steampipe-plugin alicloud postgresql aliyun alibabacloud alibaba-cloud-sdk alibaba-cloud

steampipe-plugin-alicloud's Introduction

Alibaba Cloud Plugin for Steampipe

Use SQL to query infrastructure including servers, networks, identity and more from Alibaba Cloud.

Get started →
Documentation: Table definitions & examples
Community: Join #steampipe on Slack →
Get involved: Issues

Quick start

Install the plugin with Steampipe:

steampipe plugin install alicloud

Run a query:

select display_name, create_date from alicloud_ram_user;

Engines

This plugin is available for the following engines:

Engine	Description
Steampipe	The Steampipe CLI exposes APIs and services as a high-performance relational database, giving you the ability to write SQL-based queries to explore dynamic data. Mods extend Steampipe's capabilities with dashboards, reports, and controls built with simple HCL. The Steampipe CLI is a turnkey solution that includes its own Postgres database, plugin management, and mod support.
Postgres FDW	Steampipe Postgres FDWs are native Postgres Foreign Data Wrappers that translate APIs to foreign tables. Unlike Steampipe CLI, which ships with its own Postgres server instance, the Steampipe Postgres FDWs can be installed in any supported Postgres database version.
SQLite Extension	Steampipe SQLite Extensions provide SQLite virtual tables that translate your queries into API calls, transparently fetching information from your API or service as you request it.
Export	Steampipe Plugin Exporters provide a flexible mechanism for exporting information from cloud services and APIs. Each exporter is a stand-alone binary that allows you to extract data using Steampipe plugins without a database.
Turbot Pipes	Turbot Pipes is the only intelligence, automation & security platform built specifically for DevOps. Pipes provide hosted Steampipe database instances, shared dashboards, snapshots, and more.

Developing

Prerequisites:

Clone:

git clone https://github.com/turbot/steampipe-plugin-alicloud.git
cd steampipe-plugin-alicloud

Build, which automatically installs the new version to your ~/.steampipe/plugins directory:

make

Configure the plugin:

cp config/* ~/.steampipe/config
vi ~/.steampipe/config/alicloud.spc

Try it!

steampipe query
> .inspect alicloud

Open Source & Contributing

This repository is published under the Apache 2.0 (source code) and CC BY-NC-ND (docs) licenses. Please see our code of conduct. We look forward to collaborating with you!

Steampipe is a product produced from this open source software, exclusively by Turbot HQ, Inc. It is distributed under our commercial terms. Others are allowed to make their own distribution of the software, but cannot use any of the Turbot trademarks, cloud services, etc. You can learn more in our Open Source FAQ.

Get Involved

Join #steampipe on Slack →

Want to help but don't know where to start? Pick up one of the help wanted issues:

steampipe-plugin-alicloud's People

Contributors

Stargazers

Watchers

Forkers

rizkidoank jurajsucik vmdude sg4i

steampipe-plugin-alicloud's Issues

Add table for ECS launch template

Add alicloud_vpc docs.

Add table for Credential Report

Add multi-region, connection config and cache support for service connections

Add table for VPC route entry

add table table_vpc_vpn_ssl_server

Update plugin docs for proper indentation in table and fix docs for alicloud_vpc table

Add table vpc_vpn_customer_gateway.

add alicloud_ecs_disk table

Update tables for 0.0.1 release

Add table to list all active resources

Add alicloud_kms_secret table.

Add table for RDS instance

Add table VPC endpoint service

Add CHANGELOG for v0.0.2

v0.0.3

v0.0.3 [2021-03-11]

What's new?

New tables added

Add table for ECS Dedicated Host cluster

add alicloud_ecs_snapshot table

add table table_vpc_vpn_connection

https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/vpn_connection

Add alicloud_cas_user_certificate table.

Add alicloud_vpc_route_table table.

New tables for compute region and zone

Would love to have the region and zone tables for alicloud compute:

alicloud_compute_region
alicloud_compute_zone

https://partners-intl.aliyun.com/help/doc-detail/86912.htm

Add alicloud_vpc_vswitch docs.

add `policy_std` column for resources that support resource policies to standardize policy structure for searching

add policy_std column for resources that support resource policies to standardize policy structure for searching (as we do for AWS.

For example, this

 {                                                               
     "Version": "1",                                             
     "Statement": [                                              
         {                                                       
             "Action": "oss:Get*",
             "Effect": "Allow",
             "Resource":  "acs:oss:*:1234567890123456:my-public-bucket/*",
             "Principal": "*"
         }                                                       
     ]                                                           
 }

to something like this:

 {                                                               
     "Version": "1",                                             
     "Statement": [                                              
         {                                                       
             "Action": [
                 "oss:Get*"
             ],                               
             "Effect": "Allow",                                  
             "Resource": [                                       
                 "acs:oss:*:1234567890123456:my-public-bucket/*" 
             ],                                                  
             "Principal": [
                 "*"
             ]                                 
         }                                                       
     ]                                                           
 }

  name as group_name,
  policies ->> 'PolicyName' as policy_name,
  policies ->> 'PolicyType' as policy_type,
  policies ->> 'DefaultVersion' as policy_default_version,
  policies ->> 'AttachDate' as policy_attachment_date
from
  alicloud_ram_group,
  jsonb_array_elements(attached_policy) as policies;```

However when we try to query list me all IAM groups not associated with any policies with a below query returns me nothing, where I was expecting the list of IAM group without policies.

select name, attached_policy from alicloud_ram_group where attached_policy is null;

This interesting as Alicloud  by default returns **empty array  [ ]**

This can be validated as below

select name, attached_policy from alicloud_ram_group

Output 

![image](https://user-images.githubusercontent.com/26873346/110791744-961c2980-8298-11eb-9267-
05ecf4b56eb2.png)