security-fairy/aws_api_tools.py at master · 1Strategy/security-fairy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
import string
import logging
from setup_logger import create_logger

logger = create_logger(name="aws_api_tools.py")

def api_response(statusCode=500, headers={'Content-Type':'text/html'}, body='Internal Service Error'):
    if statusCode < 100 or statusCode > 599:
        raise ValueError('Invalid HTTP statusCode')

    return_value =  {
                'statusCode': statusCode,
                'headers'   : headers,
                'body'      : body
            }

    logger.debug(return_value)
    return return_value


def get_domain_from_proxy_api_gateway(event):

    if event['headers'] is None:
        return "https://testinvocation/approve"

    if 'amazonaws.com' in event['headers']['Host']:
        return "https://{domain}/{stage}/".format(  domain=event['headers']['Host'],
                                                    stage=event['requestContext']['stage'])
    else:
        return "https://{domain}/".format(domain=event['headers']['Host'])


def api_website(website_body='', safe_substitute_dict={'domain':'http://example.domain'}):
    logger.debug(website_body)
    logger.debug(safe_substitute_dict)

    body = website_body if website_body else \
            """
            <html>
            <body>
            <title>Webpage serverd from API Gateway and Lambda</title>
            <h1>This is an example of an HTTP Get Responses for a Lambda/API Gateway served website</h1>
            The domain is: $domain
            </body>
            </html>
            """

    logger.debug(body)

    if website_body and safe_substitute_dict:
        for variable in safe_substitute_dict:
            if '${variable}'.format(variable=variable) not in body:
                logger.debug('${variable}'.format(variable=variable))
                raise ValueError('A variable to be replaced in the body must be represented by a $variable')

    compiled_body   = string.Template(body).safe_substitute(safe_substitute_dict)
    logger.debug(compiled_body)
    return api_response(statusCode=200, body=compiled_body)