fix(iam): pass all document metadata fields to rego (#1525)

* fix(iam): pass all document metadata fields to rego * chore: update schema
aquasecurity · Jan 19, 2024 · c2d65f4 · c2d65f4
1 parent 87a2031
commit c2d65f4
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 8 deletions.
diff --git a/pkg/providers/aws/iam/iam.go b/pkg/providers/aws/iam/iam.go
@@ -36,15 +36,23 @@ type Document struct {
 func (d Document) ToRego() interface{} {
 	m := d.Metadata
 	doc, _ := d.Parsed.MarshalJSON()
-	return map[string]interface{}{
-		"filepath":  m.Range().GetFilename(),
-		"startline": m.Range().GetStartLine(),
-		"endline":   m.Range().GetEndLine(),
-		"managed":   m.IsManaged(),
-		"explicit":  m.IsExplicit(),
-		"value":     string(doc),
-		"fskey":     defsecTypes.CreateFSKey(m.Range().GetFS()),
+	input := map[string]interface{}{
+		"filepath":     m.Range().GetFilename(),
+		"startline":    m.Range().GetStartLine(),
+		"endline":      m.Range().GetEndLine(),
+		"managed":      m.IsManaged(),
+		"explicit":     m.IsExplicit(),
+		"value":        string(doc),
+		"sourceprefix": m.Range().GetSourcePrefix(),
+		"fskey":        defsecTypes.CreateFSKey(m.Range().GetFS()),
+		"resource":     m.Reference(),
 	}
+
+	if m.Parent() != nil {
+		input["parent"] = m.Parent().ToRego()
+	}
+
+	return input
 }
 
 type Group struct {

diff --git a/pkg/rego/schemas/cloud.json b/pkg/rego/schemas/cloud.json
@@ -2159,6 +2159,12 @@
         "managed": {
           "type": "boolean"
         },
+        "resource": {
+          "type": "string"
+        },
+        "sourceprefix": {
+          "type": "string"
+        },
         "startline": {
           "type": "integer"
         },