aws.go

package ipcat

import (
	"encoding/json"
	"fmt"
	"io/ioutil"
	"net/http"
)

var (
	awsDownload = "https://ip-ranges.amazonaws.com/ip-ranges.json"
)

// AWSPrefix is AWS prefix in their IP ranges file
type AWSPrefix struct {
	IPPrefix   string `json:"ip_prefix"`
	IPv6Prefix string `json:"ipv6_prefix"`
	Region     string `json:"region"`
	Service    string `json:"service"`
}

// AWS is main record for AWS IP info
type AWS struct {
	SyncToken    string      `json:"syncToken"`
	CreateDate   string      `json:"createDate"`
	Prefixes     []AWSPrefix `json:"prefixes"`
	IPv6Prefixes []AWSPrefix `json:"ipv6_prefixes"`
}

// DownloadAWS downloads the latest AWS IP ranges list
func DownloadAWS() ([]byte, error) {
	resp, err := http.Get(awsDownload)
	if err != nil {
		return nil, err
	}
	if resp.StatusCode != 200 {
		return nil, fmt.Errorf("Failed to download AWS ranges: status code %s", resp.Status)
	}
	body, err := ioutil.ReadAll(resp.Body)
	if err != nil {
		return nil, err
	}
	resp.Body.Close()
	return body, nil

}

// UpdateAWS parses the AWS IP json file and updates the interval set
func UpdateAWS(ipmap *IntervalSet, body []byte) error {
	const (
		awsName = "Amazon AWS"
		awsURL  = "http://www.amazon.com/aws/"
	)

	aws := AWS{}
	err := json.Unmarshal(body, &aws)
	if err != nil {
		return err
	}

	// delete all existing records
	ipmap.DeleteByName(awsName)

	// and add back
	for _, prefixList := range []*[]AWSPrefix{&aws.Prefixes, &aws.IPv6Prefixes} {
		for _, rec := range *prefixList {
			if rec.Service != "AMAZON" {
				// Service is the subset of IP address ranges. Specify AMAZON to get
				// all IP address ranges (for example, the ranges in the EC2 subset
				// are also in the AMAZON subset). Note that some IP address ranges
				// are only in the AMAZON subset.
				// <https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html>
				continue
			}

			prefix := rec.IPPrefix
			if prefix == "" {
				prefix = rec.IPv6Prefix
			}

			err := ipmap.AddCIDR(prefix, awsName, awsURL)
			if err != nil {
				return err
			}
		}
	}

	return nil
}