feat: Added iamInstanceProfile connection

Author: m-pizarro

src/services/ec2/connections.ts

@@ -19,6 +19,8 @@ import { ssmManagedInstanceArn } from '../../utils/generateArns'
 import { RawAwsElasticBeanstalkEnv } from '../elasticBeanstalkEnvironment/data'
 import { RawAwsEksCluster } from '../eksCluster/data'
 import { getEksClusterName, getElasticBeanstalkEnvId } from './utils'
+import { RawAwsInstanceProfile } from '../iamInstanceProfile/data'
+import { globalRegionName } from '../../enums/regions'
 
 /**
  * EC2
@@ -48,6 +50,7 @@ export default ({
     NetworkInterfaces: instanceNetworkInterfaces = [],
     SubnetId: subnetId,
     Tags: tags,
+    IamInstanceProfile: iamInstanceProfile,
   } = instance
 
   /**
@@ -293,7 +296,7 @@ export default ({
   } = data.find(({ name }) => name === services.elasticBeanstalkEnv)
   if (elasticBeanstalkEnvs?.data?.[region]) {
     const elasticBeanstalkEnvsInRegion: RawAwsElasticBeanstalkEnv[] =
-    elasticBeanstalkEnvs.data[region].filter(
+      elasticBeanstalkEnvs.data[region].filter(
         ({ EnvironmentId }: RawAwsElasticBeanstalkEnv) =>
           elasticBeanstalkEnvId === EnvironmentId
       )
@@ -310,6 +313,32 @@ export default ({
     }
   }
 
+  /**
+   * Find IAM Instance Profiles
+   * related to this EC2 instance
+   */
+  const iamInstanceProfiles: {
+    name: string
+    data: { [property: string]: any[] }
+  } = data.find(({ name }) => name === services.iamInstanceProfile)
+  if (iamInstanceProfiles?.data?.[globalRegionName]) {
+    const dataAtRegion: RawAwsInstanceProfile[] = iamInstanceProfiles.data[
+      globalRegionName
+    ].filter(instanceProfile => instanceProfile.Arn === iamInstanceProfile?.Arn)
+    if (!isEmpty(dataAtRegion)) {
+      for (const iamInstance of dataAtRegion) {
+        const { InstanceProfileId: instanceProfileId }: RawAwsInstanceProfile = iamInstance
+
+        connections.push({
+          id: instanceProfileId,
+          resourceType: services.iamInstanceProfile,
+          relation: 'child',
+          field: 'iamInstanceProfile',
+        })
+      }
+    }
+  }
+
   const ec2Result = {
     [id]: connections,
   }

src/services/ec2/format.ts

@@ -45,7 +45,6 @@ export default ({
       fingerprint,
       tags: keyPairTags = {},
     } = {},
-    IamInstanceProfile: iamInstanceProfile,
     cloudWatchMetricData,
     PlatformDetails: platformDetails,
     InstanceLifecycle: instanceLifecycle,
@@ -114,7 +113,6 @@ export default ({
     sourceDestCheck: sourceDestCheck ? t.yes : t.no,
     availabilityZone: placement?.AvailabilityZone || '',
     cpuThreadsPerCore: cpuOptions?.ThreadsPerCore || 0,
-    iamInstanceProfile: iamInstanceProfile?.Arn || '',
     deletionProtection: deletionProtection ? t.yes : t.no,
     primaryNetworkInterface: networkInterfaceId,
     metadataOptions: {

src/services/ec2/schema.graphql

@@ -96,7 +96,6 @@ type awsEc2 @key(fields: "arn") {
   sourceDestCheck: String @search(by: [hash, regexp])
   availabilityZone: String @search(by: [hash, regexp])
   cpuThreadsPerCore: Int @search
-  iamInstanceProfile: String @search(by: [hash, regexp]) # TODO: use to make a connection to a iamRole
   deletionProtection: String @search(by: [hash, regexp])
   dailyCost: awsTotalBillingInfo
   primaryNetworkInterface: String @search(by: [hash, regexp])
@@ -122,4 +121,5 @@ type awsEc2 @key(fields: "arn") {
   systemsManagerInstance: [awsSystemsManagerInstance] @hasInverse(field: ec2Instance)
   eksCluster: [awsEksCluster] @hasInverse(field: ec2Instances)
   elasticBeanstalkEnv: [awsElasticBeanstalkEnv] @hasInverse(field: ec2Instances)
+  iamInstanceProfile: [awsIamInstanceProfile] @hasInverse(field: ec2Instances)
 }

src/services/iamInstanceProfile/schema.graphql

@@ -7,4 +7,5 @@ type awsIamInstanceProfile @key(fields: "id") {
   createDate: DateTime
   tags: [awsRawTag]
   iamRole: [awsIamRole] @hasInverse(field: iamInstanceProfiles)
+  ec2Instances: [awsEc2] @hasInverse(field: iamInstanceProfile)
 }

src/types/generated.ts

@@ -1518,7 +1518,7 @@ export type AwsEc2 = {
   emrInstance?: Maybe<Array<Maybe<AwsEmrInstance>>>;
   ephemeralBlockDevices?: Maybe<Array<Maybe<AwsEc2Blockdevice>>>;
   hibernation?: Maybe<Scalars['String']>;
-  iamInstanceProfile?: Maybe<Scalars['String']>;
+  iamInstanceProfile?: Maybe<Array<Maybe<AwsIamInstanceProfile>>>;
   id: Scalars['String'];
   instanceLifecycle?: Maybe<Scalars['String']>;
   instanceState?: Maybe<Scalars['String']>;
@@ -3110,6 +3110,7 @@ export type AwsIamInstanceProfile = {
   accountId: Scalars['String'];
   arn: Scalars['String'];
   createDate?: Maybe<Scalars['DateTime']>;
+  ec2Instances?: Maybe<Array<Maybe<AwsEc2>>>;
   iamRole?: Maybe<Array<Maybe<AwsIamRole>>>;
   id: Scalars['String'];
   name?: Maybe<Scalars['String']>;