iam_checks.py 文件源码

def key_rotated(self, key_id):
        active_key = 'access_key_{0}_active'.format(key_id)
        if self.user_dict[active_key] != 'true':
            return True #since the key is not active, call it rotated
        last_rotated_key = 'access_key_{0}_last_rotated'.format(key_id)
        last_rotated = self.user_dict[last_rotated_key]
        try:
            last_rotated_date = dateutil.parser.parse(last_rotated)
        except ValueError as e:
            return False #The key has not been rotated so the value is N/A
        delta = datetime.timedelta(days=config.config['ACCESS_KEY_ROTATION_DAYS'])
        now = datetime.datetime.now().replace(tzinfo=last_rotated_date.tzinfo)
        diff = now-last_rotated_date
        if diff > delta:
            return False
        return True