feat: add support for IAM identity center permission set session duration

[gantta]

Related to aquasecurity/trivy#5877

Adds new AWS service for IAM Identity Center Permission Set to address NIST CPRT SP 800-53 Release 5.1.1 AC-12

[simar7]

could you resolve the merge conflict?

[gantta]

merge conflict resolved. The Meta struct is not present in my branch in the /pkg/providers/aws/aws.go file so please confirm it should remain.

[simar7]

merge conflict resolved. The Meta struct is not present in my branch in the /pkg/providers/aws/aws.go file so please confirm it should remain.

You have to rebase on latest master branch.

[gantta]

rebase complete. Should be good for review now.

[simar7]

rebase complete. Should be good for review now.

tests are still red. Could you look into it? Might have to run go mod tidy and commit changes, if any.

[gantta]

go mod tidy is giving the following errors:

github.com/aquasecurity/defsec/internal/adapters/cloudformation/aws/iamidentitycenter imports
        github.com/aquasecurity/defsec/pkg/scanners/cloudformation/parser: no matching versions for query "latest"
github.com/aquasecurity/defsec/internal/adapters/terraform/aws/iamidentitycenter tested by
        github.com/aquasecurity/defsec/internal/adapters/terraform/aws/iamidentitycenter.test imports
        github.com/aquasecurity/defsec/internal/adapters/terraform/tftestutil: no matching versions for query "latest"

Not sure what I can do with this at this point.

[simar7]

go mod tidy is giving the following errors:

github.com/aquasecurity/defsec/internal/adapters/cloudformation/aws/iamidentitycenter imports
        github.com/aquasecurity/defsec/pkg/scanners/cloudformation/parser: no matching versions for query "latest"
github.com/aquasecurity/defsec/internal/adapters/terraform/aws/iamidentitycenter tested by
        github.com/aquasecurity/defsec/internal/adapters/terraform/aws/iamidentitycenter.test imports
        github.com/aquasecurity/defsec/internal/adapters/terraform/tftestutil: no matching versions for query "latest"

Not sure what I can do with this at this point.

Sorry about that. We're in the middle of a project restructure and you caught us. Eventually the policies should live in the new repo https://github.com/aquasecurity/trivy-policies and any adapters in this repo https://github.com/aquasecurity/trivy-iac

I'll get to your PR shortly, I might have to recreate it for you but that's fine as I realize it's probably easier for me to do so and would also help us to document how someone can contribute externally. Appreciate the patience.

[gantta]

@simar7 Curious if there is any ETA that can be provided on when the new PR can go in?

[simar7]

@simar7 Curious if there is any ETA that can be provided on when the new PR can go in?

We need these two changes merged before we can merge this PR.

1. refactor(deps): Merge trivy-iac into Trivy trivy#6005
2. refactor(deps): Merge defsec into Trivy trivy#6006

At the moment, I don't have an ETA for you but we'll get to it when the above are merged.

[github-actions]

This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 10 days.

[gantta]

@simar7 any updates you can provide on ETA for when we can get this PR completed?

[simar7]

@simar7 any updates you can provide on ETA for when we can get this PR completed?

@gantta defsec and other iac ancillary repos have been merged into trivy. If you could open a PR against the trivy repo we can help you merge it. Thanks for the understanding.

[gantta]

moving changes to trivvy repo

[github-actions]

This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 10 days.