feat(preflight): build preflight package for AWS

[PengyuanZhao]

Summary

This PR creates the package which serves functions to do preflight checks for AWS integrations including Agentless, Config and CloudTrail.

The following tasks will be run sequentially:

• Fetch caller info
• Fetch all policies
• Extract permission from policies
• Find out the missing required permissions.
• Fetch other account details including:
  • Enabled regions
  • Existing CloudTrail
  • EKS clusters
  • If the call can access organization
    • Fetch management account ID
    • Fetch all account IDs and org unit IDs

How did you test this change?

Run integration test in preflight_aws_test.go

[github-actions]

Lacework Code Security found potential new issues in this PR.

sca found potential 5 new issues

• aws-string-credentials (integration/preflight_aws_test.go: github.com/lacework/go-sdk/v2)
  More details

  Potential secret found inside code. This could be a security risk.

Potential hardcoded credentials. The code snippet will not be displayed for security reasons.

• generic-password-credentials (vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_CreateDelegateMacVolumeOwnershipTask.go: github.com/lacework/go-sdk/v2)
  More details

  Potential secret found inside code. This could be a security risk.

Potential hardcoded credentials. The code snippet will not be displayed for security reasons.

• generic-password-credentials (vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_CreateDelegateMacVolumeOwnershipTask.go: github.com/lacework/go-sdk/v2)
  More details

  Potential secret found inside code. This could be a security risk.

Potential hardcoded credentials. The code snippet will not be displayed for security reasons.

• generic-password-credentials (vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_CreateMacSystemIntegrityProtectionModificationTask.go: github.com/lacework/go-sdk/v2)
  More details

  Potential secret found inside code. This could be a security risk.

Potential hardcoded credentials. The code snippet will not be displayed for security reasons.

• generic-password-credentials (vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_CreateMacSystemIntegrityProtectionModificationTask.go: github.com/lacework/go-sdk/v2)
  More details

  Potential secret found inside code. This could be a security risk.

Potential hardcoded credentials. The code snippet will not be displayed for security reasons.

[lacework-code-security]

(Audit Mode) sca found potential 5 new issues

• aws-string-credentials (integration/preflight_aws_test.go: github.com/lacework/go-sdk/v2)
  More details

  Potential secret found inside code. This could be a security risk.

Potential hardcoded credentials. The code snippet will not be displayed for security reasons.

• generic-password-credentials (vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_CreateDelegateMacVolumeOwnershipTask.go: github.com/lacework/go-sdk/v2)
  More details

  Potential secret found inside code. This could be a security risk.

Potential hardcoded credentials. The code snippet will not be displayed for security reasons.

• generic-password-credentials (vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_CreateDelegateMacVolumeOwnershipTask.go: github.com/lacework/go-sdk/v2)
  More details

  Potential secret found inside code. This could be a security risk.

Potential hardcoded credentials. The code snippet will not be displayed for security reasons.

• generic-password-credentials (vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_CreateMacSystemIntegrityProtectionModificationTask.go: github.com/lacework/go-sdk/v2)
  More details

  Potential secret found inside code. This could be a security risk.

Potential hardcoded credentials. The code snippet will not be displayed for security reasons.

• generic-password-credentials (vendor/github.com/aws/aws-sdk-go-v2/service/ec2/api_op_CreateMacSystemIntegrityProtectionModificationTask.go: github.com/lacework/go-sdk/v2)
  More details

  Potential secret found inside code. This could be a security risk.

Potential hardcoded credentials. The code snippet will not be displayed for security reasons.