feat(volcengine): add RDS support

Author: 404tk

README.md

@@ -58,7 +58,7 @@ CloudToolKit is intended to help defenders verify:
 | AWS | EC2, S3, IAM | iam-user-check, bucket-check |
 | Azure | Virtual Machines, Blob Storage | - |
 | GCP | Compute Engine, Cloud DNS, IAM | - |
-| Volcengine | ECS, IAM, TOS | iam-user-check, bucket-check, instance-cmd-check |
+| Volcengine | ECS, IAM, TOS, RDS | iam-user-check, bucket-check, instance-cmd-check |
 | JDCloud | VM, IAM, OSS | - |
 
 ## Quick Start

pkg/providers/volcengine/api/endpoint.go

@@ -12,6 +12,12 @@ var globalServices = map[string]struct{}{
 	"iam":     {},
 }
 
+var regionalServiceHostAliases = map[string]string{
+	"rds_mysql":      "rds-mysql",
+	"rds_postgresql": "rds-postgresql",
+	"rds_mssql":      "rds-mssql",
+}
+
 // ResolveEndpoint returns the HTTPS base URL for a Volcengine OpenAPI service.
 func ResolveEndpoint(service, region, siteStack string) string {
 	service = strings.ToLower(strings.TrimSpace(service))
@@ -30,11 +36,18 @@ func ResolveEndpoint(service, region, siteStack string) string {
 	case isGlobalService(service):
 		host = service + "." + stack + ".com"
 	case region != "":
-		host = service + "." + region + "." + stack + ".com"
+		host = endpointHostPrefix(service) + "." + region + "." + stack + ".com"
 	}
 	return "https://" + host
 }
 
+func endpointHostPrefix(service string) string {
+	if alias, ok := regionalServiceHostAliases[service]; ok {
+		return alias
+	}
+	return service
+}
+
 func isGlobalService(service string) bool {
 	_, ok := globalServices[strings.ToLower(strings.TrimSpace(service))]
 	return ok

pkg/providers/volcengine/api/endpoint_test.go

@@ -13,6 +13,9 @@ func TestResolveEndpoint(t *testing.T) {
 		{name: "global iam", service: "iam", region: "cn-beijing", want: "https://iam.volcengineapi.com"},
 		{name: "global billing", service: "billing", region: "", want: "https://billing.volcengineapi.com"},
 		{name: "regional ecs", service: "ecs", region: "cn-shanghai", want: "https://ecs.cn-shanghai.volcengineapi.com"},
+		{name: "regional rds mysql alias", service: "rds_mysql", region: "cn-beijing", want: "https://rds-mysql.cn-beijing.volcengineapi.com"},
+		{name: "regional rds postgresql alias", service: "rds_postgresql", region: "cn-guangzhou", want: "https://rds-postgresql.cn-guangzhou.volcengineapi.com"},
+		{name: "regional rds mssql alias", service: "rds_mssql", region: "cn-shanghai", want: "https://rds-mssql.cn-shanghai.volcengineapi.com"},
 		{name: "fallback open", service: "ecs", region: "", want: "https://open.volcengineapi.com"},
 		{name: "custom stack", service: "ecs", region: "cn-beijing", siteStack: "volcengine-api", want: "https://ecs.cn-beijing.volcengine-api.com"},
 	}

pkg/providers/volcengine/api/types_rds.go

@@ -0,0 +1,145 @@
+package api
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+)
+
+const (
+	rdsAPIVersion        = "2022-01-01"
+	ServiceRDSMySQL      = "rds_mysql"
+	ServiceRDSPostgreSQL = "rds_postgresql"
+	ServiceRDSMSSQL      = "rds_mssql"
+)
+
+type DescribeRDSRegionsResponse struct {
+	ResponseMetadata ResponseMetadata `json:"ResponseMetadata"`
+	Result           struct {
+		Regions []RDSRegion `json:"Regions"`
+	} `json:"Result"`
+}
+
+type RDSRegion struct {
+	RegionID   string `json:"RegionId"`
+	RegionName string `json:"RegionName"`
+}
+
+type DescribeRDSMySQLInstancesResponse struct {
+	ResponseMetadata ResponseMetadata `json:"ResponseMetadata"`
+	Result           struct {
+		Instances []RDSMySQLInstance `json:"Instances"`
+		Total     int32              `json:"Total"`
+	} `json:"Result"`
+}
+
+type RDSMySQLInstance struct {
+	AddressObject   []RDSAddressObject `json:"AddressObject"`
+	DBEngineVersion string             `json:"DBEngineVersion"`
+	InstanceID      string             `json:"InstanceId"`
+	InstanceName    string             `json:"InstanceName"`
+	InstanceStatus  string             `json:"InstanceStatus"`
+	RegionID        string             `json:"RegionId"`
+}
+
+type DescribeRDSPostgreSQLInstancesResponse struct {
+	ResponseMetadata ResponseMetadata `json:"ResponseMetadata"`
+	Result           struct {
+		Instances []RDSPostgreSQLInstance `json:"Instances"`
+		Total     int32                   `json:"Total"`
+	} `json:"Result"`
+}
+
+type RDSPostgreSQLInstance struct {
+	AddressObject   []RDSAddressObject `json:"AddressObject"`
+	DBEngineVersion string             `json:"DBEngineVersion"`
+	InstanceID      string             `json:"InstanceId"`
+	InstanceName    string             `json:"InstanceName"`
+	InstanceStatus  string             `json:"InstanceStatus"`
+	RegionID        string             `json:"RegionId"`
+}
+
+type RDSAddressObject struct {
+	Domain      string `json:"Domain"`
+	IPAddress   string `json:"IPAddress"`
+	NetworkType string `json:"NetworkType"`
+	Port        string `json:"Port"`
+}
+
+type DescribeRDSSQLServerInstancesResponse struct {
+	ResponseMetadata ResponseMetadata `json:"ResponseMetadata"`
+	Result           struct {
+		InstancesInfo []RDSSQLServerInstance `json:"InstancesInfo"`
+		Total         int32                  `json:"Total"`
+	} `json:"Result"`
+}
+
+type RDSSQLServerInstance struct {
+	DBEngineVersion string             `json:"DBEngineVersion"`
+	InstanceID      string             `json:"InstanceId"`
+	InstanceName    string             `json:"InstanceName"`
+	InstanceStatus  string             `json:"InstanceStatus"`
+	NodeDetailInfo  []RDSSQLServerNode `json:"NodeDetailInfo"`
+	Port            string             `json:"Port"`
+	RegionID        string             `json:"RegionId"`
+}
+
+type RDSSQLServerNode struct {
+	NodeIP   string `json:"NodeIP"`
+	NodeType string `json:"NodeType"`
+}
+
+type describeRDSInstancesInput struct {
+	PageNumber int32 `json:"PageNumber"`
+	PageSize   int32 `json:"PageSize"`
+}
+
+func (c *Client) DescribeRDSRegions(ctx context.Context, service, region string) (DescribeRDSRegionsResponse, error) {
+	var out DescribeRDSRegionsResponse
+	err := c.doRDSAction(ctx, service, "DescribeRegions", region, struct{}{}, &out)
+	return out, err
+}
+
+func (c *Client) DescribeRDSMySQLInstances(ctx context.Context, region string, pageNumber, pageSize int32) (DescribeRDSMySQLInstancesResponse, error) {
+	var out DescribeRDSMySQLInstancesResponse
+	err := c.doRDSAction(ctx, ServiceRDSMySQL, "DescribeDBInstances", region, describeRDSInstancesInput{
+		PageNumber: pageNumber,
+		PageSize:   pageSize,
+	}, &out)
+	return out, err
+}
+
+func (c *Client) DescribeRDSPostgreSQLInstances(ctx context.Context, region string, pageNumber, pageSize int32) (DescribeRDSPostgreSQLInstancesResponse, error) {
+	var out DescribeRDSPostgreSQLInstancesResponse
+	err := c.doRDSAction(ctx, ServiceRDSPostgreSQL, "DescribeDBInstances", region, describeRDSInstancesInput{
+		PageNumber: pageNumber,
+		PageSize:   pageSize,
+	}, &out)
+	return out, err
+}
+
+func (c *Client) DescribeRDSSQLServerInstances(ctx context.Context, region string, pageNumber, pageSize int32) (DescribeRDSSQLServerInstancesResponse, error) {
+	var out DescribeRDSSQLServerInstancesResponse
+	err := c.doRDSAction(ctx, ServiceRDSMSSQL, "DescribeDBInstances", region, describeRDSInstancesInput{
+		PageNumber: pageNumber,
+		PageSize:   pageSize,
+	}, &out)
+	return out, err
+}
+
+func (c *Client) doRDSAction(ctx context.Context, service, action, region string, payload any, out any) error {
+	body, err := json.Marshal(payload)
+	if err != nil {
+		return err
+	}
+	return c.DoOpenAPI(ctx, Request{
+		Service:    service,
+		Version:    rdsAPIVersion,
+		Action:     action,
+		Method:     http.MethodPost,
+		Region:     region,
+		Path:       "/",
+		Body:       body,
+		Idempotent: true,
+	}, out)
+}