Set up HasPolicyAccess (#27)

* prelim commit

* tweak

* updates

* update

* update

* s3 account access block and linter

---------

Co-authored-by: Varun Jain <varunjain@Varuns-MacBook-Pro-2.local>

Author: varunjain99

Dockerfile

@@ -4,18 +4,22 @@ WORKDIR /srv/cartography
 
 ENV PATH=/venv/bin:$PATH
 RUN apt-get update && \
-    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends python3.8-dev python3-pip python3-setuptools openssl libssl-dev gcc pkg-config libffi-dev libxml2-dev libxmlsec1-dev curl && \
+    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends build-essential python3.8-dev python3-pip python3-setuptools openssl libssl-dev gcc pkg-config libffi-dev libxml2-dev libxmlsec1-dev curl && \
     apt-get clean && \
     rm -rf /var/lib/apt/lists/*
-COPY . /srv/cartography
+COPY ./test-requirements.txt /srv/cartography/test-requirements.txt
+COPY ./requirements.txt /srv/cartography/requirements.txt
 
 # Installs pip supported by python3.8
 RUN curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py && python3.8 get-pip.py
 
-RUN pip install -e . && \
+RUN pip install -r requirements.txt && \
     pip install -r test-requirements.txt
 
+COPY . /srv/cartography
 RUN groupadd cartography && \
     useradd -s /bin/bash -d /home/cartography -m -g cartography cartography
 
 USER cartography
+
+RUN umask 0002

Dockerfile.dev

@@ -0,0 +1,26 @@
+FROM ubuntu:bionic
+
+WORKDIR /srv/cartography
+
+ENV PATH=/venv/bin:$PATH
+RUN apt-get update && \
+    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends build-essential python3.8-dev python3-pip python3-setuptools openssl libssl-dev gcc pkg-config libffi-dev libxml2-dev libxmlsec1-dev curl && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/*
+COPY ./test-requirements.txt /srv/cartography/test-requirements.txt
+COPY ./requirements.txt /srv/cartography/requirements.txt
+
+# Installs pip supported by python3.8
+RUN curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py && python3.8 get-pip.py
+
+RUN --mount=type=cache,target=/root/.cache \
+    pip install -r requirements.txt && \
+    pip install -r test-requirements.txt
+
+COPY . /srv/cartography
+RUN groupadd cartography && \
+    useradd -s /bin/bash -d /home/cartography -m -g cartography cartography
+
+USER cartography
+
+RUN umask 0002

cartography/data/jobs/cleanup/aws_import_s3_account_public_access_block.json

@@ -0,0 +1,10 @@
+{
+    "statements": [
+      {
+        "query": "MATCH (:AWSAccount{id: $AWS_ID})-[:RESOURCE]->(n:S3AccountAccessBlock) WHERE n.lastupdated <> $UPDATE_TAG WITH n LIMIT $LIMIT_SIZE DETACH DELETE (n)",
+        "iterative": true,
+        "iterationsize": 100
+      }
+    ],
+    "name": "cleanup S3AccountAccessBlock"
+  }