awspec 0.22.1 → 0.23.0

data/doc/_resource_types/lambda.md

@@ -1,3 +1,11 @@
+### exist
+
+```ruby
+describe lambda('my-lambda-function-name') do
+  it { should exist }
+end
+```
+
 ### have_event_source
 
 This matcher does not support Amazon S3 event sources. ( [See SDK doc](http://docs.aws.amazon.com/sdkforruby/api/Aws/Lambda/Client.html#list_event_source_mappings-instance_method) )

data/doc/_resource_types/network_acl.md

@@ -1,10 +1,31 @@
-### its(:inbound), its(:outbound)
+### exist
 
 ```ruby
 describe network_acl('my-network-acl') do
   it { should exist }
-  it { should belong_to_vpc('my-vpc') }
+end
+```
+
+### have_subnet
+
+```ruby
+describe network_acl('my-network-acl') do
   it { should have_subnet('my-subnet') }
+end
+```
+
+### belong_to_vpc
+
+```ruby
+describe network_acl('my-network-acl') do
+  it { should belong_to_vpc('my-vpc') }
+end
+```
+
+### its(:inbound), its(:outbound), its(:inbound_entries_count), its(:outbound_entries_count)
+
+```ruby
+describe network_acl('my-network-acl') do
   its(:inbound) { should be_allowed(80).protocol('tcp').source('123.0.456.789/32') }
   its(:inbound) { should be_denied.rule_number('*').source('0.0.0.0/0') }
   its(:outbound) { should be_allowed.protocol('ALL').source('0.0.0.0/0') }

data/doc/_resource_types/rds.md

@@ -0,0 +1,66 @@
+### exist
+
+```ruby
+describe rds('my-rds') do
+  it { should exist }
+end
+```
+
+### be_available, be_backing_up, be_creating, be_deleting, be_failed, be_inaccessible_encryption_credentials, be_incompatible_credentials, be_incompatible_network, be_incompatible_option_group, be_incompatible_parameters, be_incompatible_restore, be_maintenance, be_modifying, be_rebooting, be_renaming, be_resetting_master_credentials, be_restore_error, be_storage_full, be_upgrading
+
+```ruby
+describe rds('my-rds') do
+  it { should be_available }
+end
+```
+
+### have_db_parameter_group
+
+```ruby
+describe rds('my-rds') do
+  it { should belong_to_db_subnet_group('my-db-subnet-group') }
+end
+```
+
+### have_option_group
+
+```ruby
+describe rds('my-rds') do
+  it { should have_option_group('default:mysql-5-6') }
+end
+```
+
+### have_security_group
+
+```ruby
+describe rds('my-rds') do
+  it { should have_security_group('sg-5a6b7cd8') }
+  it { should have_security_group('my-db-sg') }
+end
+```
+
+### belong_to_db_subnet_group
+
+```ruby
+describe rds('my-rds') do
+  it { should belong_to_db_subnet_group('my-db-subnet-group') }
+end
+```
+
+### belong_to_subnet
+
+```ruby
+describe rds('my-rds') do
+  it { should belong_to_subnet('subnet-8901b123') }
+  it { should belong_to_subnet('db-subnet-a') }
+end
+```
+
+### belong_to_vpc
+
+```ruby
+describe rds('my-rds') do
+  it { should belong_to_vpc('vpc-ab123cde') }
+  it { should belong_to_vpc('my-vpc') }
+end
+```

data/doc/_resource_types/rds_db_parameter_group.md

@@ -6,3 +6,10 @@ describe rds_db_parameter_group('my-rds-db-parameter-group') do
   its(:innodb_buffer_pool_size) { '{DBInstanceClassMemory*3/4}' }
 end
 ```
+### exist
+
+```ruby
+describe rds_db_parameter_group('my-rds-db-parameter-group') do
+  it { should exist }
+end
+```

data/doc/_resource_types/route53_hosted_zone.md

@@ -0,0 +1,25 @@
+### exist
+
+```ruby
+describe route53_hosted_zone('example.com.') do
+  it { should exist }
+end
+```
+
+### have_record_set
+
+```ruby
+describe route53_hosted_zone('example.com.') do
+  its(:resource_record_set_count) { should eq 6 }
+  it { should have_record_set('example.com.').a('123.456.7.890') }
+  it { should have_record_set('*.example.com.').cname('example.com') }
+  it { should have_record_set('example.com.').mx('10 mail.example.com') }
+  it { should have_record_set('mail.example.com.').a('123.456.7.890').ttl(3600) }
+  ns = 'ns-123.awsdns-45.net.
+ns-6789.awsdns-01.org.
+ns-2345.awsdns-67.co.uk.
+ns-890.awsdns-12.com.'
+  it { should have_record_set('example.com.').ns(ns) }
+  it { should have_record_set('s3.example.com.').alias('s3-website-us-east-1.amazonaws.com.', 'Z2ABCDEFGHIJKL') }
+end
+```

data/doc/_resource_types/route_table.md

@@ -1,3 +1,11 @@
+### exist
+
+```ruby
+describe route_table('my-route-table') do
+  it { should exist }
+end
+```
+
 ### have_route
 
 ```ruby
@@ -8,3 +16,11 @@ describe route_table('my-route-table') do
   it { should have_route('192.168.2.0/24').target(vpc_peering_connection: 'my-pcx') }
 end
 ```
+
+### have_subnet
+
+```ruby
+describe route_table('my-route-table') do
+  it { should have_subnet('my-subnet') }
+end
+```

data/doc/_resource_types/s3.md

@@ -0,0 +1,27 @@
+### exist
+
+```ruby
+describe s3('my-bucket') do
+  it { should exist }
+end
+```
+
+### have_acl_grant
+
+```ruby
+describe s3('my-bucket') do
+  its(:acl_grants_count) { should eq 3 }
+  it { should have_acl_grant(grantee: 'my-bucket-owner', permission: 'FULL_CONTROL') }
+  it { should have_acl_grant(grantee: 'my-bucket-write-only', permission: 'WRITE') }
+  it { should have_acl_grant(grantee: 'my-bucket-read-only', permission: 'READ') }
+  its(:acl_owner) { should eq 'my-bucket-owner' }
+end
+```
+
+### have_object
+
+```ruby
+describe s3('my-bucket') do
+  it { should have_object('path/to/object') }
+end
+```

data/doc/_resource_types/security_group.md

@@ -1,3 +1,11 @@
+### exist
+
+```ruby
+describe security_group('my-security-group-name') do
+  it { should exist }
+end
+```
+
 ### its(:inbound), its(:outbound)
 
 ```ruby

data/doc/_resource_types/ses_identity.md

@@ -0,0 +1,17 @@
+### exist
+
+```ruby
+describe ses_identity('example.com') do
+  it { should exist }
+end
+```
+
+### have_dkim_tokens
+
+### have_identity_policy
+
+```ruby
+describe ses_identity('example.com') do
+  it { should have_identity_policy('my-identity-policy-name') }
+end
+```

data/doc/_resource_types/subnet.md

@@ -0,0 +1,15 @@
+### exist
+
+```ruby
+describe subnet('my-subnet') do
+  it { should exist }
+end
+```
+
+### be_available, be_pending
+
+```ruby
+describe subnet('my-subnet') do
+  it { should be_available }
+end
+```

data/doc/_resource_types/vpc.md

@@ -0,0 +1,33 @@
+### exist
+
+```ruby
+describe vpc('my-vpc') do
+  it { should exist }
+end
+```
+
+### be_available, be_pending
+
+```ruby
+describe vpc('vpc-ab123cde') do
+  it { should be_available }
+end
+```
+
+### have_network_acl
+
+```ruby
+describe vpc('vpc-ab123cde') do
+  it { should have_network_acl('acl-1abc2d3e') }
+  it { should have_network_acl('my-network-acl') }
+end
+```
+
+### have_route_table
+
+```ruby
+describe vpc('vpc-ab123cde') do
+  it { should have_network_acl('acl-1abc2d3e') }
+  it { should have_network_acl('my-network-acl') }
+end
+```

data/doc/resource_types.md

@@ -39,9 +39,14 @@ end
 
 ### be_disabled_api_termination
 
-### be_pending
+```ruby
+describe ec2('my-ec2') do
+  it { should be_disabled_api_termination }
+end
+```
 
-### be_running
+
+### be_pending, be_running, be_shutting_down, be_terminated, be_stopping, be_stopped
 
 ```ruby
 describe ec2('my-ec2') do
@@ -49,24 +54,55 @@ describe ec2('my-ec2') do
 end
 ```
 
-### be_shutting_down
-
-### be_stopped
 
-### be_stopping
+### have_ebs
 
-### be_terminated
+```ruby
+describe ec2('my-ec2') do
+  it { should have_ebs('vol-123a123b') }
+  it { should have_ebs('my-volume') }
+end
+```
 
-### have_ebs
 
 ### have_eip
 
+```ruby
+describe ec2('my-ec2') do
+  it { should have_eip('123.0.456.789') }
+end
+```
+
+
 ### have_security_group
 
+```ruby
+describe ec2('my-ec2') do
+  it { should have_security_group('my-security-group-name') }
+  it { should have_security_group('sg-1a2b3cd4') }
+end
+```
+
+
 ### belong_to_subnet
 
+```ruby
+describe ec2('my-ec2') do
+  it { should belong_to_subnet('subnet-1234a567') }
+  it { should belong_to_subnet('my-subnet') }
+end
+```
+
+
 ### belong_to_vpc
 
+```ruby
+describe ec2('my-ec2') do
+  it { should belong_to_vpc('vpc-ab123cde') }
+  it { should belong_to_vpc('my-vpc') }
+end
+```
+
 #### its(:instance_id), its(:image_id), its(:private_dns_name), its(:public_dns_name), its(:state_transition_reason), its(:key_name), its(:ami_launch_index), its(:instance_type), its(:launch_time), its(:placement), its(:kernel_id), its(:ramdisk_id), its(:platform), its(:monitoring), its(:subnet_id), its(:vpc_id), its(:private_ip_address), its(:public_ip_address), its(:state_reason), its(:architecture), its(:root_device_type), its(:root_device_name), its(:virtualization_type), its(:instance_lifecycle), its(:spot_instance_request_id), its(:client_token), its(:source_dest_check), its(:hypervisor), its(:iam_instance_profile), its(:ebs_optimized), its(:sriov_net_support)
 ## <a name="rds">rds</a>
 
@@ -74,56 +110,78 @@ RDS resource type.
 
 ### exist
 
-### be_available
-
-### be_backing_up
-
-### be_creating
-
-### be_deleting
-
-### be_failed
+```ruby
+describe rds('my-rds') do
+  it { should exist }
+end
+```
 
-### be_inaccessible_encryption_credentials
 
-### be_incompatible_credentials
+### be_available, be_backing_up, be_creating, be_deleting, be_failed, be_inaccessible_encryption_credentials, be_incompatible_credentials, be_incompatible_network, be_incompatible_option_group, be_incompatible_parameters, be_incompatible_restore, be_maintenance, be_modifying, be_rebooting, be_renaming, be_resetting_master_credentials, be_restore_error, be_storage_full, be_upgrading
 
-### be_incompatible_network
+```ruby
+describe rds('my-rds') do
+  it { should be_available }
+end
+```
 
-### be_incompatible_option_group
 
-### be_incompatible_parameters
+### have_db_parameter_group
 
-### be_incompatible_restore
+```ruby
+describe rds('my-rds') do
+  it { should belong_to_db_subnet_group('my-db-subnet-group') }
+end
+```
 
-### be_maintenance
 
-### be_modifying
+### have_option_group
 
-### be_rebooting
+```ruby
+describe rds('my-rds') do
+  it { should have_option_group('default:mysql-5-6') }
+end
+```
 
-### be_renaming
 
-### be_resetting_master_credentials
+### have_security_group
 
-### be_restore_error
+```ruby
+describe rds('my-rds') do
+  it { should have_security_group('sg-5a6b7cd8') }
+  it { should have_security_group('my-db-sg') }
+end
+```
 
-### be_storage_full
 
-### be_upgrading
+### belong_to_db_subnet_group
 
-### have_db_parameter_group
+```ruby
+describe rds('my-rds') do
+  it { should belong_to_db_subnet_group('my-db-subnet-group') }
+end
+```
 
-### have_option_group
 
-### have_security_group
+### belong_to_subnet
 
-### belong_to_db_subnet_group
+```ruby
+describe rds('my-rds') do
+  it { should belong_to_subnet('subnet-8901b123') }
+  it { should belong_to_subnet('db-subnet-a') }
+end
+```
 
-### belong_to_subnet
 
 ### belong_to_vpc
 
+```ruby
+describe rds('my-rds') do
+  it { should belong_to_vpc('vpc-ab123cde') }
+  it { should belong_to_vpc('my-vpc') }
+end
+```
+
 #### its(:vpc_id), its(:db_instance_identifier), its(:db_instance_class), its(:engine), its(:db_instance_status), its(:master_username), its(:db_name), its(:endpoint), its(:allocated_storage), its(:instance_create_time), its(:preferred_backup_window), its(:backup_retention_period), its(:availability_zone), its(:preferred_maintenance_window), its(:pending_modified_values), its(:latest_restorable_time), its(:multi_az), its(:engine_version), its(:auto_minor_version_upgrade), its(:read_replica_source_db_instance_identifier), its(:license_model), its(:iops), its(:character_set_name), its(:secondary_availability_zone), its(:publicly_accessible), its(:storage_type), its(:tde_credential_arn), its(:db_instance_port), its(:db_cluster_identifier), its(:storage_encrypted), its(:kms_key_id), its(:dbi_resource_id), its(:ca_certificate_identifier), its(:copy_tags_to_snapshot)
 ## <a name="rds_db_parameter_group">rds_db_parameter_group</a>
 
@@ -138,6 +196,12 @@ end
 
 ### exist
 
+```ruby
+describe rds_db_parameter_group('my-rds-db-parameter-group') do
+  it { should exist }
+end
+```
+
 
 ## <a name="security_group">security_group</a>
 
@@ -145,6 +209,13 @@ SecurityGroup resource type.
 
 ### exist
 
+```ruby
+describe security_group('my-security-group-name') do
+  it { should exist }
+end
+```
+
+
 ### its(:inbound), its(:outbound)
 
 ```ruby
@@ -163,14 +234,41 @@ VPC resource type.
 
 ### exist
 
-### be_available
+```ruby
+describe vpc('my-vpc') do
+  it { should exist }
+end
+```
+
+
+### be_available, be_pending
+
+```ruby
+describe vpc('vpc-ab123cde') do
+  it { should be_available }
+end
+```
 
-### be_pending
 
 ### have_network_acl
 
+```ruby
+describe vpc('vpc-ab123cde') do
+  it { should have_network_acl('acl-1abc2d3e') }
+  it { should have_network_acl('my-network-acl') }
+end
+```
+
+
 ### have_route_table
 
+```ruby
+describe vpc('vpc-ab123cde') do
+  it { should have_network_acl('acl-1abc2d3e') }
+  it { should have_network_acl('my-network-acl') }
+end
+```
+
 #### its(:vpc_id), its(:state), its(:cidr_block), its(:dhcp_options_id), its(:instance_tenancy), its(:is_default)
 ## <a name="s3">s3</a>
 
@@ -178,17 +276,66 @@ S3 resource type.
 
 ### exist
 
+```ruby
+describe s3('my-bucket') do
+  it { should exist }
+end
+```
+
+
+### have_acl_grant
+
+```ruby
+describe s3('my-bucket') do
+  its(:acl_grants_count) { should eq 3 }
+  it { should have_acl_grant(grantee: 'my-bucket-owner', permission: 'FULL_CONTROL') }
+  it { should have_acl_grant(grantee: 'my-bucket-write-only', permission: 'WRITE') }
+  it { should have_acl_grant(grantee: 'my-bucket-read-only', permission: 'READ') }
+  its(:acl_owner) { should eq 'my-bucket-owner' }
+end
+```
+
+
 ### have_object
 
-#### its(:name), its(:creation_date)
+```ruby
+describe s3('my-bucket') do
+  it { should have_object('path/to/object') }
+end
+```
+
+#### its(:acl_grants_count), its(:acl_owner), its(:name), its(:creation_date)
 ## <a name="route53_hosted_zone">route53_hosted_zone</a>
 
 Route53HostedZone resource type.
 
 ### exist
 
+```ruby
+describe route53_hosted_zone('example.com.') do
+  it { should exist }
+end
+```
+
+
 ### have_record_set
 
+```ruby
+describe route53_hosted_zone('example.com.') do
+  its(:resource_record_set_count) { should eq 6 }
+  it { should have_record_set('example.com.').a('123.456.7.890') }
+  it { should have_record_set('*.example.com.').cname('example.com') }
+  it { should have_record_set('example.com.').mx('10 mail.example.com') }
+  it { should have_record_set('mail.example.com.').a('123.456.7.890').ttl(3600) }
+  ns = 'ns-123.awsdns-45.net.
+ns-6789.awsdns-01.org.
+ns-2345.awsdns-67.co.uk.
+ns-890.awsdns-12.com.'
+  it { should have_record_set('example.com.').ns(ns) }
+  it { should have_record_set('s3.example.com.').alias('s3-website-us-east-1.amazonaws.com.', 'Z2ABCDEFGHIJKL') }
+end
+```
+
 #### its(:id), its(:name), its(:caller_reference), its(:config), its(:resource_record_set_count)
 ## <a name="autoscaling_group">autoscaling_group</a>
 
@@ -196,10 +343,30 @@ AutoscalingGroup resource type.
 
 ### exist
 
+```ruby
+describe autoscaling_group('my-auto-scaling-group') do
+  it { should exist }
+end
+```
+
+
 ### have_ec2
 
+```ruby
+describe autoscaling_group('my-auto-scaling-group') do
+  it { should have_ec2('my-ec2') }
+end
+```
+
+
 ### have_elb
 
+```ruby
+describe autoscaling_group('my-auto-scaling-group') do
+  it { should have_elb('my-elb') }
+end
+```
+
 #### its(:auto_scaling_group_name), its(:auto_scaling_group_arn), its(:launch_configuration_name), its(:min_size), its(:max_size), its(:desired_capacity), its(:default_cooldown), its(:health_check_type), its(:health_check_grace_period), its(:created_time), its(:placement_group), its(:vpc_zone_identifier), its(:status)
 ## <a name="subnet">subnet</a>
 
@@ -207,9 +374,20 @@ Subnet resource type.
 
 ### exist
 
-### be_available
+```ruby
+describe subnet('my-subnet') do
+  it { should exist }
+end
+```
+
 
-### be_pending
+### be_available, be_pending
+
+```ruby
+describe subnet('my-subnet') do
+  it { should be_available }
+end
+```
 
 #### its(:subnet_id), its(:state), its(:vpc_id), its(:cidr_block), its(:available_ip_address_count), its(:availability_zone), its(:default_for_az), its(:map_public_ip_on_launch)
 ## <a name="route_table">route_table</a>
@@ -218,6 +396,13 @@ RouteTable resource type.
 
 ### exist
 
+```ruby
+describe route_table('my-route-table') do
+  it { should exist }
+end
+```
+
+
 ### have_route
 
 ```ruby
@@ -229,8 +414,15 @@ describe route_table('my-route-table') do
 end
 ```
 
+
 ### have_subnet
 
+```ruby
+describe route_table('my-route-table') do
+  it { should have_subnet('my-subnet') }
+end
+```
+
 #### its(:route_table_id), its(:vpc_id)
 ## <a name="ebs">ebs</a>
 
@@ -238,19 +430,29 @@ EBS resource type.
 
 ### exist
 
-### be_attached_to
+```ruby
+describe ebs('my-volume') do
+  it { should exist }
+end
+```
 
-### be_available
 
-### be_creating
+### be_attached_to
 
-### be_deleted
+```ruby
+describe ebs('my-volume') do
+  it { should be_attached_to('my-ec2') }
+end
+```
 
-### be_deleting
 
-### be_error
+### be_creating, be_available, be_in_use, be_deleting, be_deleted, be_error
 
-### be_in_use
+```ruby
+describe ebs('my-volume') do
+  it { should be_in_use }
+end
+```
 
 #### its(:volume_id), its(:size), its(:snapshot_id), its(:availability_zone), its(:state), its(:create_time), its(:volume_type), its(:iops), its(:encrypted), its(:kms_key_id)
 ## <a name="elb">elb</a>
@@ -259,8 +461,22 @@ ELB resource type.
 
 ### exist
 
+```ruby
+describe elb('my-elb') do
+  it { should exist }
+end
+```
+
+
 ### have_ec2
 
+```ruby
+describe elb('my-elb') do
+  it { should have_ec2('my-ec2') }
+end
+```
+
+
 ### have_listener
 
 http://docs.aws.amazon.com/en_us/ElasticLoadBalancing/latest/DeveloperGuide/elb-listener-config.html
@@ -271,14 +487,33 @@ describe elb('my-elb') do
 end
 ```
 
+
 ### have_security_group
 
+```ruby
+describe elb('my-elb') do
+  it { should have_security_group('my-lb-security-group-tag-name') }
+end
+```
+
+
 ### have_subnet
 
-### belong_to_subnet
+```ruby
+describe elb('my-elb') do
+  it { should have_subnet('my-subnet') }
+end
+```
+
 
 ### belong_to_vpc
 
+```ruby
+describe elb('my-elb') do
+  it { should belong_to_vpc('my-vpc') }
+end
+```
+
 #### its(:health_check_target), its(:health_check_interval), its(:health_check_timeout), its(:health_check_unhealthy_threshold), its(:health_check_healthy_threshold), its(:load_balancer_name), its(:dns_name), its(:canonical_hosted_zone_name), its(:canonical_hosted_zone_name_id), its(:vpc_id), its(:created_time), its(:scheme)
 ## <a name="lambda">lambda</a>
 
@@ -286,6 +521,13 @@ Lambda resource type.
 
 ### exist
 
+```ruby
+describe lambda('my-lambda-function-name') do
+  it { should exist }
+end
+```
+
+
 ### have_event_source
 
 This matcher does not support Amazon S3 event sources. ( [See SDK doc](http://docs.aws.amazon.com/sdkforruby/api/Aws/Lambda/Client.html#list_event_source_mappings-instance_method) )
@@ -297,6 +539,13 @@ IamUser resource type.
 
 ### exist
 
+```ruby
+describe iam_user('my-iam-user') do
+  it { should exist }
+end
+```
+
+
 ### be_allowed_action
 
 ```ruby
@@ -306,10 +555,24 @@ describe iam_user('my-iam-user') do
 end
 ```
 
+
 ### have_iam_policy
 
+```ruby
+describe iam_user('my-iam-user') do
+  it { should have_iam_policy('ReadOnlyAccess') }
+end
+```
+
+
 ### belong_to_iam_group
 
+```ruby
+describe iam_user('my-iam-user') do
+  it { should belong_to_iam_group('my-iam-group') }
+end
+```
+
 #### its(:path), its(:user_name), its(:user_id), its(:arn), its(:create_date), its(:password_last_used)
 ## <a name="iam_group">iam_group</a>
 
@@ -317,6 +580,13 @@ IamGroup resource type.
 
 ### exist
 
+```ruby
+describe iam_group('my-iam-group') do
+  it { should exist }
+end
+```
+
+
 ### be_allowed_action
 
 ```ruby
@@ -326,10 +596,24 @@ describe iam_group('my-iam-group') do
 end
 ```
 
+
 ### have_iam_policy
 
+```ruby
+describe iam_group('my-iam-group') do
+  it { should have_iam_policy('ReadOnlyAccess') }
+end
+```
+
+
 ### have_iam_user
 
+```ruby
+describe iam_group('my-iam-group') do
+  it { should have_iam_user('my-iam-user') }
+end
+```
+
 #### its(:path), its(:group_name), its(:group_id), its(:arn), its(:create_date)
 ## <a name="iam_role">iam_role</a>
 
@@ -337,6 +621,13 @@ IamRole resource type.
 
 ### exist
 
+```ruby
+describe iam_role('my-iam-role') do
+  it { should exist }
+end
+```
+
+
 ### be_allowed_action
 
 ```ruby
@@ -346,8 +637,15 @@ describe iam_role('my-iam-role') do
 end
 ```
 
+
 ### have_iam_policy
 
+```ruby
+describe iam_role('my-iam-role') do
+  it { should have_iam_policy('ReadOnlyAccess') }
+end
+```
+
 #### its(:path), its(:role_name), its(:role_id), its(:arn), its(:create_date), its(:assume_role_policy_document)
 ## <a name="iam_policy">iam_policy</a>
 
@@ -355,14 +653,48 @@ IamPolicy resource type.
 
 ### exist
 
+```ruby
+describe iam_policy('my-iam-policy') do
+  it { should exist }
+end
+```
+
+
 ### be_attachable
 
+```ruby
+describe iam_policy('my-iam-policy') do
+  it { should be_attachable }
+end
+```
+
+
 ### be_attached_to_group
 
+```ruby
+describe iam_policy('my-iam-policy') do
+  it { should be_attached_to_group('my-iam-group') }
+end
+```
+
+
 ### be_attached_to_role
 
+```ruby
+describe iam_policy('my-iam-policy') do
+  it { should be_attached_to_role('HelloIAmGodRole') }
+end
+```
+
+
 ### be_attached_to_user
 
+```ruby
+describe iam_policy('my-iam-policy') do
+  it { should be_attached_to_policy('my-iam-policy') }
+end
+```
+
 #### its(:policy_name), its(:policy_id), its(:arn), its(:path), its(:default_version_id), its(:attachment_count), its(:is_attachable), its(:description), its(:create_date), its(:update_date)
 ## <a name="elasticache">elasticache</a>
 
@@ -370,32 +702,57 @@ Elasticache resource type.
 
 ### exist
 
-### be_available
+```ruby
+describe elasticache('my-rep-group-001') do
+  it { should exist }
+end
+```
 
-### be_creating
 
-### be_deleted
+### be_available, be_creating, be_deleted, be_deleting, be_incompatible_network, be_modifying, be_rebooting_cache_cluster_nodes, be_restore_failed, be_snapshotting
 
-### be_deleting
+```ruby
+describe elasticache('my-rep-group-001') do
+  it { should be_available }
+end
+```
 
-### be_incompatible_network
 
-### be_modifying
+### have_cache_parameter_group
 
-### be_rebooting_cache_cluster_nodes
+```ruby
+describe elasticache('my-rep-group-001') do
+  it { should have_cache_parameter_group('my-cache-parameter-group') }
+end
+```
 
-### be_restore_failed
 
-### be_snapshotting
+### belong_to_cache_subnet_group
 
-### have_cache_parameter_group
+```ruby
+describe elasticache('my-rep-group-001') do
+  it { should belong_to_cache_subnet_group('my-cache-subnet-group') }
+end
+```
 
-### belong_to_cache_subnet_group
 
 ### belong_to_replication_group
 
+```ruby
+describe elasticache('my-rep-group-001') do
+  it { should belong_to_replication_group('my-rep-group') }
+end
+```
+
+
 ### belong_to_vpc
 
+```ruby
+describe elasticache('my-rep-group-001') do
+  it { should belong_to_vpc('my-vpc') }
+end
+```
+
 #### its(:cache_cluster_id), its(:configuration_endpoint), its(:client_download_landing_page), its(:cache_node_type), its(:engine), its(:engine_version), its(:cache_cluster_status), its(:num_cache_nodes), its(:preferred_availability_zone), its(:cache_cluster_create_time), its(:preferred_maintenance_window), its(:notification_configuration), its(:cache_subnet_group_name), its(:auto_minor_version_upgrade), its(:replication_group_id), its(:snapshot_retention_limit), its(:snapshot_window)
 ## <a name="elasticache_cache_parameter_group">elasticache_cache_parameter_group</a>
 
@@ -409,8 +766,15 @@ describe elasticache_cache_parameter_group('my-cache-parameter-group') do
 end
 ```
 
+
 ### exist
 
+```ruby
+describe elasticache_cache_parameter_group('my-cache-parameter-group') do
+  it { should exist }
+end
+```
+
 
 ## <a name="cloudwatch_alarm">cloudwatch_alarm</a>
 
@@ -418,14 +782,48 @@ CloudwatchAlarm resource type.
 
 ### exist
 
+```ruby
+describe cloudwatch_alarm('my-cloudwatch-alarm') do
+  it { should exist }
+end
+```
+
+
 ### have_alarm_action
 
+```ruby
+describe cloudwatch_alarm('my-cloudwatch-alarm') do
+  it { should have_alarm_action('arn:aws:sns:ap-northeast-1:1234567890:sns_alert') }
+end
+```
+
+
 ### have_insufficient_data_action
 
+```ruby
+describe cloudwatch_alarm('my-cloudwatch-alarm') do
+  it { should have_insufficient_data_action('arn:aws:sns:ap-northeast-1:1234567890:sns_alert') }
+end
+```
+
+
 ### have_ok_action
 
+```ruby
+describe cloudwatch_alarm('my-cloudwatch-alarm') do
+  it { should have_ok_action('arn:aws:sns:ap-northeast-1:1234567890:sns_alert') }
+end
+```
+
+
 ### belong_to_metric
 
+```ruby
+describe cloudwatch_alarm('my-cloudwatch-alarm') do
+  it { should belong_to_metric('NumberOfProcesses').namespace('my-cloudwatch-namespace') }
+end
+```
+
 #### its(:alarm_name), its(:alarm_arn), its(:alarm_description), its(:alarm_configuration_updated_timestamp), its(:actions_enabled), its(:state_value), its(:state_reason), its(:state_reason_data), its(:state_updated_timestamp), its(:metric_name), its(:namespace), its(:statistic), its(:period), its(:unit), its(:evaluation_periods), its(:threshold), its(:comparison_operator)
 ## <a name="ses_identity">ses_identity</a>
 
@@ -433,10 +831,24 @@ SesIdentity resource type.
 
 ### exist
 
+```ruby
+describe ses_identity('example.com') do
+  it { should exist }
+end
+```
+
+
 ### have_dkim_tokens
 
+
 ### have_identity_policy
 
+```ruby
+describe ses_identity('example.com') do
+  it { should have_identity_policy('my-identity-policy-name') }
+end
+```
+
 #### its(:dkim_enabled), its(:dkim_verification_status), its(:bounce_topic), its(:complaint_topic), its(:delivery_topic), its(:forwarding_enabled), its(:verification_status), its(:verification_token)
 ## <a name="network_acl">network_acl</a>
 
@@ -444,15 +856,35 @@ NetworkAcl resource type.
 
 ### exist
 
+```ruby
+describe network_acl('my-network-acl') do
+  it { should exist }
+end
+```
+
+
 ### have_subnet
 
-### its(:inbound), its(:outbound)
+```ruby
+describe network_acl('my-network-acl') do
+  it { should have_subnet('my-subnet') }
+end
+```
+
+
+### belong_to_vpc
 
 ```ruby
 describe network_acl('my-network-acl') do
-  it { should exist }
   it { should belong_to_vpc('my-vpc') }
-  it { should have_subnet('my-subnet') }
+end
+```
+
+
+### its(:inbound), its(:outbound), its(:inbound_entries_count), its(:outbound_entries_count)
+
+```ruby
+describe network_acl('my-network-acl') do
   its(:inbound) { should be_allowed(80).protocol('tcp').source('123.0.456.789/32') }
   its(:inbound) { should be_denied.rule_number('*').source('0.0.0.0/0') }
   its(:outbound) { should be_allowed.protocol('ALL').source('0.0.0.0/0') }
@@ -466,20 +898,35 @@ end
 
 DirectconnectVirtualInterface resource type.
 
-### exist
-
-### be_available
+```ruby
+describe directconnect_virtual_interface('my-directconnect-virtual-interface') do
+  it { should exist }
+  it { should be_available }
+  its(:connection_id) { should eq 'dxcon-abcd5fgh' }
+  its(:virtual_interface_id) { should eq 'dxvif-aabbccdd' }
+  its(:amazon_address) { should eq '170.252.252.1/30' }
+  its(:customer_address) { should eq '123.456.789.2/30' }
+  its(:virtual_gateway_id) { should eq 'vgw-d234e5f6' }
+end
+```
 
-### be_confirming
 
-### be_deleted
+### exist
 
-### be_deleting
+```ruby
+describe directconnect_virtual_interface('my-directconnect-virtual-interface') do
+  it { should exist }
+end
+```
 
-### be_pending
 
-### be_rejected
+### be_confirming, be_verifying, be_pending, be_available, be_deleting, be_deleted, be_rejected
 
-### be_verifying
+```ruby
+describe directconnect_virtual_interface('my-directconnect-virtual-interface') do
+  it { should exist }
+  it { should be_available }
+end
+```
 
 #### its(:owner_account), its(:virtual_interface_id), its(:location), its(:connection_id), its(:virtual_interface_type), its(:virtual_interface_name), its(:vlan), its(:asn), its(:auth_key), its(:amazon_address), its(:customer_address), its(:virtual_interface_state), its(:customer_router_config), its(:virtual_gateway_id)