awspec 0.37.2 → 0.37.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: a0a5dad9214e4aa1801d62b7cc829348ed01fa57
-  data.tar.gz: fd8add8f33ba56d825cbb3d2117e1d10c6351e48
+  metadata.gz: df2237f15e0f8fc77dcb398e0b5a462bde783374
+  data.tar.gz: 99eca7ac1a36e1884bc0b407d6704079e7c00d82
 SHA512:
-  metadata.gz: baaabfb1dee8c745f949826d55c5ab68002f9ec5301a387c29d79523cb86dccdda29410f68b74b59f40812ee6fa13f9272779400f9e552c234517b7ac3a46c12
-  data.tar.gz: 5a0272e85c7d25b93523780cc30434ff392ae607cdc5fa09d22ad6a722838b68f1490b47f854343bc30787dec1a3e2412373424a05dd3d769dbdae461a308c41
+  metadata.gz: 668f32efbdf99aa6814fbd747937179dfdb30e7961c8fc0f2cef11281808ba60766782a19efe0cd4537b0526a09bf51e80d743cda06fc55d8cd46b2656a03f6f
+  data.tar.gz: 7ef884d94a0508331e646500e0fdda5968a91d3301fcc018435f973790f6fc0aa230745eec05e51dd7b30ba83149b0f1dbc97999195be92c7a32198bd1aba1b5

data/lib/awspec/command/generate.rb

@@ -36,7 +36,7 @@ module Awspec
     end
 
     types_for_generate_all = %w(
-      iam_policy cloudwatch_alarm directconnect ebs lambda iam_user iam_group
+      iam_policy cloudwatch_alarm directconnect ebs lambda iam_user iam_group iam_role
     )
 
     types_for_generate_all.each do |type|

data/lib/awspec/generator.rb

@@ -18,6 +18,7 @@ require 'awspec/generator/spec/lambda'
 require 'awspec/generator/spec/network_interface'
 require 'awspec/generator/spec/iam_user'
 require 'awspec/generator/spec/iam_group'
+require 'awspec/generator/spec/iam_role'
 
 # Doc
 require 'awspec/generator/doc/type'

data/lib/awspec/generator/spec/iam_group.rb

@@ -6,7 +6,7 @@ module Awspec::Generator
         groups = select_all_iam_groups
         raise 'Not Found IAM Group' if groups.empty?
         specs = groups.map do |group|
-          inline_policies = select_inine_policy_by_group_name(group.group_name).map do |policy_name|
+          inline_policies = select_inline_policy_by_group_name(group.group_name).map do |policy_name|
             res = iam_client.get_group_policy({
                                                 group_name: group.group_name,
                                                 policy_name: policy_name

data/lib/awspec/generator/spec/iam_role.rb

@@ -0,0 +1,39 @@
+module Awspec::Generator
+  module Spec
+    class IamRole
+      include Awspec::Helper::Finder
+      def generate_all
+        roles = select_all_iam_roles
+        raise 'Not Found IAM Role' if roles.empty?
+        specs = roles.map do |role|
+          inline_policies = select_inline_policy_by_role_name(role.role_name).map do |policy_name|
+            res = iam_client.get_role_policy({
+                                               role_name: role.role_name,
+                                               policy_name: policy_name
+                                             })
+            document = JSON.generate(JSON.parse(URI.decode(res.policy_document)))
+            "it { should have_inline_policy('#{policy_name}').document('#{document}') }"
+          end
+          content = ERB.new(iam_role_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+        end
+        specs.join("\n")
+      end
+
+      def iam_role_spec_template
+        template = <<-'EOF'
+describe iam_role('<%= role.role_name %>') do
+  it { should exist }
+  its(:arn) { should eq '<%= role.arn %>' }
+  its(:create_date) { should eq Time.parse('<%= role.create_date %>') }
+<% select_iam_policy_by_role_name(role.role_name).each do |policy| %>  it { should have_iam_policy('<%= policy.policy_name %>') }
+<% end %>
+<%- inline_policies.each do |line| -%>
+  <%= line %>
+<%- end -%>
+end
+EOF
+        template
+      end
+    end
+  end
+end

data/lib/awspec/generator/spec/iam_user.rb

@@ -6,7 +6,7 @@ module Awspec::Generator
         users = select_all_iam_users
         raise 'Not Found IAM User' if users.empty?
         specs = users.map do |user|
-          inline_policies = select_inine_policy_by_user_name(user.user_name).map do |policy_name|
+          inline_policies = select_inline_policy_by_user_name(user.user_name).map do |policy_name|
             res = iam_client.get_user_policy({
                                                user_name: user.user_name,
                                                policy_name: policy_name

data/lib/awspec/helper/finder/iam.rb

@@ -36,39 +36,20 @@ module Awspec::Helper
         res.groups
       end
 
-      def select_iam_policy_by_user_name(user_name)
-        res = iam_client.list_attached_user_policies({
-                                                       user_name: user_name
-                                                     })
-        res.attached_policies
-      end
-
-      def select_iam_policy_by_group_name(group_name)
-        res = iam_client.list_attached_group_policies({
-                                                        group_name: group_name
-                                                      })
-        res.attached_policies
-      end
-
-      def select_iam_policy_by_role_name(role_name)
-        res = iam_client.list_attached_role_policies({
-                                                       role_name: role_name
-                                                     })
-        res.attached_policies
-      end
-
-      def select_inine_policy_by_user_name(user_name)
-        res = iam_client.list_user_policies({
-                                              user_name: user_name
-                                            })
-        res.policy_names
-      end
+      %w(user group role).each do |type|
+        define_method 'select_iam_policy_by_' + type + '_name' do |name|
+          res = iam_client.method('list_attached_' + type + '_policies').call({
+                                                                                (type + '_name').to_sym => name
+                                                                              })
+          res.attached_policies
+        end
 
-      def select_inine_policy_by_group_name(group_name)
-        res = iam_client.list_group_policies({
-                                               group_name: group_name
-                                             })
-        res.policy_names
+        define_method 'select_inline_policy_by_' + type + '_name' do |name|
+          res = iam_client.method('list_' + type + '_policies').call({
+                                                                       (type + '_name').to_sym => name
+                                                                     })
+          res.policy_names
+        end
       end
 
       def select_all_attached_policies
@@ -114,6 +95,12 @@ module Awspec::Helper
           responce.groups
         end.flatten
       end
+
+      def select_all_iam_roles
+        iam_client.list_roles.map do |responce|
+          responce.roles
+        end.flatten
+      end
     end
   end
 end

data/lib/awspec/stub/iam_role.rb

@@ -6,7 +6,7 @@ Aws.config[:iam] = {
         role_name: 'my-iam-role',
         role_id: 'RABCDEFGHI123455689',
         arn: 'arn:aws:iam::123456789012:role/my-iam-role',
-        create_date: Time.local(2015)
+        create_date: Time.new(2015, 1, 2, 9, 00, 00, '+00:00')
       ]
     },
     list_attached_role_policies: {
@@ -19,6 +19,13 @@ Aws.config[:iam] = {
       is_truncated: false,
       marker: nil
     },
+    list_role_policies: {
+      policy_names: [
+        'AllowS3BucketAccess'
+      ],
+      is_truncated: false,
+      marker: nil
+    },
     get_role_policy: {
       role_name: 'my-iam-role',
       policy_name: 'AllowS3BucketAccess',

data/lib/awspec/version.rb

@@ -1,3 +1,3 @@
 module Awspec
-  VERSION = '0.37.2'
+  VERSION = '0.37.3'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: awspec
 version: !ruby/object:Gem::Version
-  version: 0.37.2
+  version: 0.37.3
 platform: ruby
 authors:
 - k1LoW
@@ -274,6 +274,7 @@ files:
 - lib/awspec/generator/spec/elb.rb
 - lib/awspec/generator/spec/iam_group.rb
 - lib/awspec/generator/spec/iam_policy.rb
+- lib/awspec/generator/spec/iam_role.rb
 - lib/awspec/generator/spec/iam_user.rb
 - lib/awspec/generator/spec/lambda.rb
 - lib/awspec/generator/spec/nat_gateway.rb