awspec 0.7.0 → 0.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 37bdea5e957ae058dcbe8cd39b0aea104eb7b351
-  data.tar.gz: 7aeaef96ed3d595a3b767d36375d5f2ffa7ba61c
+  metadata.gz: 7b82928f9ac3ba086bd8057f29a2d29d924b6173
+  data.tar.gz: 46a33e636b743394115ecc99d5b3db3418716041
 SHA512:
-  metadata.gz: e3c16ac71245320c4be9b6007e924bee29843cdebcfa6c5a41438b89ad4d4d8553dc1d1b49ce8df807d2bad614c5f7fa4ee417d04d13200a6122c9a0757f9b48
-  data.tar.gz: a83b4e57e8630d812cad45aaa94584cbea73a0b630a7ef103fe7363e9154274d313a10762bb2aff86295b89988f93c9ebf1e7bf278a3edd923c5869e338420cc
+  metadata.gz: 898a43391065b7f8f4cae1bec98f4b68e8c4328db0acf23e4356e40bbed8782930f7d371ca037396a6c48bb5a1f8918d90515a25921b7305e4474a0c96d55495
+  data.tar.gz: d4490f55c1e4f4ebf2f85a081ca7235f1c3d6236c598145bf30f62e04cae818da4dfc9d210be8e1a40849511ca6393f3d4833e183210c93305bca9d3ad7fae05

data/.tachikoma.yml

@@ -0,0 +1 @@
+strategy: 'bundler'

data/README.md

@@ -92,13 +92,16 @@ $ awspec generate ec2 vpc-ab123cde >> spec/ec2_spec.rb
 - [x] EBS Volume (`ebs`)
 - [x] ELB (`elb`)
 - [x] Lambda (`lambda`)
+- IAM
+    - [x] IAM User (`iam_user`)
+    - [ ] IAM Group
+    - [ ] IAM Role
+    - [ ] IAM Policy
 
 [Resource Types more infomation here](doc/resource_types.md)
 
 ### Next..
 
-- IAM
-    - [ ] IAM User
 - ...
 
 ## Contributing

data/doc/resource_types.md

@@ -13,6 +13,7 @@
 | [ebs](#ebs)
 | [elb](#elb)
 | [lambda](#lambda)
+| [iam_user](#iam_user)
 
 ## <a name="ec2">ec2</a>
 
@@ -268,3 +269,12 @@ Lambda resource type.
 This matcher does not support Amazon S3 event sources. ( [See SDK doc](http://docs.aws.amazon.com/sdkforruby/api/Aws/Lambda/Client.html#list_event_source_mappings-instance_method) )
 
 #### its(:function_name), its(:function_arn), its(:runtime), its(:role), its(:handler), its(:code_size), its(:description), its(:timeout), its(:memory_size), its(:last_modified)
+## <a name="iam_user">iam_user</a>
+
+IamUser resource type.
+
+### exist
+
+### have_iam_policy
+
+#### its(:path), its(:user_name), its(:user_id), its(:arn), its(:create_date), its(:password_last_used)

data/lib/awspec/generator/doc/type/iam_user.rb

@@ -0,0 +1,17 @@
+module Awspec::Generator
+  module Doc
+    module Type
+      class IamUser < Base
+        def initialize
+          super
+          @type_name = 'IamUser'
+          @type = Awspec::Type::IamUser.new('my-iam-user')
+          @ret = @type.user
+          @matchers = []
+          @ignore_matchers = []
+          @describes = []
+        end
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder.rb

@@ -9,6 +9,7 @@ require 'awspec/helper/finder/auto_scaling'
 require 'awspec/helper/finder/ebs'
 require 'awspec/helper/finder/elb'
 require 'awspec/helper/finder/lambda'
+require 'awspec/helper/finder/iam'
 
 module Awspec::Helper
   module Finder
@@ -23,6 +24,7 @@ module Awspec::Helper
     include Awspec::Helper::Finder::Ebs
     include Awspec::Helper::Finder::Elb
     include Awspec::Helper::Finder::Lambda
+    include Awspec::Helper::Finder::Iam
 
     # rubocop:disable all
     def initialize(id = nil)
@@ -33,6 +35,7 @@ module Awspec::Helper
       @auto_scaling_client = Aws::AutoScaling::Client.new
       @elb_client = Aws::ElasticLoadBalancing::Client.new
       @lambda_client = Aws::Lambda::Client.new
+      @iam_client = Aws::IAM::Client.new
     end
   end
 end

data/lib/awspec/helper/finder/iam.rb

@@ -0,0 +1,36 @@
+module Awspec::Helper
+  module Finder
+    module Iam
+      def find_iam_user(id)
+        users = []
+        marker = nil
+        loop do
+          res = @iam_client.list_users(
+            marker: marker
+          )
+          marker = res.marker
+          break if res.users.empty?
+          res.users.each do |user|
+            users.push(user) if user.user_name == id || user.user_id == id
+          end
+          break unless marker
+        end
+        return users[0] if users.count == 1
+      end
+
+      def select_iam_group_by_user_name(user_name)
+        res = @iam_client.list_groups_for_user({
+                                                 user_name: user_name
+                                               })
+        res.groups
+      end
+
+      def select_iam_policy_by_user_name(user_name)
+        res = @iam_client.list_attached_user_policies({
+                                                        user_name: user_name
+                                                      })
+        res.attached_policies
+      end
+    end
+  end
+end

data/lib/awspec/helper/type.rb

@@ -4,7 +4,7 @@ module Awspec
       TYPES = %w(
         base ec2 rds rds_db_parameter_group security_group
         vpc s3 route53_hosted_zone auto_scaling_group subnet
-        route_table ebs elb lambda
+        route_table ebs elb lambda iam_user
       )
 
       TYPES.each do |type|

data/lib/awspec/matcher.rb

@@ -13,3 +13,6 @@ require 'awspec/matcher/have_record_set'
 
 # RouteTable
 require 'awspec/matcher/have_route'
+
+# IAM User
+require 'awspec/matcher/belong_to_iam_group'

data/lib/awspec/matcher/belong_to_iam_group.rb

@@ -0,0 +1,8 @@
+RSpec::Matchers.define :belong_to_iam_group do |group_id|
+  match do |resource|
+    groups = resource.select_iam_group_by_user_name(resource.user[:user_name])
+    groups.find do |group|
+      group.group_id == group_id || group.group_name == group_id
+    end
+  end
+end

data/lib/awspec/stub/iam_user.rb

@@ -0,0 +1,34 @@
+Aws.config[:iam] = {
+  stub_responses: {
+    list_users: {
+      users: [
+        path: '/',
+        user_name: 'my-iam-user',
+        user_id: 'ABCDEFGHI1234556890',
+        arn: 'arn:aws:iam::123456789012:user/my-iam-user',
+        create_date: Time.local(2015)
+      ]
+    },
+    list_groups_for_user: {
+      groups: [
+        {
+          path: '/',
+          group_name: 'my-iam-group',
+          group_id: 'GABCDEFGHI123455689',
+          arn: 'arn:aws:iam::123456789012:group/my-iam-group',
+          create_date: Time.local(2015)
+        }
+      ]
+    },
+    list_attached_user_policies: {
+      attached_policies: [
+        {
+          policy_arn: 'arn:aws:iam::aws:policy/ReadOnlyAccess',
+          policy_name: 'ReadOnlyAccess'
+        }
+      ],
+      is_truncated: false,
+      maker: nil
+    }
+  }
+}

data/lib/awspec/type/iam_user.rb

@@ -0,0 +1,27 @@
+module Awspec::Type
+  class IamUser < Base
+    attr_reader :user
+
+    def initialize(id)
+      super
+      @user = find_iam_user(id)
+      @id = @user[:user_id] if @user
+    end
+
+    def method_missing(name)
+      describe = name.to_sym
+      if @user.members.include?(describe)
+        @user[describe]
+      else
+        super
+      end
+    end
+
+    def has_iam_policy?(policy_id)
+      policies = select_iam_policy_by_user_name(@user[:user_name])
+      policies.find do |policy|
+        policy.policy_arn == policy_id || policy.policy_name == policy_id
+      end
+    end
+  end
+end

data/lib/awspec/version.rb

@@ -1,3 +1,3 @@
 module Awspec
-  VERSION = '0.7.0'
+  VERSION = '0.8.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: awspec
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.8.0
 platform: ruby
 authors:
 - k1LoW
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-08-27 00:00:00.000000000 Z
+date: 2015-09-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -133,6 +133,7 @@ files:
 - ".editorconfig"
 - ".gitignore"
 - ".rubocop.yml"
+- ".tachikoma.yml"
 - ".travis.yml"
 - Gemfile
 - LICENSE.txt
@@ -160,6 +161,7 @@ files:
 - lib/awspec/generator/doc/type/ebs.rb
 - lib/awspec/generator/doc/type/ec2.rb
 - lib/awspec/generator/doc/type/elb.rb
+- lib/awspec/generator/doc/type/iam_user.rb
 - lib/awspec/generator/doc/type/lambda.rb
 - lib/awspec/generator/doc/type/rds.rb
 - lib/awspec/generator/doc/type/rds_db_parameter_group.rb
@@ -182,6 +184,7 @@ files:
 - lib/awspec/helper/finder/ebs.rb
 - lib/awspec/helper/finder/ec2.rb
 - lib/awspec/helper/finder/elb.rb
+- lib/awspec/helper/finder/iam.rb
 - lib/awspec/helper/finder/lambda.rb
 - lib/awspec/helper/finder/rds.rb
 - lib/awspec/helper/finder/route53.rb
@@ -192,6 +195,7 @@ files:
 - lib/awspec/matcher.rb
 - lib/awspec/matcher/be_opened.rb
 - lib/awspec/matcher/belong_to_db_subnet_group.rb
+- lib/awspec/matcher/belong_to_iam_group.rb
 - lib/awspec/matcher/belong_to_subnet.rb
 - lib/awspec/matcher/belong_to_vpc.rb
 - lib/awspec/matcher/have_record_set.rb
@@ -202,6 +206,7 @@ files:
 - lib/awspec/stub/ebs.rb
 - lib/awspec/stub/ec2.rb
 - lib/awspec/stub/elb.rb
+- lib/awspec/stub/iam_user.rb
 - lib/awspec/stub/lambda.rb
 - lib/awspec/stub/rds.rb
 - lib/awspec/stub/rds_db_parameter_group.rb
@@ -217,6 +222,7 @@ files:
 - lib/awspec/type/ebs.rb
 - lib/awspec/type/ec2.rb
 - lib/awspec/type/elb.rb
+- lib/awspec/type/iam_user.rb
 - lib/awspec/type/lambda.rb
 - lib/awspec/type/rds.rb
 - lib/awspec/type/rds_db_parameter_group.rb