awspec 0.9.0 → 0.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 327a5cd2ed17af3f58122c6d2d2edf1fab622bfa
-  data.tar.gz: 66f4220079021aaf43365b7bb013e69b78df44d5
+  metadata.gz: 9ad0f1b784e4a2c835c7b1508a0bc47ad33d55ce
+  data.tar.gz: a5a394655631e518def240482d1d15cb8e1b26d5
 SHA512:
-  metadata.gz: 37722811763e42a9728d7e1fc8d6f22c3e6403f910c16c84411114c73f191361f807adf2afaa6c43cc5aa5133606efd4e6ad8b3e807268364464ca2231f1dc98
-  data.tar.gz: fc0d09164bdbf8825bac61b2cf514d19d21929bde7a61b79ba20212cbfd82d77fcf438350dd6322af19b98d76aa12233c27e0458f4fd1a9f808804db64046f40
+  metadata.gz: 65dc425d78cf4c8bb53ee28bcdf87b0c1d4de12f3b17880af3eb414e83eaf32ad2ee93533861b8d424910e6987345684f6cc4eecdb02553451991ded3da815e0
+  data.tar.gz: 49abee0c1e4cbb78f5afd949b39314aa9d6f8be45966d14f718dc0f4e6ed77a6a54a7663ec82de8e89d40970015fa62feb22293b2414def1c93f219564a9802f

data/README.md

@@ -95,8 +95,8 @@ $ awspec generate ec2 vpc-ab123cde >> spec/ec2_spec.rb
 - IAM
     - [x] IAM User (`iam_user`)
     - [x] IAM Group (`iam_group`)
-    - [ ] IAM Role
-    - [ ] IAM Policy
+    - [x] IAM Role (`iam_role`)
+    - [x] IAM Policy (`iam_policy`)
 
 [Resource Types more infomation here](doc/resource_types.md)
 

data/doc/resource_types.md

@@ -15,6 +15,8 @@
 | [lambda](#lambda)
 | [iam_user](#iam_user)
 | [iam_group](#iam_group)
+| [iam_role](#iam_role)
+| [iam_policy](#iam_policy)
 
 ## <a name="ec2">ec2</a>
 
@@ -292,3 +294,27 @@ IamGroup resource type.
 ### have_iam_user
 
 #### its(:path), its(:group_name), its(:group_id), its(:arn), its(:create_date)
+## <a name="iam_role">iam_role</a>
+
+IamRole resource type.
+
+### exist
+
+### have_iam_policy
+
+#### its(:path), its(:role_name), its(:role_id), its(:arn), its(:create_date), its(:assume_role_policy_document)
+## <a name="iam_policy">iam_policy</a>
+
+IamPolicy resource type.
+
+### exist
+
+### be_attachable
+
+### be_attached_to_group
+
+### be_attached_to_role
+
+### be_attached_to_user
+
+#### its(:policy_name), its(:policy_id), its(:arn), its(:path), its(:default_version_id), its(:attachment_count), its(:is_attachable), its(:description), its(:create_date), its(:update_date)

data/lib/awspec.rb

@@ -1,6 +1,7 @@
 require 'rubygems'
 require 'rspec'
 require 'rspec/its'
+require 'time'
 require 'awspec/version'
 require 'awspec/cli'
 require 'awspec/stub'

data/lib/awspec/cli.rb

@@ -9,7 +9,7 @@ module Awspec
       Awspec::Setup.run
     end
 
-    desc 'generate [resource] [vpc_id]', 'Generate *_spec.rb from VPC ID'
+    desc 'generate [resource]', 'Generate AWS resource *_spec.rb'
     subcommand 'generate', Generate
     map 'g' => 'generate'
   end

data/lib/awspec/command/generate.rb

@@ -22,6 +22,12 @@ module Awspec
       puts Awspec::Generator::Spec::Route53HostedZone.new.generate_by_domain_name(hosted_zone)
     end
 
+    desc 'iam_policy', 'Generate attached iam_policy spec'
+    def iam_policy
+      load_secrets
+      puts Awspec::Generator::Spec::IamPolicy.new.generate_all
+    end
+
     no_commands do
       def load_secrets
         creds = YAML.load_file('spec/secrets.yml') if File.exist?('spec/secrets.yml')

data/lib/awspec/generator.rb

@@ -7,6 +7,7 @@ require 'awspec/generator/spec/vpc'
 require 'awspec/generator/spec/security_group'
 require 'awspec/generator/spec/route53_hosted_zone'
 require 'awspec/generator/spec/elb'
+require 'awspec/generator/spec/iam_policy'
 
 # Doc
 require 'awspec/generator/doc/type'

data/lib/awspec/generator/doc/type/iam_policy.rb

@@ -0,0 +1,17 @@
+module Awspec::Generator
+  module Doc
+    module Type
+      class IamPolicy < Base
+        def initialize
+          super
+          @type_name = 'IamPolicy'
+          @type = Awspec::Type::IamPolicy.new('my-iam-policy')
+          @ret = @type.resource
+          @matchers = []
+          @ignore_matchers = []
+          @describes = []
+        end
+      end
+    end
+  end
+end

data/lib/awspec/generator/doc/type/iam_role.rb

@@ -0,0 +1,17 @@
+module Awspec::Generator
+  module Doc
+    module Type
+      class IamRole < Base
+        def initialize
+          super
+          @type_name = 'IamRole'
+          @type = Awspec::Type::IamRole.new('my-iam-role')
+          @ret = @type.resource
+          @matchers = []
+          @ignore_matchers = []
+          @describes = []
+        end
+      end
+    end
+  end
+end

data/lib/awspec/generator/spec/iam_policy.rb

@@ -0,0 +1,56 @@
+module Awspec::Generator
+  module Spec
+    class IamPolicy
+      include Awspec::Helper::Finder
+      def generate_all
+        policies = select_all_attached_policies
+        policies.empty? && fail('Not Found policy')
+        ERB.new(policy_spec_template, nil, '-').result(binding).chomp
+      end
+
+      # rubocop:disable all
+      def policy_spec_template
+        template = <<-'EOF'
+<% policies.each do |policy| %>
+describe iam_policy('<%= policy.policy_name %>') do
+  it { should exist }
+<%- if policy.is_attachable -%>
+  it { should be_attachable }
+<%- else -%>
+  it { should_not be_attachable }
+<%- end -%>
+  its(:arn) { should eq '<%= policy.arn %>' }
+  its(:update_date) { should eq Time.parse('<%= policy.update_date %>') }
+  its(:attachment_count) { should eq <%= policy.attachment_count %> }
+<%- users = select_attached_users(policy.arn) -%>
+<%- if users.empty? -%>
+  it { should_not be_attached_to_user }
+<%- else -%>
+<%- users.each do |user| -%>
+  it { should     be_attached_to_user('<%= user.user_name %>') }
+<%- end -%>
+<%- end -%>
+<%- groups = select_attached_groups(policy.arn) -%>
+<%- if groups.empty? -%>
+  it { should_not be_attached_to_group }
+<%- else -%>
+<%- groups.each do |group| -%>
+  it { should     be_attached_to_group('<%= group.group_name %>') }
+<%- end -%>
+<%- end -%>
+<%- roles = select_attached_roles(policy.arn) -%>
+<%- if roles.empty? -%>
+  it { should_not be_attached_to_role }
+<%- else -%>
+<%- roles.each do |role| -%>
+  it { should     be_attached_to_role('<%= role.role_name %>') }
+<%- end -%>
+<%- end -%>
+end
+<% end %>
+EOF
+        template
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/auto_scaling.rb

@@ -5,7 +5,7 @@ module Awspec::Helper
         res = @auto_scaling_client.describe_auto_scaling_groups({
                                                                   auto_scaling_group_names: [id]
                                                                 })
-        res[:auto_scaling_groups][0] if res[:auto_scaling_groups].count == 1
+        res[:auto_scaling_groups].first if res[:auto_scaling_groups].count == 1
       end
     end
   end

data/lib/awspec/helper/finder/ebs.rb

@@ -5,11 +5,11 @@ module Awspec::Helper
         res = @ec2_client.describe_volumes({
                                              filters: [{ name: 'volume-id', values: [volume_id] }]
                                            })
-        return res[:volumes][0] if res[:volumes].count == 1
+        return res[:volumes].first if res[:volumes].count == 1
         res = @ec2_client.describe_volumes({
                                              filters: [{ name: 'tag:Name', values: [volume_id] }]
                                            })
-        return res[:volumes][0] if res[:volumes].count == 1
+        return res[:volumes].first if res[:volumes].count == 1
       end
 
       def select_ebs_by_instance_id(id)

data/lib/awspec/helper/finder/ec2.rb

@@ -32,45 +32,45 @@ module Awspec::Helper
         else
           return nil
         end
-        return res[:reservations][0][:instances][0] if res[:reservations].count == 1 && \
-                                                       res[:reservations][0][:instances].count == 1
+        return res[:reservations].first[:instances].first if res[:reservations].count == 1 && \
+                                                             res[:reservations].first[:instances].count == 1
       end
 
       def find_subnet(subnet_id)
         res = @ec2_client.describe_subnets({
                                              filters: [{ name: 'subnet-id', values: [subnet_id] }]
                                            })
-        return res[:subnets][0] if res[:subnets].count == 1
+        return res[:subnets].first if res[:subnets].count == 1
         res = @ec2_client.describe_subnets({
                                              filters: [{ name: 'tag:Name', values: [subnet_id] }]
                                            })
-        return res[:subnets][0] if res[:subnets].count == 1
+        return res[:subnets].first if res[:subnets].count == 1
       end
 
       def find_internet_gateway(gateway_id)
         res = @ec2_client.describe_internet_gateways({
                                                        filters: [{ name: 'internet-gateway-id', values: [gateway_id] }]
                                                      })
-        return res[:internet_gateways][0] if res[:internet_gateways].count == 1
+        return res[:internet_gateways].first if res[:internet_gateways].count == 1
         res = @ec2_client.describe_internet_gateways({
                                                        filters: [{ name: 'tag:Name', values: [gateway_id] }]
                                                      })
-        return res[:internet_gateways][0] if res[:internet_gateways].count == 1
+        return res[:internet_gateways].first if res[:internet_gateways].count == 1
       end
 
       def find_security_group(sg_id)
         res = @ec2_client.describe_security_groups({
                                                      filters: [{ name: 'group-id', values: [sg_id] }]
                                                    })
-        return res[:security_groups][0] if res[:security_groups].count == 1
+        return res[:security_groups].first if res[:security_groups].count == 1
         res = @ec2_client.describe_security_groups({
                                                      filters: [{ name: 'group-name', values: [sg_id] }]
                                                    })
-        return res[:security_groups][0] if res[:security_groups].count == 1
+        return res[:security_groups].first if res[:security_groups].count == 1
         res = @ec2_client.describe_security_groups({
                                                      filters: [{ name: 'tag:Name', values: [sg_id] }]
                                                    })
-        return res[:security_groups][0] if res[:security_groups].count == 1
+        return res[:security_groups].first if res[:security_groups].count == 1
       end
 
       def select_ec2_by_vpc_id(vpc_id)

data/lib/awspec/helper/finder/elb.rb

@@ -5,7 +5,7 @@ module Awspec::Helper
         res = @elb_client.describe_load_balancers({
                                                     load_balancer_names: [id]
                                                   })
-        return res[:load_balancer_descriptions][0] if res[:load_balancer_descriptions].count == 1
+        return res[:load_balancer_descriptions].first if res[:load_balancer_descriptions].count == 1
       rescue
         return nil
       end

data/lib/awspec/helper/finder/iam.rb

@@ -2,37 +2,59 @@ module Awspec::Helper
   module Finder
     module Iam
       def find_iam_user(id)
-        users = []
-        marker = nil
+        selected = []
+        res = @iam_client.list_users
+
         loop do
-          res = @iam_client.list_users(
-            marker: marker
-          )
-          marker = res.marker
-          break if res.users.empty?
-          res.users.each do |user|
-            users.push(user) if user.user_name == id || user.user_id == id
+          selected += res.users.select do |u|
+            u.user_name == id || u.user_id == id || u.arn == id
           end
-          break unless marker
+          (res.next_page? && res = res.next_page) || break
         end
-        return users[0] if users.count == 1
+
+        selected.first if selected.count == 1
       end
 
       def find_iam_group(id)
-        groups = []
-        marker = nil
+        selected = []
+        res = @iam_client.list_groups
+
+        loop do
+          selected += res.groups.select do |g|
+            g.group_name == id || g.group_id == id || g.arn == id
+          end
+          (res.next_page? && res = res.next_page) || break
+        end
+
+        selected.first if selected.count == 1
+      end
+
+      def find_iam_role(id)
+        selected = []
+        res = @iam_client.list_roles
+
         loop do
-          res = @iam_client.list_groups(
-            marker: marker
-          )
-          marker = res.marker
-          break if res.groups.empty?
-          res.groups.each do |group|
-            groups.push(group) if group.group_name == id || group.group_id == id
+          selected += res.roles.select do |r|
+            r.role_name == id || r.role_id == id || r.arn == id
           end
-          break unless marker
+          (res.next_page? && res = res.next_page) || break
         end
-        return groups[0] if groups.count == 1
+
+        selected.first if selected.count == 1
+      end
+
+      def find_iam_policy(id)
+        selected = []
+        res = @iam_client.list_policies
+
+        loop do
+          selected += res.policies.select do |p|
+            p.policy_name == id || p.policy_id == id || p.arn == id
+          end
+          (res.next_page? && res = res.next_page) || break
+        end
+
+        selected.first if selected.count == 1
       end
 
       def select_iam_group_by_user_name(user_name)
@@ -55,6 +77,45 @@ module Awspec::Helper
                                                        })
         res.attached_policies
       end
+
+      def select_iam_policy_by_role_name(role_name)
+        res = @iam_client.list_attached_role_policies({
+                                                        role_name: role_name
+                                                      })
+        res.attached_policies
+      end
+
+      def select_all_attached_policies
+        selected = []
+        res = @iam_client.list_policies
+
+        loop do
+          selected += res.policies.select { |p| p.attachment_count > 0 }
+          (res.next_page? && res = res.next_page) || break
+        end
+
+        selected
+      end
+
+      def select_attached_entities(policy_id)
+        policy = find_iam_policy(policy_id)
+        @iam_client.list_entities_for_policy(policy_arn: policy[:arn])
+      end
+
+      def select_attached_users(policy_id)
+        entities = select_attached_entities(policy_id)
+        entities.policy_users
+      end
+
+      def select_attached_groups(policy_id)
+        entities = select_attached_entities(policy_id)
+        entities.policy_groups
+      end
+
+      def select_attached_roles(policy_id)
+        entities = select_attached_entities(policy_id)
+        entities.policy_roles
+      end
     end
   end
 end

data/lib/awspec/helper/finder/lambda.rb

@@ -2,22 +2,17 @@ module Awspec::Helper
   module Finder
     module Lambda
       def find_lambda(id)
-        functions = []
-        marker = nil
+        selected = []
+        res = @lambda_client.list_functions
+
         loop do
-          res = @lambda_client.list_functions(
-            marker: marker
-          )
-          marker = res.next_marker
-          break if res.functions.empty?
-          res.functions.each do |function|
-            if function.function_name == id || function.function_arn == id
-              functions.push(function)
-            end
+          selected += res.functions.select do |function|
+            function.function_name == id || function.function_arn == id
           end
-          break unless marker
+          (res.next_page? && res = res.next_page) || break
         end
-        return functions[0] if functions.count == 1
+
+        selected.first if selected.count == 1
       end
 
       def select_event_source_by_function_arn(function_arn)

data/lib/awspec/helper/finder/rds.rb

@@ -6,7 +6,7 @@ module Awspec::Helper
         res = @rds_client.describe_db_instances({
                                                   db_instance_identifier: id
                                                 })
-        return res[:db_instances][0] if res[:db_instances].count == 1
+        return res[:db_instances].first if res[:db_instances].count == 1
       end
 
       def select_rds_by_vpc_id(vpc_id)

data/lib/awspec/helper/finder/route53.rb

@@ -2,22 +2,14 @@ module Awspec::Helper
   module Finder
     module Route53
       def find_hosted_zone(id)
-        hosted_zones = {}
-        marker = nil
+        res = @route53_client.list_hosted_zones
         loop do
-          res = @route53_client.list_hosted_zones({
-                                                    marker: marker
-                                                  })
-          marker = res.marker
-          break if res.hosted_zones.empty?
           res.hosted_zones.each do |hosted_zone|
-            hosted_zones[hosted_zone[:name]] = hosted_zones
             if hosted_zone[:name] == id || hosted_zone[:id] == '/hostedzone/' + id || hosted_zone[:id] == id
               return hosted_zone
             end
           end
-
-          break if marker.nil?
+          (res.next_page? && res = res.next_page) || break
         end
       end
     end

data/lib/awspec/helper/finder/security_group.rb

@@ -6,17 +6,17 @@ module Awspec::Helper
                                                      filters: [{ name: 'group-id', values: [id] }]
                                                    })
 
-        return res[:security_groups][0] if res[:security_groups].count == 1
+        return res[:security_groups].first if res[:security_groups].count == 1
         res = @ec2_client.describe_security_groups({
                                                      filters: [{ name: 'group-name', values: [id] }]
                                                    })
 
-        return res[:security_groups][0] if res[:security_groups].count == 1
+        return res[:security_groups].first if res[:security_groups].count == 1
         res = @ec2_client.describe_security_groups({
                                                      filters: [{ name: 'tag:Name', values: [id] }]
                                                    })
 
-        return res[:security_groups][0] if res[:security_groups].count == 1
+        return res[:security_groups].first if res[:security_groups].count == 1
       end
 
       def select_security_group_by_vpc_id(vpc_id)

data/lib/awspec/helper/finder/vpc.rb

@@ -5,33 +5,33 @@ module Awspec::Helper
         res = @ec2_client.describe_vpcs({
                                           filters: [{ name: 'vpc-id', values: [id] }]
                                         })
-        return res[:vpcs][0] if res[:vpcs].count == 1
+        return res[:vpcs].first if res[:vpcs].count == 1
         res = @ec2_client.describe_vpcs({
                                           filters: [{ name: 'tag:Name', values: [id] }]
                                         })
-        return res[:vpcs][0] if res[:vpcs].count == 1
+        return res[:vpcs].first if res[:vpcs].count == 1
       end
 
       def find_route_table(route_table_id)
         res = @ec2_client.describe_route_tables({
                                                   filters: [{ name: 'route-table-id', values: [route_table_id] }]
                                                 })
-        return res[:route_tables][0] if res[:route_tables].count == 1
+        return res[:route_tables].first if res[:route_tables].count == 1
         res = @ec2_client.describe_route_tables({
                                                   filters: [{ name: 'tag:Name', values: [route_table_id] }]
                                                 })
-        return res[:route_tables][0] if res[:route_tables].count == 1
+        return res[:route_tables].first if res[:route_tables].count == 1
       end
 
       def find_network_acl(id)
         res = @ec2_client.describe_network_acls({
                                                   filters: [{ name: 'network-acl-id', values: [id] }]
                                                 })
-        return res[:network_acls][0] if res[:network_acls].count == 1
+        return res[:network_acls].first if res[:network_acls].count == 1
         res = @ec2_client.describe_network_acls({
                                                   filters: [{ name: 'tag:Name', values: [id] }]
                                                 })
-        return res[:network_acls][0] if res[:network_acls].count == 1
+        return res[:network_acls].first if res[:network_acls].count == 1
       end
 
       def select_route_table_by_vpc_id(vpc_id)

data/lib/awspec/helper/type.rb

@@ -4,7 +4,8 @@ module Awspec
       TYPES = %w(
         base ec2 rds rds_db_parameter_group security_group
         vpc s3 route53_hosted_zone auto_scaling_group subnet
-        route_table ebs elb lambda iam_user iam_group
+        route_table ebs elb lambda iam_user iam_group iam_role
+        iam_policy
       )
 
       TYPES.each do |type|

data/lib/awspec/stub/iam_policy.rb

@@ -0,0 +1,43 @@
+Aws.config[:iam] = {
+  stub_responses: {
+    list_policies: {
+      policies: [
+        {
+          attachment_count: 1,
+          arn: 'arn:aws:iam::aws:policy/my-iam-policy',
+          is_attachable: true,
+          policy_id: 'PABCDEFGHI123455689',
+          policy_name: 'my-iam-policy',
+          update_date: Time.new(2015, 1, 2, 10, 00, 00, '+00:00')
+        },
+        {
+          attachment_count: 1,
+          arn: 'arn:aws:iam::aws:policy/AmazonAPIGatewayAdministrator',
+          is_attachable: true,
+          policy_id: 'PABCDEFGHI123455688',
+          policy_name: 'AmazonAPIGatewayAdministrator',
+          update_date: Time.new(2015, 7, 9, 17, 34, 45, '+00:00')
+        },
+        {
+          attachment_count: 1,
+          arn: 'arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforDataPipelineRole',
+          is_attachable: true,
+          policy_id: 'PABCDEFGHI123455687',
+          policy_name: 'AmazonEC2RoleforDataPipelineRole',
+          update_date: Time.new(2015, 3, 19, 19, 21, 14, '+00:00')
+        }
+      ]
+    },
+    list_entities_for_policy: {
+      policy_roles: [
+        { role_name: 'HelloIAmGodRole' }
+      ],
+      policy_users: [
+        { user_name: 'my-iam-user' }
+      ],
+      policy_groups: [
+        { group_name: 'my-iam-group' }
+      ]
+    }
+  }
+}

data/lib/awspec/stub/iam_role.rb

@@ -0,0 +1,23 @@
+Aws.config[:iam] = {
+  stub_responses: {
+    list_roles: {
+      roles: [
+        path: '/',
+        role_name: 'my-iam-role',
+        role_id: 'RABCDEFGHI123455689',
+        arn: 'arn:aws:iam::123456789012:role/my-iam-role',
+        create_date: Time.local(2015)
+      ]
+    },
+    list_attached_role_policies: {
+      attached_policies: [
+        {
+          policy_arn: 'arn:aws:iam::aws:policy/ReadOnlyAccess',
+          policy_name: 'ReadOnlyAccess'
+        }
+      ],
+      is_truncated: false,
+      maker: nil
+    }
+  }
+}

data/lib/awspec/type/iam_policy.rb

@@ -0,0 +1,52 @@
+module Awspec::Type
+  class IamPolicy < Base
+    def initialize(id)
+      super
+      @resource = find_iam_policy(id)
+      @id = @resource[:policy_id] if @resource
+    end
+
+    def attachable?
+      policy.is_attachable
+    end
+
+    def attached_to_user?(user_id = nil)
+      users = select_attached_users(@id)
+      if user_id
+        user = find_iam_user(user_id)
+        return false unless user
+        users.any? do |u|
+          u.user_name == user[:user_name]
+        end
+      else
+        !users.empty?
+      end
+    end
+
+    def attached_to_group?(group_id = nil)
+      groups = select_attached_groups(@id)
+      if group_id
+        group = find_iam_group(group_id)
+        return false unless group
+        groups.any? do |g|
+          g.group_name == group[:group_name]
+        end
+      else
+        !groups.empty?
+      end
+    end
+
+    def attached_to_role?(role_id = nil)
+      roles = select_attached_roles(@id)
+      if role_id
+        role = find_iam_role(role_id)
+        return false unless role
+        roles.any? do |r|
+          r.role_name == role[:role_name]
+        end
+      else
+        !roles.empty?
+      end
+    end
+  end
+end

data/lib/awspec/type/iam_role.rb

@@ -0,0 +1,16 @@
+module Awspec::Type
+  class IamRole < Base
+    def initialize(id)
+      super
+      @resource = find_iam_role(id)
+      @id = @resource[:role_id] if @resource
+    end
+
+    def has_iam_policy?(policy_id)
+      policies = select_iam_policy_by_role_name(@resource[:role_name])
+      policies.find do |policy|
+        policy.policy_arn == policy_id || policy.policy_name == policy_id
+      end
+    end
+  end
+end

data/lib/awspec/version.rb

@@ -1,3 +1,3 @@
 module Awspec
-  VERSION = '0.9.0'
+  VERSION = '0.10.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: awspec
 version: !ruby/object:Gem::Version
-  version: 0.9.0
+  version: 0.10.0
 platform: ruby
 authors:
 - k1LoW
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-09-07 00:00:00.000000000 Z
+date: 2015-09-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -162,6 +162,8 @@ files:
 - lib/awspec/generator/doc/type/ec2.rb
 - lib/awspec/generator/doc/type/elb.rb
 - lib/awspec/generator/doc/type/iam_group.rb
+- lib/awspec/generator/doc/type/iam_policy.rb
+- lib/awspec/generator/doc/type/iam_role.rb
 - lib/awspec/generator/doc/type/iam_user.rb
 - lib/awspec/generator/doc/type/lambda.rb
 - lib/awspec/generator/doc/type/rds.rb
@@ -174,6 +176,7 @@ files:
 - lib/awspec/generator/doc/type/vpc.rb
 - lib/awspec/generator/spec/ec2.rb
 - lib/awspec/generator/spec/elb.rb
+- lib/awspec/generator/spec/iam_policy.rb
 - lib/awspec/generator/spec/rds.rb
 - lib/awspec/generator/spec/route53_hosted_zone.rb
 - lib/awspec/generator/spec/security_group.rb
@@ -208,6 +211,8 @@ files:
 - lib/awspec/stub/ec2.rb
 - lib/awspec/stub/elb.rb
 - lib/awspec/stub/iam_group.rb
+- lib/awspec/stub/iam_policy.rb
+- lib/awspec/stub/iam_role.rb
 - lib/awspec/stub/iam_user.rb
 - lib/awspec/stub/lambda.rb
 - lib/awspec/stub/rds.rb
@@ -225,6 +230,8 @@ files:
 - lib/awspec/type/ec2.rb
 - lib/awspec/type/elb.rb
 - lib/awspec/type/iam_group.rb
+- lib/awspec/type/iam_policy.rb
+- lib/awspec/type/iam_role.rb
 - lib/awspec/type/iam_user.rb
 - lib/awspec/type/lambda.rb
 - lib/awspec/type/rds.rb