awspec 1.19.0 → 1.21.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 104554ac52e531f7d2ddbca1c80dad6f767bdbffad5fe37d389c8a067cfb51d8
-  data.tar.gz: d07bc9d59cad74e8e965c93a5e8921a1705c29ae2560e1a560c441056e7e37a7
+  metadata.gz: e80f68b8b745754eb273e3826b3c577fec784d55459f94bc169787768ab45a6a
+  data.tar.gz: 6fc0e5ee0ec92981dd60d8f1fc140e3354ca1b5e3f04b4367633369060509d96
 SHA512:
-  metadata.gz: 84b19f725a887d11227d951cffbb82c6f22f02154154f2c722bcbfe24cfaeac9a13a7317b8daf0a1160417d28f7723945d9a6d3ee41bff506ebdb73ab87e89b2
-  data.tar.gz: dde35d185574f58977c4327e619b533a342db008d6af9e499b9344e11dc4314a6bea6c2798ac721be38c58c1d5685383257a71d5275f35d1f2848dc5d9e56154
+  metadata.gz: 0ad3f68adf8e7bdc8664d45d9b63d7252cfcb5ac1dafb3d84acb70b537c79bec3fe86e510052890309509f06e1a5ea1dcc6d943f36f411a059785445126629eb
+  data.tar.gz: a27df4bf4b9e4dbf71377d4354e69d5be54831d18839fcbde1e7b77b78a69194eacf46fe886042e43948374b237a455578ca040a5543624d8612b6364e20d119

data/doc/_resource_types/cognito_identity_pool.md

@@ -0,0 +1,7 @@
+### exist
+
+```ruby
+describe cognito_identity_pool('my-cognito-identity-pool') do
+  it { should exist }
+end
+```

data/doc/_resource_types/cognito_user_pool.md

@@ -0,0 +1,7 @@
+### exist
+
+```ruby
+describe cognito_user_pool('my-cognito-user-pool') do
+  it { should exist }
+end
+```

data/doc/_resource_types/msk.md

@@ -0,0 +1,15 @@
+### exist
+
+```ruby
+describe msk('my-msk') do
+  it { should exist }
+end
+```
+
+### should be_active, be_creating, be_updating, be_deleting, be_failed
+
+```ruby
+describe msk('my-msk') do
+  it { should be_active }
+end
+```

data/doc/_resource_types/transit_gateway.md

@@ -0,0 +1,24 @@
+### exist
+
+```ruby
+describe transit_gateway('tgw-1234567890abcdefg') do
+  it { should exist }
+  it { should have_tag('Name').value('my-tgw') }
+  it { should have_attachment('tgw-attach-1234567890abcdefg') }
+  its('options.amazon_side_asn') { should eq 64_516 }
+  its('options.auto_accept_shared_attachments') { should eq 'enable' }
+  its('options.default_route_table_association') { should eq 'enable' }
+  its('options.default_route_table_propagation') { should eq 'enable' }
+  its('options.dns_support') { should eq 'enable' }
+  its('options.vpn_ecmp_support') { should eq 'enable' }
+  its('options.association_default_route_table_id') { should eq 'tgw-rtb-0123456789abcdefg' }
+  its('options.propagation_default_route_table_id') { should eq 'tgw-rtb-0123456789abcdefg' }
+end
+```
+
+```ruby
+describe transit_gateway('my-tgw') do
+  it { should exist }
+  its(:transit_gateway_id) { should eq 'tgw-1234567890abcdefg' }
+end
+```

data/doc/resource_types.md

@@ -19,6 +19,8 @@
 | [codebuild](#codebuild)
 | [codedeploy](#codedeploy)
 | [codedeploy_deployment_group](#codedeploy_deployment_group)
+| [cognito_identity_pool](#cognito_identity_pool)
+| [cognito_user_pool](#cognito_user_pool)
 | [customer_gateway](#customer_gateway)
 | [directconnect_virtual_interface](#directconnect_virtual_interface)
 | [dynamodb_table](#dynamodb_table)
@@ -50,6 +52,7 @@
 | [launch_configuration](#launch_configuration)
 | [launch_template](#launch_template)
 | [mq](#mq)
+| [msk](#msk)
 | [nat_gateway](#nat_gateway)
 | [network_acl](#network_acl)
 | [network_interface](#network_interface)
@@ -71,6 +74,7 @@
 | [sqs](#sqs)
 | [ssm_parameter](#ssm_parameter)
 | [subnet](#subnet)
+| [transit_gateway](#transit_gateway)
 | [vpc](#vpc)
 | [vpn_connection](#vpn_connection)
 | [vpn_gateway](#vpn_gateway)
@@ -198,7 +202,7 @@ describe alb_listener('arn:aws:elasticloadbalancing:ap-northeast-1:1234567890:li
 end
 ```
 
-### its(:listener_arn), its(:load_balancer_arn), its(:port), its(:protocol), its(:certificates), its(:ssl_policy)
+### its(:listener_arn), its(:load_balancer_arn), its(:port), its(:protocol), its(:certificates), its(:ssl_policy), its(:alpn_policy)
 ## <a name="alb_target_group">alb_target_group</a>
 
 AlbTargetGroup resource type.
@@ -739,6 +743,30 @@ end
 ```
 
 ### its(:application_name), its(:deployment_group_id), its(:deployment_group_name), its(:deployment_config_name), its(:on_premises_instance_tag_filters), its(:service_role_arn), its(:target_revision), its(:trigger_configurations), its(:alarm_configuration), its(:deployment_style), its(:load_balancer_info), its(:last_successful_deployment), its(:last_attempted_deployment), its(:ec2_tag_set), its(:on_premises_tag_set), its(:compute_platform), its(:ecs_services)
+## <a name="cognito_identity_pool">cognito_identity_pool</a>
+
+CognitoIdentityPool resource type.
+
+### exist
+
+```ruby
+describe cognito_identity_pool('my-cognito-identity-pool') do
+  it { should exist }
+end
+```
+### its(:identity_pool_id), its(:identity_pool_name)
+## <a name="cognito_user_pool">cognito_user_pool</a>
+
+CognitoUserPool resource type.
+
+### exist
+
+```ruby
+describe cognito_user_pool('my-cognito-user-pool') do
+  it { should exist }
+end
+```
+### its(:id), its(:name), its(:status), its(:last_modified_date), its(:creation_date)
 ## <a name="customer_gateway">customer_gateway</a>
 
 CustomerGateway resource type.
@@ -1275,7 +1303,7 @@ describe efs('my-efs') do
 end
 ```
 
-### its(:owner_id), its(:creation_token), its(:file_system_id), its(:creation_time), its(:life_cycle_state), its(:name), its(:number_of_mount_targets), its(:performance_mode), its(:encrypted), its(:kms_key_id), its(:throughput_mode), its(:provisioned_throughput_in_mibps)
+### its(:owner_id), its(:creation_token), its(:file_system_id), its(:file_system_arn), its(:creation_time), its(:life_cycle_state), its(:name), its(:number_of_mount_targets), its(:performance_mode), its(:encrypted), its(:kms_key_id), its(:throughput_mode), its(:provisioned_throughput_in_mibps)
 ## <a name="elastic_ip">elastic_ip</a>
 
 Elastic IP resource type.
@@ -1396,7 +1424,7 @@ describe elasticache('my-rep-group-001') do
 end
 ```
 
-### its(:cache_cluster_id), its(:configuration_endpoint), its(:client_download_landing_page), its(:cache_node_type), its(:engine), its(:engine_version), its(:cache_cluster_status), its(:num_cache_nodes), its(:preferred_availability_zone), its(:cache_cluster_create_time), its(:preferred_maintenance_window), its(:notification_configuration), its(:cache_security_groups), its(:cache_subnet_group_name), its(:cache_nodes), its(:auto_minor_version_upgrade), its(:replication_group_id), its(:snapshot_retention_limit), its(:snapshot_window), its(:auth_token_enabled), its(:auth_token_last_modified_date), its(:transit_encryption_enabled), its(:at_rest_encryption_enabled)
+### its(:cache_cluster_id), its(:configuration_endpoint), its(:client_download_landing_page), its(:cache_node_type), its(:engine), its(:engine_version), its(:cache_cluster_status), its(:num_cache_nodes), its(:preferred_availability_zone), its(:cache_cluster_create_time), its(:preferred_maintenance_window), its(:notification_configuration), its(:cache_security_groups), its(:cache_subnet_group_name), its(:cache_nodes), its(:auto_minor_version_upgrade), its(:replication_group_id), its(:snapshot_retention_limit), its(:snapshot_window), its(:auth_token_enabled), its(:auth_token_last_modified_date), its(:transit_encryption_enabled), its(:at_rest_encryption_enabled), its(:arn)
 ## <a name="elasticache_cache_parameter_group">elasticache_cache_parameter_group</a>
 
 ElasticacheCacheParameterGroup resource type.
@@ -1620,7 +1648,7 @@ describe emr('my-emr') do
 end
 ```
 
-### its(:id), its(:name), its(:instance_collection_type), its(:log_uri), its(:requested_ami_version), its(:running_ami_version), its(:release_label), its(:auto_terminate), its(:termination_protected), its(:visible_to_all_users), its(:service_role), its(:normalized_instance_hours), its(:master_public_dns_name), its(:configurations), its(:security_configuration), its(:auto_scaling_role), its(:scale_down_behavior), its(:custom_ami_id), its(:ebs_root_volume_size), its(:repo_upgrade_on_boot), its(:cluster_arn), its(:outpost_arn), its(:step_concurrency_level)
+### its(:id), its(:name), its(:instance_collection_type), its(:log_uri), its(:log_encryption_kms_key_id), its(:requested_ami_version), its(:running_ami_version), its(:release_label), its(:auto_terminate), its(:termination_protected), its(:visible_to_all_users), its(:service_role), its(:normalized_instance_hours), its(:master_public_dns_name), its(:configurations), its(:security_configuration), its(:auto_scaling_role), its(:scale_down_behavior), its(:custom_ami_id), its(:ebs_root_volume_size), its(:repo_upgrade_on_boot), its(:cluster_arn), its(:outpost_arn), its(:step_concurrency_level)
 ## <a name="firehose">firehose</a>
 
 Firehose resource type.
@@ -2182,7 +2210,7 @@ end
 
 This matcher does not support Amazon S3 event sources ([see SDK doc](http://docs.aws.amazon.com/sdkforruby/api/Aws/Lambda/Client.html#list_event_source_mappings-instance_method)).
 
-### its(:function_name), its(:function_arn), its(:runtime), its(:role), its(:handler), its(:code_size), its(:description), its(:timeout), its(:memory_size), its(:last_modified), its(:code_sha_256), its(:version), its(:vpc_config), its(:dead_letter_config), its(:kms_key_arn), its(:master_arn), its(:revision_id), its(:layers), its(:state), its(:state_reason), its(:state_reason_code), its(:last_update_status), its(:last_update_status_reason), its(:last_update_status_reason_code)
+### its(:function_name), its(:function_arn), its(:runtime), its(:role), its(:handler), its(:code_size), its(:description), its(:timeout), its(:memory_size), its(:last_modified), its(:code_sha_256), its(:version), its(:vpc_config), its(:dead_letter_config), its(:kms_key_arn), its(:master_arn), its(:revision_id), its(:layers), its(:state), its(:state_reason), its(:state_reason_code), its(:last_update_status), its(:last_update_status_reason), its(:last_update_status_reason_code), its(:file_system_configs)
 ## <a name="launch_configuration">launch_configuration</a>
 
 LaunchConfiguration resource type.
@@ -2206,7 +2234,7 @@ describe launch_configuration('my-lc') do
 end
 ```
 
-### its(:launch_configuration_name), its(:launch_configuration_arn), its(:image_id), its(:key_name), its(:security_groups), its(:classic_link_vpc_id), its(:classic_link_vpc_security_groups), its(:user_data), its(:instance_type), its(:kernel_id), its(:ramdisk_id), its(:spot_price), its(:iam_instance_profile), its(:created_time), its(:ebs_optimized), its(:associate_public_ip_address), its(:placement_tenancy)
+### its(:launch_configuration_name), its(:launch_configuration_arn), its(:image_id), its(:key_name), its(:security_groups), its(:classic_link_vpc_id), its(:classic_link_vpc_security_groups), its(:user_data), its(:instance_type), its(:kernel_id), its(:ramdisk_id), its(:spot_price), its(:iam_instance_profile), its(:created_time), its(:ebs_optimized), its(:associate_public_ip_address), its(:placement_tenancy), its(:metadata_options)
 ## <a name="launch_template">launch_template</a>
 
 LaunchTemplate resource type.
@@ -2304,7 +2332,31 @@ describe mq('my-mq') do
 end
 ```
 
-### its(:vpc_id), its(:auto_minor_version_upgrade), its(:broker_arn), its(:broker_id), its(:broker_name), its(:broker_state), its(:created), its(:deployment_mode), its(:encryption_options), its(:engine_type), its(:engine_version), its(:host_instance_type), its(:pending_engine_version), its(:pending_host_instance_type), its(:pending_security_groups), its(:publicly_accessible), its(:security_groups), its(:storage_type), its(:subnet_ids)
+### its(:vpc_id), its(:authentication_strategy), its(:auto_minor_version_upgrade), its(:broker_arn), its(:broker_id), its(:broker_name), its(:broker_state), its(:created), its(:deployment_mode), its(:encryption_options), its(:engine_type), its(:engine_version), its(:host_instance_type), its(:ldap_server_metadata), its(:pending_authentication_strategy), its(:pending_engine_version), its(:pending_host_instance_type), its(:pending_ldap_server_metadata), its(:pending_security_groups), its(:publicly_accessible), its(:security_groups), its(:storage_type), its(:subnet_ids)
+## <a name="msk">msk</a>
+
+Msk resource type.
+
+### exist
+
+```ruby
+describe msk('my-msk') do
+  it { should exist }
+end
+```
+
+
+### be_active
+
+### be_creating
+
+### be_deleting
+
+### be_failed
+
+### be_updating
+
+### its(:active_operation_arn), its(:client_authentication), its(:cluster_arn), its(:cluster_name), its(:creation_time), its(:current_version), its(:enhanced_monitoring), its(:number_of_broker_nodes), its(:state), its(:zookeeper_connect_string)
 ## <a name="nat_gateway">nat_gateway</a>
 
 NatGateway resource type.
@@ -2591,7 +2643,7 @@ describe nlb_listener('arn:aws:elasticloadbalancing:ap-northeast-1:1234567890:li
 end
 ```
 
-### its(:listener_arn), its(:load_balancer_arn), its(:port), its(:protocol), its(:certificates), its(:ssl_policy)
+### its(:listener_arn), its(:load_balancer_arn), its(:port), its(:protocol), its(:certificates), its(:ssl_policy), its(:alpn_policy)
 ## <a name="nlb_target_group">nlb_target_group</a>
 
 NlbTargetGroup resource type.
@@ -3180,7 +3232,7 @@ describe secretsmanager('my-secret') do
 end
 ```
 
-### its(:arn), its(:name), its(:description), its(:kms_key_id), its(:rotation_enabled), its(:rotation_lambda_arn), its(:last_rotated_date), its(:last_changed_date), its(:last_accessed_date), its(:deleted_date), its(:owning_service)
+### its(:arn), its(:name), its(:description), its(:kms_key_id), its(:rotation_enabled), its(:rotation_lambda_arn), its(:last_rotated_date), its(:last_changed_date), its(:last_accessed_date), its(:deleted_date), its(:owning_service), its(:created_date)
 ## <a name="security_group">security_group</a>
 
 SecurityGroup resource type.
@@ -3200,6 +3252,10 @@ end
 
 ### be_outbound_opened_only
 
+### have_inbound_rule
+
+### have_outbound_rule
+
 ### have_tag
 
 ```ruby
@@ -3452,6 +3508,40 @@ describe subnet('my-subnet') do
 end
 ```
 
+## <a name="transit_gateway">transit_gateway</a>
+
+TransitGateway resource type.
+
+### exist
+
+```ruby
+describe transit_gateway('tgw-1234567890abcdefg') do
+  it { should exist }
+  it { should have_tag('Name').value('my-tgw') }
+  it { should have_attachment('tgw-attach-1234567890abcdefg') }
+  its('options.amazon_side_asn') { should eq 64_516 }
+  its('options.auto_accept_shared_attachments') { should eq 'enable' }
+  its('options.default_route_table_association') { should eq 'enable' }
+  its('options.default_route_table_propagation') { should eq 'enable' }
+  its('options.dns_support') { should eq 'enable' }
+  its('options.vpn_ecmp_support') { should eq 'enable' }
+  its('options.association_default_route_table_id') { should eq 'tgw-rtb-0123456789abcdefg' }
+  its('options.propagation_default_route_table_id') { should eq 'tgw-rtb-0123456789abcdefg' }
+end
+```
+
+```ruby
+describe transit_gateway('my-tgw') do
+  it { should exist }
+  its(:transit_gateway_id) { should eq 'tgw-1234567890abcdefg' }
+end
+```
+
+### have_attachment
+
+### have_tag
+
+### its(:transit_gateway_id), its(:transit_gateway_arn), its(:state), its(:owner_id), its(:description), its(:creation_time)
 ## <a name="vpc">vpc</a>
 
 VPC resource type.

data/lib/awspec/generator/doc/type/cognito_identity_pool.rb

@@ -0,0 +1,17 @@
+module Awspec::Generator
+  module Doc
+    module Type
+      class CognitoIdentityPool < Base
+        def initialize
+          super
+          @type_name = 'CognitoIdentityPool'
+          @type = Awspec::Type::CognitoIdentityPool.new('my-cognito-identity-pool')
+          @ret = @type.resource_via_client
+          @matchers = []
+          @ignore_matchers = []
+          @describes = []
+        end
+      end
+    end
+  end
+end

data/lib/awspec/generator/doc/type/cognito_user_pool.rb

@@ -0,0 +1,17 @@
+module Awspec::Generator
+  module Doc
+    module Type
+      class CognitoUserPool < Base
+        def initialize
+          super
+          @type_name = 'CognitoUserPool'
+          @type = Awspec::Type::CognitoUserPool.new('my-cognito-user-pool')
+          @ret = @type.resource_via_client
+          @matchers = []
+          @ignore_matchers = []
+          @describes = []
+        end
+      end
+    end
+  end
+end

data/lib/awspec/generator/doc/type/msk.rb

@@ -0,0 +1,17 @@
+module Awspec::Generator
+  module Doc
+    module Type
+      class Msk < Base
+        def initialize
+          super
+          @type_name = 'Msk'
+          @type = Awspec::Type::Msk.new('my-msk')
+          @ret = @type.resource_via_client
+          @matchers = []
+          @ignore_matchers = []
+          @describes = []
+        end
+      end
+    end
+  end
+end

data/lib/awspec/generator/doc/type/transit_gateway.rb

@@ -0,0 +1,17 @@
+module Awspec::Generator
+  module Doc
+    module Type
+      class TransitGateway < Base
+        def initialize
+          super
+          @type_name = 'TransitGateway'
+          @type = Awspec::Type::TransitGateway.new('my-transit-gateway')
+          @ret = @type.resource_via_client
+          @matchers = []
+          @ignore_matchers = []
+          @describes = []
+        end
+      end
+    end
+  end
+end

data/lib/awspec/helper/client_wrap.rb

@@ -2,7 +2,7 @@ require 'awspec/config'
 
 module Awspec::Helper
   class ClientWrap
-    attr_reader :client, :backoff, :iteration, :backoff_limit, :symbol
+    attr_reader :client, :backoff, :iteration, :backoff_limit, :symbol1, :symbol2
     def initialize(real_client = nil)
       raise ArgumentError, 'Client can not be nil' if real_client.nil?
       config = Awspec::Config.instance
@@ -14,7 +14,8 @@ module Awspec::Helper
       @backoff_limit = config[:client_backoff_limit]
       # build the symbol we'll use to compare to any errors caught in method_missing
       # below.
-      @symbol = real_client.class.to_s.split('::').shift(2).push('Errors', 'RequestLimitExceeded').join('::').to_sym
+      @symbol1 = real_client.class.to_s.split('::').shift(2).push('Errors', 'RequestLimitExceeded').join('::').to_sym
+      @symbol2 = real_client.class.to_s.split('::').shift(2).push('Errors', 'Throttling').join('::').to_sym
     end
 
     protected
@@ -28,7 +29,7 @@ module Awspec::Helper
       begin
         results = client.send(m, *args, &block)
       rescue Exception => e # rubocop:disable Lint/RescueException
-        raise unless e.class.to_s == symbol.to_s && backoff < backoff_limit
+        raise unless (e.class.to_s == symbol1.to_s || e.class.to_s == symbol2.to_s) && backoff < backoff_limit
 
         @backoff = backoff + (iteration * iteration * 0.5)
         @iteration += 1

data/lib/awspec/helper/finder.rb

@@ -47,6 +47,9 @@ require 'awspec/helper/finder/redshift'
 require 'awspec/helper/finder/codedeploy'
 require 'awspec/helper/finder/mq'
 require 'awspec/helper/finder/secretsmanager'
+require 'awspec/helper/finder/cognito_user_pool'
+require 'awspec/helper/finder/msk'
+require 'awspec/helper/finder/cognito_identity_pool'
 
 require 'awspec/helper/finder/account_attributes'
 
@@ -103,6 +106,9 @@ module Awspec::Helper
     include Awspec::Helper::Finder::Codedeploy
     include Awspec::Helper::Finder::Mq
     include Awspec::Helper::Finder::Secretsmanager
+    include Awspec::Helper::Finder::CognitoUserPool
+    include Awspec::Helper::Finder::Msk
+    include Awspec::Helper::Finder::CognitoIdentityPool
 
     CLIENTS = {
       ec2_client: Aws::EC2::Client,
@@ -147,7 +153,10 @@ module Awspec::Helper
       redshift_client: Aws::Redshift::Client,
       codedeploy_client: Aws::CodeDeploy::Client,
       mq_client: Aws::MQ::Client,
-      secretsmanager_client: Aws::SecretsManager::Client
+      secretsmanager_client: Aws::SecretsManager::Client,
+      msk_client: Aws::Kafka::Client,
+      cognito_identity_client: Aws::CognitoIdentity::Client,
+      cognito_identity_provider_client: Aws::CognitoIdentityProvider::Client
     }
 
     CLIENT_OPTIONS = {

data/lib/awspec/helper/finder/cognito_identity_pool.rb

@@ -0,0 +1,15 @@
+module Awspec::Helper
+  module Finder
+    module CognitoIdentityPool
+      def find_identitypool_by_name(pool_name)
+        cognito_identity_client.list_identity_pools(max_results: 60).each do |response|
+          pools = response.identity_pools
+          pools.each do |pool|
+            return pool if pool.identity_pool_name == pool_name
+          end
+        end
+        nil
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/cognito_user_pool.rb

@@ -0,0 +1,15 @@
+module Awspec::Helper
+  module Finder
+    module CognitoUserPool
+      def find_userpool_by_name(pool_name)
+        cognito_identity_provider_client.list_user_pools(max_results: 60).each do |response|
+          pools = response.user_pools
+          pools.each do |pool|
+            return pool if pool.name == pool_name
+          end
+        end
+        nil
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/ec2.rb

@@ -43,7 +43,7 @@ module Awspec::Helper
       end
 
       # find_internet_gateway find_vpn_gateway find_customer_gateway
-      gateway_types = %w(internet vpn customer)
+      gateway_types = %w(internet vpn customer transit)
       gateway_types.each do |type|
         define_method 'find_' + type + '_gateway' do |*args|
           gateway_id = args.first
@@ -198,6 +198,15 @@ module Awspec::Helper
                                                              launch_template_name: id
                                                            })
       end
+
+      def find_tgw_attachments_by_tgw_id(tgw_id)
+        res = ec2_client.describe_transit_gateway_attachments({
+                                                                filters: [
+                                                                  { name: 'transit-gateway-id', values: [tgw_id] }
+                                                                ]
+                                                              })
+        res.transit_gateway_attachments
+      end
     end
   end
 end

data/lib/awspec/helper/finder/ecr.rb

@@ -5,6 +5,10 @@ module Awspec::Helper
         res = ecr_client.describe_repositories(repository_names: [repository_name])
         res.repositories.first if res.repositories.count == 1
       end
+
+      def get_policy_text(repository_name)
+        res = ecr_client.get_repository_policy(repository_name: repository_name)[:policy_text]
+      end
     end
   end
 end

data/lib/awspec/helper/finder/msk.rb

@@ -0,0 +1,15 @@
+module Awspec::Helper
+  module Finder
+    module Msk
+      def find_msk_cluster_by_name(cluster_name)
+        res = msk_client.list_clusters(
+          {
+            cluster_name_filter: cluster_name,
+            max_results: 1
+          }
+        )
+        res.cluster_info_list[0]
+      end
+    end
+  end
+end

data/lib/awspec/helper/type.rb

@@ -20,7 +20,7 @@ module Awspec
         elastictranscoder_pipeline waf_web_acl wafregional_web_acl customer_gateway vpn_gateway vpn_connection
         internet_gateway acm cloudwatch_logs dynamodb_table eip sqs ssm_parameter cloudformation_stack
         codebuild sns_topic redshift redshift_cluster_parameter_group codedeploy codedeploy_deployment_group
-        secretsmanager
+        secretsmanager msk transit_gateway cognito_identity_pool cognito_user_pool
       )
 
       ACCOUNT_ATTRIBUTES = %w(

data/lib/awspec/stub/cognito_identity_pool.rb

@@ -0,0 +1,16 @@
+Aws.config[:cognitoidentity] = {
+  stub_responses: {
+    list_identity_pools: {
+      identity_pools: [
+        {
+          identity_pool_id: 'us-east-1:adsfkjaekljnfg234',
+          identity_pool_name: 'my-cognito-identity-pool'
+        },
+        {
+          identity_pool_id: 'us-east-1:gfdksjg87sfna943knbj',
+          identity_pool_name: 'My_Identity_Pool'
+        }
+      ], next_token: 'akvjnkjndgoierhteuh7sfdnre9erglkwnroijsdfinewr=='
+    }
+  }
+}

data/lib/awspec/stub/cognito_user_pool.rb

@@ -0,0 +1,47 @@
+Aws.config[:cognitoidentityprovider] = {
+  stub_responses: {
+    list_user_pools: {
+      user_pools: [
+        {
+          id: 'us-east-1_6adfkj4ju',
+          name: 'my-cognito-user-pool',
+          lambda_config: {
+            pre_sign_up: nil,
+            custom_message: nil,
+            post_confirmation: nil,
+            pre_authentication: nil,
+            post_authentication: nil,
+            define_auth_challenge: nil,
+            create_auth_challenge: nil,
+            verify_auth_challenge_response: nil,
+            pre_token_generation: nil,
+            user_migration: nil
+          },
+          status: nil,
+          last_modified_date: Time.new(2016, 5, 5, 5, 00, 00, '+00:00'),
+          creation_date: Time.new(2015, 1, 2, 10, 00, 00, '+00:00')
+        },
+        {
+          id: 'us-east-1_12345adsf',
+          name: 'test-pool',
+          lambda_config: {
+            pre_sign_up: nil,
+            custom_message: nil,
+            post_confirmation: nil,
+            pre_authentication: nil,
+            post_authentication: nil,
+            define_auth_challenge: nil,
+            create_auth_challenge: nil,
+            verify_auth_challenge_response: nil,
+            pre_token_generation: nil,
+            user_migration: nil
+          },
+          status: nil,
+          last_modified_date: Time.new(2019, 1, 2, 10, 00, 00, '+00:00'),
+          creation_date: Time.new(2018, 1, 2, 10, 00, 00, '+00:00')
+        }
+      ],
+      next_token: 'aoeijfasdnvakldsjfgoai'
+    }
+  }
+}

data/lib/awspec/stub/msk.rb

@@ -0,0 +1,84 @@
+Aws.config[:kafka] = {
+  stub_responses: {
+    list_clusters: {
+      cluster_info_list: [
+        {
+          active_operation_arn: nil,
+          broker_node_group_info: {
+            broker_az_distribution: 'DEFAULT',
+            client_subnets: [
+              'subnet-12345678909876543',
+              'subnet-90876543212345678'
+            ],
+            instance_type: 'kafka.t3.small',
+            security_groups: [
+              'sg-65432123456789098'
+            ],
+            storage_info: {
+              ebs_storage_info: {
+                volume_size: 1
+              }
+            }
+          },
+          client_authentication: nil,
+          cluster_arn: 'arn:aws:kafka:us-east-1:123456789098:cluster/did-inventory/\
+          a12345b6-123c-1de2-1234-f1g23h45i678-9',
+          cluster_name: 'my-msk',
+          creation_time: Time.new(2019, 1, 2, 10, 10, 00, '+00:00'),
+          current_broker_software_info: {
+            configuration_arn: nil,
+            configuration_revision: nil,
+            kafka_version: '2.2.1'
+          },
+          logging_info: {
+            broker_logs: {
+              cloud_watch_logs: {
+                enabled: false,
+                log_group: nil
+              },
+              firehose: {
+                delivery_stream: nil,
+                enabled: false
+              },
+              s3: {
+                bucket: nil,
+                enabled: false,
+                prefix: nil
+              }
+            }
+          },
+          current_version: 'A1BCDEFGHI23JK',
+          encryption_info: {
+            encryption_at_rest: {
+              data_volume_kms_key_id: 'arn:aws:kms:us-east-1:123456789098:key/ab1c2345-6789-01d2-3ee4-f56gh7i890jk'
+            },
+            encryption_in_transit: {
+              client_broker: 'TLS_PLAINTEXT',
+              in_cluster: true
+            }
+          },
+          enhanced_monitoring: 'DEFAULT',
+          number_of_broker_nodes: 2,
+          open_monitoring: {
+            prometheus: {
+              jmx_exporter: {
+                enabled_in_broker: false
+              },
+              node_exporter: {
+                enabled_in_broker: false
+              }
+            }
+          },
+          state: 'ACTIVE',
+          tags: {
+            'Name' => 'my-msk'
+          },
+          zookeeper_connect_string: 'z-3.my-msk.1a23bc.d4.kafka.us-east-1.amazonaws.com:\
+          1234,z-2.my-msk.1a23bc.d4.kafka.us-east-1.amazonaws.com:1234,z-1.my-msk.\
+          1a23bc.d4.kafka.us-east-1.amazonaws.com:1234'
+        }
+      ],
+      next_token: nil
+    }
+  }
+}

data/lib/awspec/stub/transit_gateway.rb

@@ -0,0 +1,52 @@
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_transit_gateways: {
+      transit_gateways: [
+        {
+          transit_gateway_id: 'tgw-1234567890abcdefg',
+          transit_gateway_arn: 'arn:aws:ec2:us-east-2:123456789012:transit-gateway/tgw-1234567890abcdefg',
+          owner_id: '123456789012',
+          options: {
+            amazon_side_asn: 64_516,
+            auto_accept_shared_attachments: 'enable',
+            default_route_table_association: 'enable',
+            default_route_table_propagation: 'enable',
+            dns_support: 'enable',
+            vpn_ecmp_support: 'enable',
+            association_default_route_table_id: 'tgw-rtb-0123456789abcdefg',
+            propagation_default_route_table_id: 'tgw-rtb-0123456789abcdefg'
+          },
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-transit-gateway'
+            }
+          ]
+        }
+      ]
+    },
+    describe_transit_gateway_attachments: {
+      transit_gateway_attachments: [
+        {
+          transit_gateway_attachment_id: 'tgw-attach-1234567890abcdefg',
+          transit_gateway_id: 'tgw-1234567890abcdefg',
+          transit_gateway_owner_id: '123456789012',
+          resource_owner_id: '123456789012',
+          resource_type: 'vpc',
+          resource_id: 'vpc-12345678',
+          state: 'available',
+          association: {
+            transit_gateway_route_table_id: 'tgw-rtb-0123456789abcdefg',
+            state: 'associated'
+          },
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-transit-gateway-attachment'
+            }
+          ]
+        }
+      ]
+    }
+  }
+}

data/lib/awspec/type/cognito_identity_pool.rb

@@ -0,0 +1,11 @@
+module Awspec::Type
+  class CognitoIdentityPool < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_identitypool_by_name(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.identity_pool_id if resource_via_client
+    end
+  end
+end

data/lib/awspec/type/cognito_user_pool.rb

@@ -0,0 +1,11 @@
+module Awspec::Type
+  class CognitoUserPool < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_userpool_by_name(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.id if resource_via_client
+    end
+  end
+end

data/lib/awspec/type/ecr_repository.rb

@@ -14,5 +14,9 @@ module Awspec::Type
     def id
       @id ||= resource_via_client.repository_name if resource_via_client
     end
+
+    def policy_text
+      @policy_text ||= get_policy_text(@display_name)
+    end
   end
 end

data/lib/awspec/type/msk.rb

@@ -0,0 +1,27 @@
+module Awspec::Type
+  class Msk < ResourceBase
+    def initialize(name)
+      super
+      @desplay_name = name
+    end
+
+    def resource_via_client
+      @resource_via_client ||= find_msk_cluster_by_name(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.cluster_arn if resource_via_client
+    end
+
+    STATES = %w(
+      active creating updating
+      deleting failed
+    )
+
+    STATES.each do |state|
+      define_method state + '?' do
+        resource_via_client.state == state.upcase
+      end
+    end
+  end
+end

data/lib/awspec/type/security_group.rb

@@ -1,4 +1,5 @@
 module Awspec::Type
+  # rubocop:disable Metrics/ClassLength
   class SecurityGroup < ResourceBase
     aws_resource Aws::EC2::SecurityGroup
     tags_allowed
@@ -75,12 +76,24 @@ module Awspec::Type
     end
     alias_method :outbound_permissions_count, :ip_permissions_egress_count
 
+    def has_inbound_rule?(rule)
+      resource_via_client.ip_permissions.find do |permission|
+        sg_rule_match?(permission, rule)
+      end
+    end
+
     def inbound_rule_count
       resource_via_client.ip_permissions.reduce(0) do |sum, permission|
         sum += permission.ip_ranges.count + permission.user_id_group_pairs.count
       end
     end
 
+    def has_outbound_rule?(rule)
+      resource_via_client.ip_permissions_egress.find do |permission|
+        sg_rule_match?(permission, rule)
+      end
+    end
+
     def outbound_rule_count
       resource_via_client.ip_permissions_egress.reduce(0) do |sum, permission|
         sum += permission.ip_ranges.count + permission.user_id_group_pairs.count
@@ -144,5 +157,36 @@ module Awspec::Type
         port.between?(from_port, to_port)
       end
     end
+
+    def sg_rule_match?(permission, rule)
+      rule[:ip_protocol] = '-1' if rule[:ip_protocol] == 'all'
+      return false unless permission.ip_protocol == rule[:ip_protocol]
+      return false unless permission.ip_protocol == '-1' || permission.from_port == rule[:from_port]
+      return false unless permission.ip_protocol == '-1' || permission.to_port == rule[:to_port]
+
+      if rule[:ip_range]
+        return false unless permission.ip_ranges.find do |ip_range|
+          ip_range.cidr_ip == rule[:ip_range]
+        end
+      elsif rule[:group_pair]
+        return false unless permission.user_id_group_pairs.find do |pair|
+          group_pair_match?(pair, rule[:group_pair])
+        end
+      end
+      true
+    end
+
+    def group_pair_match?(actual_pair, rule_pair)
+      return false unless actual_pair.group_id == rule_pair[:group_id] || rule_pair[:group_id].nil?
+      return false unless actual_pair.group_name == rule_pair[:group_name] || rule_pair[:group_name].nil?
+      return false unless actual_pair.user_id == rule_pair[:user_id] || rule_pair[:user_id].nil?
+      return false unless actual_pair.vpc_id == rule_pair[:vpc_id] || rule_pair[:vpc_id].nil?
+      return false unless
+        actual_pair.vpc_peering_connection_id == rule_pair[:vpc_peering_connection_id] ||
+        rule_pair[:vpc_peering_connection_id].nil?
+      return false unless actual_pair.peering_status == rule_pair[:peering_status] || rule_pair[:peering_status].nil?
+      true
+    end
   end
+  # rubocop:enable Metrics/ClassLength
 end

data/lib/awspec/type/transit_gateway.rb

@@ -0,0 +1,24 @@
+module Awspec::Type
+  class TransitGateway < ResourceBase
+    aws_resource Aws::EC2::Types::TransitGateway
+    tags_allowed
+
+    def resource_via_client
+      @resource_via_client ||= find_transit_gateway(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.transit_gateway_id if resource_via_client
+    end
+
+    def options
+      resource_via_client.options
+    end
+
+    def has_attachment?(att_id)
+      atts = find_tgw_attachments_by_tgw_id(@id)
+      ret = atts.find_all { |att| att.transit_gateway_attachment_id == att_id }
+      ret.any?
+    end
+  end
+end

data/lib/awspec/version.rb

@@ -1,3 +1,3 @@
 module Awspec
-  VERSION = '1.19.0'
+  VERSION = '1.21.1'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: awspec
 version: !ruby/object:Gem::Version
-  version: 1.19.0
+  version: 1.21.1
 platform: ruby
 authors:
 - k1LoW
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-05-13 00:00:00.000000000 Z
+date: 2020-08-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk
@@ -251,6 +251,8 @@ files:
 - doc/_resource_types/codebuild.md
 - doc/_resource_types/codedeploy.md
 - doc/_resource_types/codedeploy_deployment_group.md
+- doc/_resource_types/cognito_identity_pool.md
+- doc/_resource_types/cognito_user_pool.md
 - doc/_resource_types/customer_gateway.md
 - doc/_resource_types/directconnect_virtual_interface.md
 - doc/_resource_types/dynamodb_table.md
@@ -283,6 +285,7 @@ files:
 - doc/_resource_types/launch_configuration.md
 - doc/_resource_types/launch_template.md
 - doc/_resource_types/mq.md
+- doc/_resource_types/msk.md
 - doc/_resource_types/nat_gateway.md
 - doc/_resource_types/network_acl.md
 - doc/_resource_types/network_interface.md
@@ -306,6 +309,7 @@ files:
 - doc/_resource_types/sqs.md
 - doc/_resource_types/ssm_parameter.md
 - doc/_resource_types/subnet.md
+- doc/_resource_types/transit_gateway.md
 - doc/_resource_types/vpc.md
 - doc/_resource_types/vpn_connection.md
 - doc/_resource_types/vpn_gateway.md
@@ -349,6 +353,8 @@ files:
 - lib/awspec/generator/doc/type/codebuild.rb
 - lib/awspec/generator/doc/type/codedeploy.rb
 - lib/awspec/generator/doc/type/codedeploy_deployment_group.rb
+- lib/awspec/generator/doc/type/cognito_identity_pool.rb
+- lib/awspec/generator/doc/type/cognito_user_pool.rb
 - lib/awspec/generator/doc/type/customer_gateway.rb
 - lib/awspec/generator/doc/type/directconnect_virtual_interface.rb
 - lib/awspec/generator/doc/type/dynamodb_table.rb
@@ -382,6 +388,7 @@ files:
 - lib/awspec/generator/doc/type/launch_configuration.rb
 - lib/awspec/generator/doc/type/launch_template.rb
 - lib/awspec/generator/doc/type/mq.rb
+- lib/awspec/generator/doc/type/msk.rb
 - lib/awspec/generator/doc/type/nat_gateway.rb
 - lib/awspec/generator/doc/type/network_acl.rb
 - lib/awspec/generator/doc/type/network_interface.rb
@@ -405,6 +412,7 @@ files:
 - lib/awspec/generator/doc/type/sqs.rb
 - lib/awspec/generator/doc/type/ssm_parameter.rb
 - lib/awspec/generator/doc/type/subnet.rb
+- lib/awspec/generator/doc/type/transit_gateway.rb
 - lib/awspec/generator/doc/type/vpc.rb
 - lib/awspec/generator/doc/type/vpn_connection.rb
 - lib/awspec/generator/doc/type/vpn_gateway.rb
@@ -468,6 +476,8 @@ files:
 - lib/awspec/helper/finder/cloudwatch_logs.rb
 - lib/awspec/helper/finder/codebuild.rb
 - lib/awspec/helper/finder/codedeploy.rb
+- lib/awspec/helper/finder/cognito_identity_pool.rb
+- lib/awspec/helper/finder/cognito_user_pool.rb
 - lib/awspec/helper/finder/directconnect.rb
 - lib/awspec/helper/finder/dynamodb.rb
 - lib/awspec/helper/finder/ebs.rb
@@ -487,6 +497,7 @@ files:
 - lib/awspec/helper/finder/kms.rb
 - lib/awspec/helper/finder/lambda.rb
 - lib/awspec/helper/finder/mq.rb
+- lib/awspec/helper/finder/msk.rb
 - lib/awspec/helper/finder/nlb.rb
 - lib/awspec/helper/finder/rds.rb
 - lib/awspec/helper/finder/redshift.rb
@@ -568,6 +579,8 @@ files:
 - lib/awspec/stub/codebuild.rb
 - lib/awspec/stub/codedeploy.rb
 - lib/awspec/stub/codedeploy_deployment_group.rb
+- lib/awspec/stub/cognito_identity_pool.rb
+- lib/awspec/stub/cognito_user_pool.rb
 - lib/awspec/stub/customer_gateway.rb
 - lib/awspec/stub/directconnect_virtual_interface.rb
 - lib/awspec/stub/duplicated_resource_type.rb
@@ -602,6 +615,7 @@ files:
 - lib/awspec/stub/launch_configuration.rb
 - lib/awspec/stub/launch_template.rb
 - lib/awspec/stub/mq.rb
+- lib/awspec/stub/msk.rb
 - lib/awspec/stub/nat_gateway.rb
 - lib/awspec/stub/network_acl.rb
 - lib/awspec/stub/network_interface.rb
@@ -623,6 +637,7 @@ files:
 - lib/awspec/stub/sqs.rb
 - lib/awspec/stub/ssm_parameter.rb
 - lib/awspec/stub/subnet.rb
+- lib/awspec/stub/transit_gateway.rb
 - lib/awspec/stub/vpc.rb
 - lib/awspec/stub/vpn_connection.rb
 - lib/awspec/stub/vpn_gateway.rb
@@ -652,6 +667,8 @@ files:
 - lib/awspec/type/codebuild.rb
 - lib/awspec/type/codedeploy.rb
 - lib/awspec/type/codedeploy_deployment_group.rb
+- lib/awspec/type/cognito_identity_pool.rb
+- lib/awspec/type/cognito_user_pool.rb
 - lib/awspec/type/customer_gateway.rb
 - lib/awspec/type/directconnect_virtual_interface.rb
 - lib/awspec/type/dynamodb_table.rb
@@ -685,6 +702,7 @@ files:
 - lib/awspec/type/launch_configuration.rb
 - lib/awspec/type/launch_template.rb
 - lib/awspec/type/mq.rb
+- lib/awspec/type/msk.rb
 - lib/awspec/type/nat_gateway.rb
 - lib/awspec/type/network_acl.rb
 - lib/awspec/type/network_interface.rb
@@ -709,6 +727,7 @@ files:
 - lib/awspec/type/sqs.rb
 - lib/awspec/type/ssm_parameter.rb
 - lib/awspec/type/subnet.rb
+- lib/awspec/type/transit_gateway.rb
 - lib/awspec/type/vpc.rb
 - lib/awspec/type/vpn_connection.rb
 - lib/awspec/type/vpn_gateway.rb