awspec 1.33.0 → 1.35.0

data/lib/awspec/generator/spec/iam_group.rb

@@ -17,7 +17,7 @@ module Awspec::Generator
             document = JSON.generate(JSON.parse(URI.decode_www_form_component(res.policy_document)))
             "it { should have_inline_policy('#{policy_name}').policy_document('#{document}') }"
           end
-          content = ERB.new(iam_group_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(iam_group_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/iam_policy.rb

@@ -8,7 +8,7 @@ module Awspec::Generator
         policies = select_all_attached_policies
         raise 'Not Found policy' if policies.empty?
 
-        ERB.new(policy_spec_template, nil, '-').result(binding).chomp
+        ERB.new(policy_spec_template, trim_mode: '-').result(binding).chomp
       end
 
       # rubocop:disable all

data/lib/awspec/generator/spec/iam_role.rb

@@ -17,7 +17,7 @@ module Awspec::Generator
             document = JSON.generate(JSON.parse(URI.decode_www_form_component(res.policy_document)))
             "it { should have_inline_policy('#{policy_name}').policy_document('#{document}') }"
           end
-          content = ERB.new(iam_role_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(iam_role_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/iam_user.rb

@@ -17,7 +17,7 @@ module Awspec::Generator
             document = JSON.generate(JSON.parse(URI.decode_www_form_component(res.policy_document)))
             "it { should have_inline_policy('#{policy_name}').policy_document('#{document}') }"
           end
-          content = ERB.new(iam_user_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(iam_user_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/internet_gateway.rb

@@ -15,7 +15,7 @@ module Awspec::Generator
         internet_gateways = select_internet_gateway_by_vpc_id(@vpc_id)
         specs = internet_gateways.map do |internet_gateway|
           internet_gateway_id = internet_gateway[:internet_gateway_id]
-          content = ERB.new(internet_gateway_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(internet_gateway_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/kms.rb

@@ -8,7 +8,7 @@ module Awspec::Generator
         aliases = select_all_kms_aliases.select { |kms_alias| customer_managed_key?(kms_alias) }
         raise 'Not Found alias' if aliases.empty?
 
-        ERB.new(keys_spec_template, nil, '-').result(binding).chomp
+        ERB.new(keys_spec_template, trim_mode: '-').result(binding).chomp
       end
 
       def keys_spec_template

data/lib/awspec/generator/spec/lambda.rb

@@ -8,7 +8,7 @@ module Awspec::Generator
         lambda_functions = select_all_lambda_functions
         raise 'Not Found lambda' if lambda_functions.empty?
 
-        ERB.new(lambda_spec_template, nil, '-').result(binding).chomp
+        ERB.new(lambda_spec_template, trim_mode: '-').result(binding).chomp
       end
 
       def lambda_spec_template

data/lib/awspec/generator/spec/managed_prefix_list.rb

@@ -15,7 +15,7 @@ module Awspec::Generator
 
         specs = prefix_lists.map do |prefix_list|
           entries = select_managed_prefix_list_entries(prefix_list.prefix_list_id)
-          content = ERB.new(managed_prefix_list_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(managed_prefix_list_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/nat_gateway.rb

@@ -15,7 +15,7 @@ module Awspec::Generator
         nat_gateways = select_nat_gateway_by_vpc_id(@vpc_id)
         specs = nat_gateways.map do |nat_gateway|
           nat_gateway_id = nat_gateway[:nat_gateway_id]
-          content = ERB.new(nat_gateway_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(nat_gateway_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/network_acl.rb

@@ -24,7 +24,7 @@ module Awspec::Generator
           outbound_entries_count = acl.entries.count do |entry|
             entry.egress == true
           end
-          content = ERB.new(network_acl_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(network_acl_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/network_interface.rb

@@ -19,7 +19,7 @@ module Awspec::Generator
           network_interface_id = interface[:network_interface_id]
           linespecs = generate_linespecs(interface)
           private_ip_addresses_count = interface.private_ip_addresses.count
-          content = ERB.new(network_interface_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(network_interface_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/nlb.rb

@@ -16,7 +16,7 @@ module Awspec::Generator
         nlbs = select_nlb_by_vpc_id(@vpc_id)
 
         specs = nlbs.map do |nlb|
-          content = ERB.new(nlb_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(nlb_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/nlb_listener.rb

@@ -20,7 +20,7 @@ module Awspec::Generator
           nlb_listeners.map do |listener|
             rules = select_rule_by_nlb_listener_id(listener.listener_arn).map(&:to_h)
             rules.map do |rule|
-              content = ERB.new(nlb_listener_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+              content = ERB.new(nlb_listener_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
             end
           end
         end

data/lib/awspec/generator/spec/rds.rb

@@ -21,7 +21,7 @@ module Awspec::Generator
             ret = find_security_group(sg_id)
             ret[:group_name]
           end
-          content = ERB.new(rds_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(rds_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/rds_db_cluster.rb

@@ -39,7 +39,7 @@ EOF
       private
 
       def content(cluster)
-        ERB.new(rds_db_cluster_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+        ERB.new(rds_db_cluster_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
       end
     end
   end

data/lib/awspec/generator/spec/rds_db_cluster_parameter_group.rb

@@ -7,7 +7,7 @@ module Awspec::Generator
       def generate_by_parameter_group(parameter_group)
         @parameter_group = parameter_group
         res = select_all_rds_db_cluster_parameters(@parameter_group)
-        ERB.new(db_cluster_parameter_group_template, nil, '-').result(binding).gsub(/^\n/, '')
+        ERB.new(db_cluster_parameter_group_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
       end
 
       def db_cluster_parameter_group_template

data/lib/awspec/generator/spec/rds_db_parameter_group.rb

@@ -7,7 +7,7 @@ module Awspec::Generator
       def generate_by_parameter_group(parameter_group)
         @parameter_group = parameter_group
         res = select_all_rds_db_parameters(@parameter_group)
-        ERB.new(db_parameter_group_template, nil, '-').result(binding).gsub(/^\n/, '')
+        ERB.new(db_parameter_group_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
       end
 
       def db_parameter_group_template

data/lib/awspec/generator/spec/rds_global_cluster.rb

@@ -33,7 +33,7 @@ EOF
       private
 
       def content(cluster)
-        ERB.new(rds_global_cluster_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+        ERB.new(rds_global_cluster_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
       end
     end
   end

data/lib/awspec/generator/spec/rds_proxy.rb

@@ -11,7 +11,7 @@ module Awspec::Generator
         @vpc_id = vpc[:vpc_id]
         db_proxies = select_rds_proxy_by_vpc_id(@vpc_id)
         specs = db_proxies.map do |db_proxy|
-          content = ERB.new(rds_proxy_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(rds_proxy_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/redshift.rb

@@ -24,7 +24,7 @@ module Awspec::Generator
             ret = find_security_group(sg_id)
             ret[:group_name]
           end
-          content = ERB.new(redshift_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(redshift_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/redshift_cluster_parameter_group.rb

@@ -7,7 +7,7 @@ module Awspec::Generator
       def generate_by_parameter_group(parameter_group)
         @parameter_group = parameter_group
         res = select_all_redshift_cluster_parameters(@parameter_group)
-        ERB.new(redshift_cluster_parameters_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+        ERB.new(redshift_cluster_parameters_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
       end
 
       def redshift_cluster_parameters_spec_template

data/lib/awspec/generator/spec/route53_hosted_zone.rb

@@ -28,7 +28,7 @@ module Awspec::Generator
           generate_linespec(record_set)
         end
 
-        content = ERB.new(route53_hosted_zone_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+        content = ERB.new(route53_hosted_zone_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
       end
 
       def generate_linespec(record_set)
@@ -55,7 +55,7 @@ it { should have_record_set('<%= name %>').alias('<%= dns_name %>', '<%= hosted_
 <% end -%>
 EOF
         end
-        ERB.new(template, nil, '-').result(binding)
+        ERB.new(template, trim_mode: '-').result(binding)
       end
 
       def route53_hosted_zone_spec_template

data/lib/awspec/generator/spec/route_table.rb

@@ -18,7 +18,7 @@ module Awspec::Generator
           subnet_linespecs = generate_subnet_linespecs(route_table)
           route_table_id = route_table[:route_table_id]
           route_table_tag_name = route_table.tag_name
-          content = ERB.new(route_table_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(route_table_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end
@@ -29,18 +29,22 @@ module Awspec::Generator
           if route.gateway_id
             destination = route.destination_cidr_block
             destination ||= route.destination_prefix_list_id
-            linespecs.push(ERB.new(route_table_spec_gateway_linetemplate, nil, '-').result(binding))
+            linespecs.push(ERB.new(route_table_spec_gateway_linetemplate, trim_mode: '-').result(binding))
           end
           if route.instance_id
             instance = find_ec2(route.instance_id)
-            linespecs.push(ERB.new(route_table_spec_instance_linetemplate, nil, '-').result(binding)) if instance
+            if instance
+              linespecs.push(ERB.new(route_table_spec_instance_linetemplate, trim_mode: '-').result(binding))
+            end
           end
           if route.vpc_peering_connection_id
             connection = find_vpc_peering_connection(route.vpc_peering_connection_id)
-            linespecs.push(ERB.new(route_table_spec_connection_linetemplate, nil, '-').result(binding)) if connection
+            if connection
+              linespecs.push(ERB.new(route_table_spec_connection_linetemplate, trim_mode: '-').result(binding))
+            end
           end
           if route.nat_gateway_id
-            linespecs.push(ERB.new(route_table_spec_nat_linetemplate, nil, '-').result(binding))
+            linespecs.push(ERB.new(route_table_spec_nat_linetemplate, trim_mode: '-').result(binding))
           end
         end
         linespecs
@@ -52,7 +56,7 @@ module Awspec::Generator
           next if a.subnet_id.nil?
 
           subnet = find_subnet(a.subnet_id)
-          linespecs.push(ERB.new(route_table_spec_subnet_linetemplate, nil, '-').result(binding)) if subnet
+          linespecs.push(ERB.new(route_table_spec_subnet_linetemplate, trim_mode: '-').result(binding)) if subnet
         end
         linespecs
       end

data/lib/awspec/generator/spec/s3_bucket.rb

@@ -24,7 +24,7 @@ module Awspec::Generator
 
         linespecs = []
         acl.grants.each do |grant|
-          linespecs.push(ERB.new(grant_linetemplate, nil, '-').result(binding))
+          linespecs.push(ERB.new(grant_linetemplate, trim_mode: '-').result(binding))
         end
         linespecs
       end
@@ -79,7 +79,7 @@ it do
     )
   end
           EOF
-          linespecs.push(ERB.new(template, nil, '-').result(binding))
+          linespecs.push(ERB.new(template, trim_mode: '-').result(binding))
         end
         linespecs
       end
@@ -124,7 +124,7 @@ EOF
         lifecycle_rule = find_bucket_lifecycle_configuration(bucket.name)
         lifecycle_specs = generate_lifecycle_rule_specs(lifecycle_rule) if lifecycle_rule
         location = find_bucket_location(bucket.name)
-        ERB.new(bucket_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+        ERB.new(bucket_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
       end
     end
   end

data/lib/awspec/generator/spec/security_group.rb

@@ -23,7 +23,7 @@ module Awspec::Generator
           outbound_rule_count = sg[:ip_permissions_egress].reduce(0) do |sum, permission|
             sum += permission.ip_ranges.count + permission.user_id_group_pairs.count
           end
-          content = ERB.new(security_group_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(security_group_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end
@@ -49,12 +49,12 @@ module Awspec::Generator
 
             permission.ip_ranges.each do |ip_range|
               target = ip_range.cidr_ip
-              linespecs.push(ERB.new(security_group_spec_linetemplate, nil, '-').result(binding))
+              linespecs.push(ERB.new(security_group_spec_linetemplate, trim_mode: '-').result(binding))
             end
             permission.user_id_group_pairs.each do |group|
               target = group.group_name
               target = group.group_id unless group.group_name
-              linespecs.push(ERB.new(security_group_spec_linetemplate, nil, '-').result(binding))
+              linespecs.push(ERB.new(security_group_spec_linetemplate, trim_mode: '-').result(binding))
             end
           end
         end

data/lib/awspec/generator/spec/subnet.rb

@@ -17,7 +17,7 @@ module Awspec::Generator
         specs = subnets.map do |subnet|
           subnet_id = subnet[:subnet_id]
           subnet_tag_name = subnet.tag_name
-          content = ERB.new(subnet_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          content = ERB.new(subnet_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/vpc.rb

@@ -16,7 +16,7 @@ module Awspec::Generator
         route_tables = select_route_table_by_vpc_id(@vpc_id)
         network_acls = select_network_acl_by_vpc_id(@vpc_id)
         vpc_attributes = select_vpc_attribute(@vpc_id)
-        spec = ERB.new(vpc_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+        spec = ERB.new(vpc_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
       end
 
       # rubocop:disable all

data/lib/awspec/generator/spec/wafv2_ip_set.rb

@@ -10,7 +10,7 @@ module Awspec::Generator
 
         specs = ip_sets.map do |i|
           ip_set = get_ip_set(scope, i.name, i.id)
-          ERB.new(wafv2_ip_set_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          ERB.new(wafv2_ip_set_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/generator/spec/wafv2_web_acl.rb

@@ -10,7 +10,7 @@ module Awspec::Generator
 
         specs = web_acls.map do |acl|
           web_acl = get_web_acl(scope, acl.name, acl.id)
-          ERB.new(wafv2_web_acl_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
+          ERB.new(wafv2_web_acl_spec_template, trim_mode: '-').result(binding).gsub(/^\n/, '')
         end
         specs.join("\n")
       end

data/lib/awspec/helper/finder/backup.rb

@@ -67,6 +67,15 @@ module Awspec::Helper
         nil
       end
 
+      def select_backup_rule_by_plan_id(id)
+        selected = []
+        req = { backup_plan_id: id }
+        res = backup_client.get_backup_plan(req)
+        selected = res.backup_plan.rules
+      rescue Aws::Backup::Errors::ResourceNotFoundException
+        nil
+      end
+
       def locked?
         resource_via_client.locked
       end

data/lib/awspec/helper/finder/iam.rb

@@ -23,7 +23,23 @@ module Awspec::Helper
             )
           end
 
-          selected.single_resource(id)
+          res = selected.single_resource(id)
+
+          unless res.nil?
+            # Enrich the resource with all the fields returned by get_user, get_group, get_role, get_policy
+            params = type == 'policy' ? { :policy_arn => res['arn'] } : { "#{type}_name".to_sym => res["#{type}_name"] }
+            r = iam_client.send(
+              "get_#{type}",
+              params
+            )
+            object = r[type.to_sym]
+            unless object.nil?
+              object.to_h.each_key do |k|
+                res[k] = object[k] if res[k].nil?
+              end
+            end
+          end
+          res
         end
       end
 

data/lib/awspec/matcher/have_plan_rule.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+RSpec::Matchers.define :have_plan_rule do |rule_id|
+  attr_list = %w[
+    rule_name target_backup_vault_name schedule_expression
+    start_window_minutes completion_window_minutes lifecycle
+    enable_continuous_backup schedule_expression_timezone
+  ]
+
+  match do |plan|
+    plan.has_plan_rule?(rule_id,
+                        rule_name: @rule_name,
+                        target_backup_vault_name: @target_backup_vault_name,
+                        schedule_expression: @schedule_expression,
+                        start_window_minutes: @start_window_minutes,
+                        completion_window_minutes: @completion_window_minutes,
+                        lifecycle: @lifecycle,
+                        enable_continuous_backup: @enable_continuous_backup,
+                        schedule_expression_timezone: @schedule_expression_timezone)
+  end
+
+  attr_list.each do |a|
+    define_method a.to_sym do |*args|
+      instance_variable_set("@#{a}", args[0])
+      self
+    end
+  end
+
+  description do
+    attr = ''
+    attr_list.each do |a|
+      attr += "#{a} #{instance_variable_get("@#{a}")}" unless instance_variable_get("@#{a}").nil?
+    end
+
+    attr = " with #{attr}" if attr != ''
+    "have plan rule #{rule_id}#{attr}"
+  end
+end

data/lib/awspec/matcher.rb

@@ -96,3 +96,6 @@ require 'awspec/matcher/have_cidr'
 
 # BackupSelection
 require 'awspec/matcher/belong_to_backup_plan'
+
+# BackupPlan
+require 'awspec/matcher/have_plan_rule'

data/lib/awspec/stub/backup_plan.rb

@@ -28,6 +28,44 @@ Aws.config[:backup] = {
         }
       ],
       next_token: nil
+    },
+    get_backup_plan: {
+      backup_plan: {
+        backup_plan_name: 'my-backup-plan',
+        rules: [
+          {
+            rule_name: 'my-daily-backup',
+            target_backup_vault_name: 'my-backup-vault',
+            schedule_expression: 'cron(0 0 * * ? *)',
+            start_window_minutes: 360,
+            completion_window_minutes: 1440,
+            lifecycle: {
+              delete_after_days: 7
+            },
+            rule_id: '8dd6ef67-9eeb-4743-98be-5b4c582ee3d0',
+            enable_continuous_backup: false,
+            schedule_expression_timezone: 'Etc/UTC'
+          },
+          {
+            rule_name: 'backup-rule-hourly-30-days',
+            target_backup_vault_name: 'Default',
+            schedule_expression: 'cron(30 * ? * * *)',
+            start_window_minutes: 60,
+            completion_window_minutes: 1440,
+            lifecycle: {
+              delete_after_days: 30
+            },
+            rule_id: 'febe7fd4-c95f-4d26-b502-97adf2fd0cf4',
+            enable_continuous_backup: false,
+            schedule_expression_timezone: 'Etc/UTC'
+          }
+        ]
+      },
+      backup_plan_id: 'fff3e784-1a0f-4e7c-8fe9-ba69825f7c00',
+      backup_plan_arn: 'arn:aws:backup:us-west-2:111122223333:backup-plan:fff3e784-1a0f-4e7c-8fe9-ba69825f7c00',
+      version_id: 'disFW7K0dOAjTaMWKYlhEyScjBhmi5kKGf7BrY7i1BG8F8wB',
+      creation_date: Time.new(2016, 10, 4, 9, 00, 00, '+00:00'),
+      last_execution_date: Time.new(2025, 10, 4, 9, 00, 00, '+00:00')
     }
   }
 }

data/lib/awspec/stub/iam_policy.rb

@@ -33,7 +33,7 @@ Aws.config[:iam] = {
       policies: [
         {
           attachment_count: 1,
-          arn: 'arn:aws:iam::aws:policy/my-iam-policy',
+          arn: 'arn:aws:iam::123456789012:policy/my-iam-policy',
           default_version_id: 'v1',
           is_attachable: true,
           policy_id: 'PABCDEFGHI123455689',
@@ -81,6 +81,20 @@ Aws.config[:iam] = {
         is_default_version: true,
         create_date: Time.new(2022, 11, 12, 01, 23, 45, '+00:00')
       }
+    },
+    get_policy: {
+      policy: {
+        policy_name: 'my-iam-policy',
+        create_date: Time.new(2014, 1, 2, 10, 00, 00, '+00:00'),
+        description: 'my-description',
+        attachment_count: 1,
+        is_attachable: true,
+        policy_id: 'PABCDEFGHI123455689',
+        default_version_id: 'v1',
+        path: '/',
+        arn: 'arn:aws:iam::123456789012:policy/my-iam-policy',
+        update_date: Time.new(2015, 1, 2, 10, 00, 00, '+00:00')
+      }
     }
   }
 }

data/lib/awspec/stub/iam_role.rb

@@ -8,6 +8,7 @@ Aws.config[:iam] = {
         role_name: 'my-iam-role',
         role_id: 'RABCDEFGHI123455689',
         arn: 'arn:aws:iam::123456789012:role/my-iam-role',
+        description: 'my-description',
         create_date: Time.new(2015, 1, 2, 9, 00, 00, '+00:00')
       ]
     },
@@ -34,7 +35,16 @@ Aws.config[:iam] = {
         role_name: 'my-iam-role',
         role_id: 'RABCDEFGHI123455689',
         arn: 'arn:aws:iam::123456789012:role/my-iam-role',
-        create_date: Time.new(2015, 1, 2, 9, 00, 00, '+00:00')
+        description: 'my-description',
+        create_date: Time.new(2015, 1, 2, 9, 00, 00, '+00:00'),
+        permissions_boundary: {
+          permissions_boundary_type: 'Policy',
+          permissions_boundary_arn: 'arn:aws:iam::123456789012:policy/my-permission-boundary'
+        },
+        role_last_used: {
+          region: 'us-east-1',
+          last_used_date: Time.new(2019, 11, 13, 17, 14, 00, '+00:00')
+        }
       }
     },
     get_role_policy: {

data/lib/awspec/type/backup_plan.rb

@@ -9,5 +9,45 @@ module Awspec::Type
     def id
       @id ||= resource_via_client.backup_plan_id if resource_via_client
     end
+
+    # rubocop:disable Metrics/ParameterLists
+    def has_plan_rule?(rule_id,
+                       rule_name: nil,
+                       target_backup_vault_name: nil,
+                       schedule_expression: nil,
+                       start_window_minutes: nil,
+                       completion_window_minutes: nil,
+                       lifecycle: nil,
+                       enable_continuous_backup: nil,
+                       schedule_expression_timezone: nil)
+      rules = select_backup_rule_by_plan_id(resource_via_client.backup_plan_id)
+      rules.find do |rule|
+        next false if !rule_id.nil? && rule.rule_id != rule_id && rule.rule_name != rule_id
+        next false if !rule_name.nil? && rule.rule_name != rule_name
+        next false if !target_backup_vault_name.nil? && rule.target_backup_vault_name != target_backup_vault_name
+        next false if !schedule_expression.nil? && rule.schedule_expression != schedule_expression
+        next false if !start_window_minutes.nil? && rule.start_window_minutes != start_window_minutes
+        next false if !completion_window_minutes.nil? && rule.completion_window_minutes != completion_window_minutes
+        next false if !enable_continuous_backup.nil? && rule.enable_continuous_backup != enable_continuous_backup
+        next false if !schedule_expression_timezone.nil? && \
+                      rule.schedule_expression_timezone != schedule_expression_timezone
+        next false if !lifecycle.nil? && !_lifecycle_is_equal?(rule.lifecycle, lifecycle)
+
+        true
+      end
+    end
+
+    private
+
+    def _lifecycle_is_equal?(lc1, lc2)
+      lc2_j = JSON.parse lc2
+      ret = false
+      %w[move_to_cold_storage_after_days delete_after_days opt_in_to_archive_for_supported_resources].each do |attr|
+        ret = true if !lc1[attr].nil? && lc2.include?(attr) && lc1[attr].to_s.strip == lc2_j[attr].to_s.strip
+      end
+      ret
+    rescue JSON::ParserError
+      raise ArgumentError, "Lifecycle value '#{lc2}' is not valid JSON"
+    end
   end
 end

data/lib/awspec/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Awspec
-  VERSION = '1.33.0'
+  VERSION = '1.35.0'
 end