chef-provisioning-aws 3.0.4 → 3.0.6

data/spec/integration/aws_route_table_spec.rb

@@ -1,225 +1,207 @@
-require 'spec_helper'
+require "spec_helper"
 
 describe Chef::Resource::AwsRouteTable do
   extend AWSSupport
 
-  when_the_chef_12_server "exists", organization: 'foo', server_scope: :context do
+  when_the_chef_12_server "exists", organization: "foo", server_scope: :context do
     with_aws "with a VPC with an internet gateway" do
       purge_all
       setup_public_vpc
 
-      aws_network_interface 'test_network_interface' do
-        subnet 'test_public_subnet'
+      aws_network_interface "test_network_interface" do
+        subnet "test_public_subnet"
       end
 
       it "aws_route_table 'test_route_table' with no parameters except VPC creates a route table" do
-        expect_recipe {
-          aws_route_table 'test_route_table' do
-            vpc 'test_vpc'
+        expect_recipe do
+          aws_route_table "test_route_table" do
+            vpc "test_vpc"
           end
-        }.to create_an_aws_route_table('test_route_table',
-          routes: [
-            { destination_cidr_block: '10.0.0.0/16', gateway_id: 'local', state: "active" }
-          ]
-        ).and be_idempotent
+        end.to create_an_aws_route_table("test_route_table",
+                                         routes: [
+                                           { destination_cidr_block: "10.0.0.0/16", gateway_id: "local", state: "active" }
+                                         ]).and be_idempotent
       end
 
       it "aws_route_table 'test_route_table' with routes creates a route table" do
-        expect_recipe {
-          aws_route_table 'test_route_table' do
-            vpc 'test_vpc'
-            routes '0.0.0.0/0' => :internet_gateway
+        expect_recipe do
+          aws_route_table "test_route_table" do
+            vpc "test_vpc"
+            routes "0.0.0.0/0" => :internet_gateway
           end
-        }.to create_an_aws_route_table('test_route_table',
-          routes: Set[
-            { destination_cidr_block: '10.0.0.0/16', gateway_id: 'local', state: "active" },
-            { destination_cidr_block: '0.0.0.0/0', gateway_id: test_vpc.aws_object.internet_gateways.first.id, state: "active" }
-          ]
-        ).and be_idempotent
+        end.to create_an_aws_route_table("test_route_table",
+                                         routes: Set[
+                                           { destination_cidr_block: "10.0.0.0/16", gateway_id: "local", state: "active" },
+                                           { destination_cidr_block: "0.0.0.0/0", gateway_id: test_vpc.aws_object.internet_gateways.first.id, state: "active" }
+                                         ]).and be_idempotent
       end
 
       it "ignores routes whose target matches ignore_route_targets" do
-        expect_recipe {
-            aws_route_table 'test_route_table' do
-              vpc 'test_vpc'
-              routes(
-                '0.0.0.0/0' => :internet_gateway,
-                '172.31.0.0/16' => test_network_interface
-              )
-            end
+        expect_recipe do
+          aws_route_table "test_route_table" do
+            vpc "test_vpc"
+            routes(
+              "0.0.0.0/0" => :internet_gateway,
+              "172.31.0.0/16" => test_network_interface
+            )
+          end
 
-            aws_route_table 'test_route_table' do
-              vpc 'test_vpc'
-              routes '0.0.0.0/0' => :internet_gateway
-              ignore_route_targets ['^eni-']
-            end
-          }.to create_an_aws_route_table('test_route_table',
-            routes: Set[
-              { destination_cidr_block: '10.0.0.0/16', gateway_id: 'local', state: "active" },
-              { destination_cidr_block: '172.31.0.0/16', network_interface_id: test_network_interface.aws_object.id, state: "blackhole" },
-              { destination_cidr_block: '0.0.0.0/0', gateway_id: test_vpc.aws_object.internet_gateways.first.id, state: "active" },
-            ]
-          ).and be_idempotent
+          aws_route_table "test_route_table" do
+            vpc "test_vpc"
+            routes "0.0.0.0/0" => :internet_gateway
+            ignore_route_targets ["^eni-"]
+          end
+        end.to create_an_aws_route_table("test_route_table",
+                                         routes: Set[
+                                           { destination_cidr_block: "10.0.0.0/16", gateway_id: "local", state: "active" },
+                                           { destination_cidr_block: "172.31.0.0/16", network_interface_id: test_network_interface.aws_object.id, state: "blackhole" },
+                                           { destination_cidr_block: "0.0.0.0/0", gateway_id: test_vpc.aws_object.internet_gateways.first.id, state: "active" },
+                                         ]).and be_idempotent
       end
 
       context "with an existing routing table" do
-        aws_route_table 'test_route_table' do
-          vpc 'test_vpc'
-          routes '0.0.0.0/0' => :internet_gateway,
-                 '1.0.0.0/8' => :internet_gateway
+        aws_route_table "test_route_table" do
+          vpc "test_vpc"
+          routes "0.0.0.0/0" => :internet_gateway,
+                 "1.0.0.0/8" => :internet_gateway
         end
 
         it "updates an existing routing table" do
-          expect_recipe {
-            aws_route_table 'test_route_table' do
-              vpc 'test_vpc'
-              routes '0.0.0.0/0' => :internet_gateway,
-                    '2.0.0.0/8' => :internet_gateway
+          expect_recipe do
+            aws_route_table "test_route_table" do
+              vpc "test_vpc"
+              routes "0.0.0.0/0" => :internet_gateway,
+                     "2.0.0.0/8" => :internet_gateway
             end
-          }.to update_an_aws_route_table('test_route_table',
-            routes: Set[
-              { destination_cidr_block: '2.0.0.0/8', gateway_id: test_vpc.aws_object.internet_gateways.first.id, state: "active" },
-              { destination_cidr_block: '10.0.0.0/16', gateway_id: 'local', state: "active" },
-              { destination_cidr_block: '0.0.0.0/0', gateway_id: test_vpc.aws_object.internet_gateways.first.id, state: "active" },
-            ]
-          ).and be_idempotent
+          end.to update_an_aws_route_table("test_route_table",
+                                           routes: Set[
+                                             { destination_cidr_block: "2.0.0.0/8", gateway_id: test_vpc.aws_object.internet_gateways.first.id, state: "active" },
+                                             { destination_cidr_block: "10.0.0.0/16", gateway_id: "local", state: "active" },
+                                             { destination_cidr_block: "0.0.0.0/0", gateway_id: test_vpc.aws_object.internet_gateways.first.id, state: "active" },
+                                           ]).and be_idempotent
         end
       end
 
       context "with nat gateway" do
-        aws_eip_address 'test_eip'
-        aws_nat_gateway 'test_nat_gateway' do
-          subnet 'test_public_subnet'
-          eip_address 'test_eip'
+        aws_eip_address "test_eip"
+        aws_nat_gateway "test_nat_gateway" do
+          subnet "test_public_subnet"
+          eip_address "test_eip"
         end
 
         it "can route to a nat gateway" do
-          expect_recipe {
-            aws_route_table 'test_route_table' do
-              vpc 'test_vpc'
-              routes '0.0.0.0/0' => test_nat_gateway
+          expect_recipe do
+            aws_route_table "test_route_table" do
+              vpc "test_vpc"
+              routes "0.0.0.0/0" => test_nat_gateway
             end
-          }.to create_an_aws_route_table('test_route_table',
-            routes: Set[
-                { destination_cidr_block: '10.0.0.0/16', gateway_id: 'local', state: 'active' },
-                { destination_cidr_block: '0.0.0.0/0', nat_gateway_id: test_nat_gateway.aws_object.nat_gateway_id, state: 'active' },
-              ]
-          ).and be_idempotent
+          end.to create_an_aws_route_table("test_route_table",
+                                           routes: Set[
+                                               { destination_cidr_block: "10.0.0.0/16", gateway_id: "local", state: "active" },
+                                               { destination_cidr_block: "0.0.0.0/0", nat_gateway_id: test_nat_gateway.aws_object.nat_gateway_id, state: "active" },
+                                             ]).and be_idempotent
         end
       end
 
       context "with machines", :super_slow do
-        machine 'test_machine' do
+        machine "test_machine" do
           machine_options bootstrap_options: {
-            subnet_id: 'test_public_subnet',
-            key_name: 'test_key_pair'
+            subnet_id: "test_public_subnet",
+            key_name: "test_key_pair"
           }
           action :ready # The box has to be online for AWS to accept it as routable
         end
 
         it "can route to a machine", :super_slow do
-          expect_recipe {
-            aws_route_table 'test_route_table' do
-              vpc 'test_vpc'
-              routes '0.0.0.0/0'   => :internet_gateway,
-                     '11.0.0.0/8' => 'test_machine'
+          expect_recipe do
+            aws_route_table "test_route_table" do
+              vpc "test_vpc"
+              routes "0.0.0.0/0" => :internet_gateway,
+                     "11.0.0.0/8" => "test_machine"
             end
-
-          }.to create_an_aws_route_table('test_route_table',
-            routes: Set[
-                { destination_cidr_block: '10.0.0.0/16', gateway_id: 'local', state: "active" },
-                { destination_cidr_block: '11.0.0.0/8', instance_id: test_machine.aws_object.id, state: "active" },
-                { destination_cidr_block: '0.0.0.0/0', gateway_id: test_vpc.aws_object.internet_gateways.first.id, state: "active" },
-              ]
-          ).and be_idempotent
+          end.to create_an_aws_route_table("test_route_table",
+                                           routes: Set[
+                                               { destination_cidr_block: "10.0.0.0/16", gateway_id: "local", state: "active" },
+                                               { destination_cidr_block: "11.0.0.0/8", instance_id: test_machine.aws_object.id, state: "active" },
+                                               { destination_cidr_block: "0.0.0.0/0", gateway_id: test_vpc.aws_object.internet_gateways.first.id, state: "active" },
+                                             ]).and be_idempotent
         end
       end
 
       it "creates aws_route_table tags" do
-        expect_recipe {
-          aws_route_table 'test_route_table' do
-            vpc 'test_vpc'
+        expect_recipe do
+          aws_route_table "test_route_table" do
+            vpc "test_vpc"
             aws_tags key1: "value"
           end
-        }.to create_an_aws_route_table('test_route_table')
-        .and have_aws_route_table_tags('test_route_table',
-          {
-            'Name' => 'test_route_table',
-            'key1' => 'value'
-          }
-        ).and be_idempotent
+        end.to create_an_aws_route_table("test_route_table")
+          .and have_aws_route_table_tags("test_route_table",
+                                         "Name" => "test_route_table",
+                                         "key1" => "value").and be_idempotent
       end
 
       context "with existing tags" do
-        aws_route_table 'test_route_table' do
-          vpc 'test_vpc'
+        aws_route_table "test_route_table" do
+          vpc "test_vpc"
           aws_tags key1: "value"
         end
 
         it "updates aws_route_table tags" do
-          expect_recipe {
-            aws_route_table 'test_route_table' do
-              vpc 'test_vpc'
+          expect_recipe do
+            aws_route_table "test_route_table" do
+              vpc "test_vpc"
               aws_tags key1: "value2", key2: nil
             end
-          }.to have_aws_route_table_tags('test_route_table',
-            {
-              'Name' => 'test_route_table',
-              'key1' => 'value2',
-              'key2' => ''
-            }
-          ).and be_idempotent
+          end.to have_aws_route_table_tags("test_route_table",
+                                           "Name" => "test_route_table",
+                                           "key1" => "value2",
+                                           "key2" => "").and be_idempotent
         end
 
         it "removes all aws_route_table tags except Name" do
-          expect_recipe {
-            aws_route_table 'test_route_table' do
-              vpc 'test_vpc'
+          expect_recipe do
+            aws_route_table "test_route_table" do
+              vpc "test_vpc"
               aws_tags({})
             end
-          }.to have_aws_route_table_tags('test_route_table',
-            {
-              'Name' => 'test_route_table'
-            }
-          ).and be_idempotent
+          end.to have_aws_route_table_tags("test_route_table",
+                                           "Name" => "test_route_table").and be_idempotent
         end
       end
-
     end
 
     with_aws "with two VPC's with an internet gateway" do
       aws_vpc "test_vpc_1" do
-        cidr_block '10.0.0.0/24'
+        cidr_block "10.0.0.0/24"
         internet_gateway true
       end
 
       aws_vpc "test_vpc_2" do
-        cidr_block '11.0.0.0/24'
+        cidr_block "11.0.0.0/24"
         internet_gateway false
       end
 
       it "aws_route_table 'test_route_table' with routes to differents targets creates a route table" do
         pcx = nil
-        expect_recipe {
-          pcx = aws_vpc_peering_connection 'test_peering_connection' do
-            vpc 'test_vpc_1'
-            peer_vpc 'test_vpc_2'
+        expect_recipe do
+          pcx = aws_vpc_peering_connection "test_peering_connection" do
+            vpc "test_vpc_1"
+            peer_vpc "test_vpc_2"
           end
 
-          aws_route_table 'test_route_table' do
-            vpc 'test_vpc_1'
+          aws_route_table "test_route_table" do
+            vpc "test_vpc_1"
             routes(
-                '100.100.0.0/16' => pcx,
-                '0.0.0.0/0' => :internet_gateway
+              "100.100.0.0/16" => pcx,
+              "0.0.0.0/0" => :internet_gateway
             )
           end
-        }.to create_an_aws_route_table('test_route_table',
-          routes: Set[
-            { destination_cidr_block: '10.0.0.0/24', gateway_id: 'local', state: "active" },
-            { destination_cidr_block: '100.100.0.0/16', vpc_peering_connection_id: pcx.aws_object.id, state: "active" },
-            { destination_cidr_block: '0.0.0.0/0', gateway_id: test_vpc_1.aws_object.internet_gateways.first.id, state: "active" }
-          ]
-        ).and be_idempotent
+        end.to create_an_aws_route_table("test_route_table",
+                                         routes: Set[
+                                           { destination_cidr_block: "10.0.0.0/24", gateway_id: "local", state: "active" },
+                                           { destination_cidr_block: "100.100.0.0/16", vpc_peering_connection_id: pcx.aws_object.id, state: "active" },
+                                           { destination_cidr_block: "0.0.0.0/0", gateway_id: test_vpc_1.aws_object.internet_gateways.first.id, state: "active" }
+                                         ]).and be_idempotent
       end
     end
   end

data/spec/integration/aws_s3_bucket_spec.rb

@@ -1,5 +1,5 @@
-require 'spec_helper'
-require 'securerandom'
+require "spec_helper"
+require "securerandom"
 
 def mk_bucket_name
   bucket_postfix = SecureRandom.hex(8)
@@ -14,22 +14,19 @@ describe Chef::Resource::AwsS3Bucket do
       bucket_name = mk_bucket_name
 
       it "aws_s3_bucket '#{bucket_name}' creates a bucket" do
-        expect_recipe {
+        expect_recipe do
           aws_s3_bucket bucket_name
-        }.to create_an_aws_s3_bucket(bucket_name).and be_idempotent
+        end.to create_an_aws_s3_bucket(bucket_name).and be_idempotent
       end
 
       it "creates aws_s3_bucket tags" do
-        expect_recipe {
+        expect_recipe do
           aws_s3_bucket bucket_name do
             aws_tags key1: "value"
           end
-        }.to create_an_aws_s3_bucket(bucket_name)
-        .and have_aws_s3_bucket_tags(bucket_name,
-          {
-            'key1' => 'value'
-          }
-        ).and be_idempotent
+        end.to create_an_aws_s3_bucket(bucket_name)
+          .and have_aws_s3_bucket_tags(bucket_name,
+                                       "key1" => "value").and be_idempotent
       end
 
       context "with existing tags" do
@@ -38,49 +35,44 @@ describe Chef::Resource::AwsS3Bucket do
         end
 
         it "updates aws_s3_bucket tags" do
-          expect_recipe {
+          expect_recipe do
             aws_s3_bucket bucket_name do
               aws_tags key1: "value2", key2: nil
             end
-          }.to have_aws_s3_bucket_tags(bucket_name,
-            {
-              'key1' => 'value2',
-              'key2' => ''
-            }
-          ).and be_idempotent
+          end.to have_aws_s3_bucket_tags(bucket_name,
+                                         "key1" => "value2",
+                                         "key2" => "").and be_idempotent
         end
 
         it "removes all aws_s3_bucket tags" do
-
-          expect_recipe {
+          expect_recipe do
             aws_s3_bucket bucket_name do
               aws_tags({})
             end
-          }.to have_aws_s3_bucket_tags(bucket_name, {}).and be_idempotent
+          end.to have_aws_s3_bucket_tags(bucket_name, {}).and be_idempotent
         end
       end
-
     end
 
     with_aws "when a bucket with content exists" do
       bucket_name = mk_bucket_name
-      with_converge {
+      with_converge do
         aws_s3_bucket bucket_name
 
         ruby_block "upload s3 object" do
           block do
-            ::Aws::S3::Resource.new(driver.s3_client).buckets.find { |b| b.name == bucket_name }.object("test-object").put( { body: "test-content" } )
+            ::Aws::S3::Resource.new(driver.s3_client).buckets.find { |b| b.name == bucket_name }.object("test-object").put(body: "test-content")
           end
         end
-      }
+      end
 
       it "aws_s3_bucket '#{bucket_name}' with recursive_delete set to true, deletes the bucket" do
-        r = recipe {
+        r = recipe do
           aws_s3_bucket bucket_name do
             recursive_delete true
             action :delete
           end
-        }
+        end
         expect(r).to destroy_an_aws_s3_bucket(bucket_name)
       end
     end

data/spec/integration/aws_security_group_spec.rb

@@ -1,111 +1,100 @@
-require 'spec_helper'
-require 'chef/resource/aws_security_group'
-require 'chef/provisioning/aws_driver/exceptions'
+require "spec_helper"
+require "chef/resource/aws_security_group"
+require "chef/provisioning/aws_driver/exceptions"
 
 describe Chef::Resource::AwsSecurityGroup do
   extend AWSSupport
 
   def set_ip_pemissions_mock_object(options = {})
     mock_object = Aws::EC2::Types::IpPermission.new(
-    from_port: options[:from_port] || nil,
-    to_port: options[:to_port] || nil ,
-    ip_protocol: options[:ip_protocol] || nil,
-    ip_ranges: options[:ip_ranges] || [],
-    ipv_6_ranges: options[:ipv_6_ranges] || [],
-    prefix_list_ids: options[:prefix_list_ids] || [],
-    user_id_group_pairs: options[:user_id_group_pairs] || [])
-  end 
+      from_port: options[:from_port] || nil,
+      to_port: options[:to_port] || nil,
+      ip_protocol: options[:ip_protocol] || nil,
+      ip_ranges: options[:ip_ranges] || [],
+      ipv_6_ranges: options[:ipv_6_ranges] || [],
+      prefix_list_ids: options[:prefix_list_ids] || [],
+      user_id_group_pairs: options[:user_id_group_pairs] || []
+    )
+  end
 
-  when_the_chef_12_server "exists", organization: 'foo', server_scope: :context do
+  when_the_chef_12_server "exists", organization: "foo", server_scope: :context do
     with_aws "without a VPC" do
-
       it "aws_security_group 'test_sg' with no attributes works" do
-        expect_recipe {
-          aws_security_group 'test_sg' do
+        expect_recipe do
+          aws_security_group "test_sg" do
           end
-        }.to create_an_aws_security_group('test_sg',
-          description:                'test_sg',
-          vpc_id:                     default_vpc.vpc_id,
-          ip_permissions:        [],
-          ip_permissions_egress: [set_ip_pemissions_mock_object(ip_protocol: "-1", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "0.0.0.0/0")])]
-        ).and be_idempotent
+        end.to create_an_aws_security_group("test_sg",
+                                            description:                "test_sg",
+                                            vpc_id:                     default_vpc.vpc_id,
+                                            ip_permissions:        [],
+                                            ip_permissions_egress: [set_ip_pemissions_mock_object(ip_protocol: "-1", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "0.0.0.0/0")])]).and be_idempotent
       end
 
       it "can reference a security group by name or id" do
-        expect_recipe {
-          sg = aws_security_group 'test_sg'
+        expect_recipe do
+          sg = aws_security_group "test_sg"
           sg.run_action(:create)
           id = sg.aws_object.id
           aws_security_group id do
-            inbound_rules '0.0.0.0/0' => 22
+            inbound_rules "0.0.0.0/0" => 22
           end
-          aws_security_group 'test_sg' do
+          aws_security_group "test_sg" do
             security_group_id id
-            outbound_rules 22 => '0.0.0.0/0'
+            outbound_rules 22 => "0.0.0.0/0"
           end
-        }.to create_an_aws_security_group('test_sg',
-          description:                'test_sg',
-          vpc_id:                     default_vpc.vpc_id,
-          ip_permissions: [set_ip_pemissions_mock_object(from_port: 22, to_port: 22, ip_protocol: "tcp", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "0.0.0.0/0")])],
-          ip_permissions_egress: [set_ip_pemissions_mock_object(from_port: 22, to_port: 22, ip_protocol: "tcp", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "0.0.0.0/0")])]
-        ).and be_idempotent
+        end.to create_an_aws_security_group("test_sg",
+                                            description:                "test_sg",
+                                            vpc_id:                     default_vpc.vpc_id,
+                                            ip_permissions: [set_ip_pemissions_mock_object(from_port: 22, to_port: 22, ip_protocol: "tcp", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "0.0.0.0/0")])],
+                                            ip_permissions_egress: [set_ip_pemissions_mock_object(from_port: 22, to_port: 22, ip_protocol: "tcp", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "0.0.0.0/0")])]).and be_idempotent
       end
 
       it "raises an error trying to reference a security group by an unknown id" do
-        expect_converge {
-          aws_security_group 'sg-12345678'
-        }.to raise_error(Aws::EC2::Errors::InvalidGroupNotFound, /aws_security_group\[sg-12345678\]/)
-        
-        expect_converge {
-          aws_security_group 'test_sg' do
-            security_group_id 'sg-12345678'
+        expect_converge do
+          aws_security_group "sg-12345678"
+        end.to raise_error(Aws::EC2::Errors::InvalidGroupNotFound, /aws_security_group\[sg-12345678\]/)
+
+        expect_converge do
+          aws_security_group "test_sg" do
+            security_group_id "sg-12345678"
           end
-        }.to raise_error(Aws::EC2::Errors::InvalidGroupNotFound, /aws_security_group\[test_sg\]/)
+        end.to raise_error(Aws::EC2::Errors::InvalidGroupNotFound, /aws_security_group\[test_sg\]/)
       end
 
       it "creates aws_security_group tags" do
-        expect_recipe {
-          aws_security_group 'test_sg' do
+        expect_recipe do
+          aws_security_group "test_sg" do
             aws_tags key1: "value"
           end
-        }.to create_an_aws_security_group('test_sg')
-        .and have_aws_security_group_tags('test_sg',
-          {
-            'Name' => 'test_sg',
-            'key1' => 'value'
-          }
-        ).and be_idempotent
+        end.to create_an_aws_security_group("test_sg")
+          .and have_aws_security_group_tags("test_sg",
+                                            "Name" => "test_sg",
+                                            "key1" => "value").and be_idempotent
       end
 
       context "with existing tags" do
-        aws_security_group 'test_sg' do
+        aws_security_group "test_sg" do
           aws_tags key1: "value"
         end
 
         it "updates aws_security_group tags" do
-          expect_recipe {
-            aws_security_group 'test_sg' do
+          expect_recipe do
+            aws_security_group "test_sg" do
               aws_tags key1: "value2", key2: nil
             end
-          }.to have_aws_security_group_tags('test_sg',
-            {
-              'Name' => 'test_sg',
-              'key1' => 'value2',
-              'key2' => ''
-            }
-          ).and be_idempotent
+          end.to have_aws_security_group_tags("test_sg",
+                                              "Name" => "test_sg",
+                                              "key1" => "value2",
+                                              "key2" => "").and be_idempotent
         end
 
         it "removes all aws_security_group tags except Name" do
-          expect_recipe {
-            aws_security_group 'test_sg' do
+          expect_recipe do
+            aws_security_group "test_sg" do
               aws_tags({})
             end
-          }.to have_aws_security_group_tags('test_sg',
-            {
-              'Name' => 'test_sg'
-            }
-          ).and be_idempotent
+          end.to have_aws_security_group_tags("test_sg",
+                                              "Name" => "test_sg").and be_idempotent
         end
       end
     end
@@ -115,171 +104,166 @@ describe Chef::Resource::AwsSecurityGroup do
       setup_public_vpc
 
       load_balancer "testloadbalancer" do
-        load_balancer_options({
+        load_balancer_options(
           subnets: ["test_public_subnet"],
           security_groups: ["test_security_group"]
-        })
+        )
       end
 
-      it "aws_security_group 'test_sg' with no attributes works" do  
-        expect_recipe {
-          aws_security_group 'test_sg' do
-            vpc 'test_vpc'
+      it "aws_security_group 'test_sg' with no attributes works" do
+        expect_recipe do
+          aws_security_group "test_sg" do
+            vpc "test_vpc"
           end
-        }.to create_an_aws_security_group('test_sg',
-          vpc_id:                     test_vpc.aws_object.id,
-          ip_permissions:        [],
-          ip_permissions_egress: [set_ip_pemissions_mock_object(ip_protocol: "-1", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "0.0.0.0/0")])]
-        ).and be_idempotent
+        end.to create_an_aws_security_group("test_sg",
+                                            vpc_id:                     test_vpc.aws_object.id,
+                                            ip_permissions:        [],
+                                            ip_permissions_egress: [set_ip_pemissions_mock_object(ip_protocol: "-1", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "0.0.0.0/0")])]).and be_idempotent
       end
 
       it "adds inbound and outbound_rules for source security_group " do
-        expect_recipe {
-          aws_security_group 'test_sg' do
-            vpc 'test_vpc'
+        expect_recipe do
+          aws_security_group "test_sg" do
+            vpc "test_vpc"
             inbound_rules(
-              'test_security_group' => 1200,
+              "test_security_group" => 1200,
               test_security_group.aws_object.id => 1201,
               test_security_group.aws_object => 1202,
               test_security_group => 1203,
-              {group_name: 'test_security_group'} => 1204,
-              {security_group: 'test_security_group'} => 1205
+              { group_name: "test_security_group" } => 1204,
+              { security_group: "test_security_group" } => 1205
             )
             outbound_rules(
-              1200 => 'test_security_group',
+              1200 => "test_security_group",
               1201 => test_security_group.aws_object.id,
               1202 => test_security_group.aws_object,
               1203 => test_security_group,
-              1204 => {group_name: 'test_security_group'},
-              1205 => {security_group: 'test_security_group'}
+              1204 => { group_name: "test_security_group" },
+              1205 => { security_group: "test_security_group" }
             )
           end
-        }.to create_an_aws_security_group('test_sg',
-            vpc_id: test_vpc.aws_object.id,
-            ip_permissions: [
-                              set_ip_pemissions_mock_object(from_port: 1204, to_port: 1204, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1201, to_port: 1201, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1200, to_port: 1200, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1203, to_port: 1203, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1202, to_port: 1202, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1205, to_port: 1205, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
-                           ],
-            ip_permissions_egress: [
-                              set_ip_pemissions_mock_object(from_port: 1204, to_port: 1204, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1201, to_port: 1201, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1200, to_port: 1200, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1203, to_port: 1203, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1202, to_port: 1202, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1205, to_port: 1205, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
-                            ]
-        ).and be_idempotent
+        end.to create_an_aws_security_group("test_sg",
+                                            vpc_id: test_vpc.aws_object.id,
+                                            ip_permissions: [
+                                              set_ip_pemissions_mock_object(from_port: 1204, to_port: 1204, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1201, to_port: 1201, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1200, to_port: 1200, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1203, to_port: 1203, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1202, to_port: 1202, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1205, to_port: 1205, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
+                                            ],
+                                            ip_permissions_egress: [
+                                              set_ip_pemissions_mock_object(from_port: 1204, to_port: 1204, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1201, to_port: 1201, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1200, to_port: 1200, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1203, to_port: 1203, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1202, to_port: 1202, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1205, to_port: 1205, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
+                                            ]).and be_idempotent
       end
 
       it "adds inbound and outbound_rules for source security_group specified in hash " do
-        expect_recipe {
-          aws_security_group 'test_sg' do
-            vpc 'test_vpc'
+        expect_recipe do
+          aws_security_group "test_sg" do
+            vpc "test_vpc"
             inbound_rules([
-              { port: 1206, sources: 'test_security_group' },
-              { port: 1207, sources: test_security_group.aws_object.id },
-              { port: 1208, sources: test_security_group.aws_object },
-              { port: 1209, sources: test_security_group },
-              { port: 1210, sources: {group_name: 'test_security_group'} },
-              { port: 1211, sources: {security_group: 'test_security_group'} }
-            ])
+                            { port: 1206, sources: "test_security_group" },
+                            { port: 1207, sources: test_security_group.aws_object.id },
+                            { port: 1208, sources: test_security_group.aws_object },
+                            { port: 1209, sources: test_security_group },
+                            { port: 1210, sources: { group_name: "test_security_group" } },
+                            { port: 1211, sources: { security_group: "test_security_group" } }
+                          ])
             outbound_rules([
-              { port: 1206, destinations: 'test_security_group' },
-              { port: 1207, destinations: test_security_group.aws_object.id },
-              { port: 1208, destinations: test_security_group.aws_object },
-              { port: 1209, destinations: test_security_group },
-              { port: 1210, destinations: {group_name: 'test_security_group'} },
-              { port: 1211, destinations: {security_group: 'test_security_group'} }
-            ])
+                             { port: 1206, destinations: "test_security_group" },
+                             { port: 1207, destinations: test_security_group.aws_object.id },
+                             { port: 1208, destinations: test_security_group.aws_object },
+                             { port: 1209, destinations: test_security_group },
+                             { port: 1210, destinations: { group_name: "test_security_group" } },
+                             { port: 1211, destinations: { security_group: "test_security_group" } }
+                           ])
           end
-        }.to create_an_aws_security_group('test_sg',
-            vpc_id: test_vpc.aws_object.id,
-            ip_permissions: [
-                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1209, to_port: 1209, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1211, to_port: 1211, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1210, to_port: 1210, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1208, to_port: 1208, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                           ],
-            ip_permissions_egress: [
-                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1209, to_port: 1209, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1211, to_port: 1211, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1210, to_port: 1210, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1208, to_port: 1208, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
-                            ]
-        ).and be_idempotent
+        end.to create_an_aws_security_group("test_sg",
+                                            vpc_id: test_vpc.aws_object.id,
+                                            ip_permissions: [
+                                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1209, to_port: 1209, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1211, to_port: 1211, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1210, to_port: 1210, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1208, to_port: 1208, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
+                                            ],
+                                            ip_permissions_egress: [
+                                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1209, to_port: 1209, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1211, to_port: 1211, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1210, to_port: 1210, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1208, to_port: 1208, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
+                                            ]).and be_idempotent
       end
 
       it "adds inbound and outbound_rules for source load_balancer" do
-        expect_recipe {
-          aws_security_group 'test_sg' do
-            vpc 'test_vpc'
+        expect_recipe do
+          aws_security_group "test_sg" do
+            vpc "test_vpc"
             inbound_rules(
               testloadbalancer.aws_object => 1206,
-              {load_balancer: 'testloadbalancer'} => 1207,
+              { load_balancer: "testloadbalancer" } => 1207
             )
             outbound_rules(
               1206 => testloadbalancer.aws_object,
-              1207 => {load_balancer: 'testloadbalancer'},
+              1207 => { load_balancer: "testloadbalancer" }
             )
           end
-        }.to create_an_aws_security_group('test_sg',
-            vpc_id: test_vpc.aws_object.id,
-            ip_permissions: [
-                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
-                            ],
-            ip_permissions_egress: [
-                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
-                            ]
-        ).and be_idempotent
+        end.to create_an_aws_security_group("test_sg",
+                                            vpc_id: test_vpc.aws_object.id,
+                                            ip_permissions: [
+                                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
+                                            ],
+                                            ip_permissions_egress: [
+                                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
+                                            ]).and be_idempotent
       end
 
       it "adds inbound and outbound_rules for source load_balancer specified in hash" do
-        expect_recipe {
-          aws_security_group 'test_sg' do
-            vpc 'test_vpc'
+        expect_recipe do
+          aws_security_group "test_sg" do
+            vpc "test_vpc"
             inbound_rules([
-              { port: 1206, sources: testloadbalancer.aws_object },
-              { port: 1207, sources: {load_balancer: 'testloadbalancer'}}
-            ])
+                            { port: 1206, sources: testloadbalancer.aws_object },
+                            { port: 1207, sources: { load_balancer: "testloadbalancer" } }
+                          ])
             outbound_rules([
-              { port: 1206, destinations: testloadbalancer.aws_object },
-              { port: 1207, destinations: {load_balancer: 'testloadbalancer'}}
-            ])
+                             { port: 1206, destinations: testloadbalancer.aws_object },
+                             { port: 1207, destinations: { load_balancer: "testloadbalancer" } }
+                           ])
           end
-        }.to create_an_aws_security_group('test_sg',
-            vpc_id: test_vpc.aws_object.id,
-            ip_permissions: [
-                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
-                            ],
-            ip_permissions_egress: [
-                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
-                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
-                            ]
-        ).and be_idempotent
+        end.to create_an_aws_security_group("test_sg",
+                                            vpc_id: test_vpc.aws_object.id,
+                                            ip_permissions: [
+                                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
+                                            ],
+                                            ip_permissions_egress: [
+                                              set_ip_pemissions_mock_object(from_port: 1207, to_port: 1207, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)]),
+                                              set_ip_pemissions_mock_object(from_port: 1206, to_port: 1206, ip_protocol: "tcp", ip_ranges: [], user_id_group_pairs: [Aws::EC2::Types::UserIdGroupPair.new(group_id: test_security_group.aws_object.id, group_name: nil, peering_status: nil, user_id: test_security_group.aws_object.owner_id, vpc_id: nil, vpc_peering_connection_id: nil)])
+                                            ]).and be_idempotent
       end
 
       it "can specify rules as a mapping from source/destination to port and protocol" do
-        expect_recipe {          
-          aws_security_group 'test_sg' do
+        expect_recipe do
+          aws_security_group "test_sg" do
             # We need to define a list of ports and its easier to use a method than
             # have to add a new number when changing this test
-            def counter()
+            def counter
               @ip_counter ||= 0
               @ip_counter += 1
             end
 
-            vpc 'test_vpc'
+            vpc "test_vpc"
             inbound_rules(
               "10.0.0.#{counter}/32" => { port_range: -1..-1, protocol: -1 },
               "10.0.0.#{counter}/32" => { port: -1, protocol: -1 },
@@ -287,10 +271,10 @@ describe Chef::Resource::AwsSecurityGroup do
               "10.0.0.#{counter}/32" => { ports: 1003..1003, protocol: -1 },
               "10.0.0.#{counter}/32" => { port_range: 1004..1005, protocol: -1 },
               "10.0.0.#{counter}/32" => { port_range: [1006, 1007, 1108], protocol: -1 },
-             # If the protocol isn't `-1` and you don't specify all the ports
-             # aws wants `port_range` to be nil
+              # If the protocol isn't `-1` and you don't specify all the ports
+              # aws wants `port_range` to be nil
               "10.0.0.#{counter}/32" => { ports: nil, protocol: :tcp },
-              "10.0.0.#{counter}/32" => { port_range: 0..65535, protocol: :udp },
+              "10.0.0.#{counter}/32" => { port_range: 0..65_535, protocol: :udp },
               "10.0.0.#{counter}/32" => { port_range: -1, protocol: :icmp },
               "10.0.0.#{counter}/32" => { port_range: 1011, protocol: :any },
               "10.0.0.#{counter}/32" => { port_range: 1012, protocol: nil },
@@ -298,25 +282,25 @@ describe Chef::Resource::AwsSecurityGroup do
               "10.0.0.#{counter}/32" => { port: 1014..1014 },
               "10.0.0.#{counter}/32" => { port: [1015, 1016, 1117] },
               "10.0.0.#{counter}/32" => { port: :icmp },
-              "10.0.0.#{counter}/32" => { port: 'tcp' },
+              "10.0.0.#{counter}/32" => { port: "tcp" },
               "10.0.0.#{counter}/32" => { port: nil },
               "10.0.0.#{counter}/32" => { protocol: -1 },
               "10.0.0.#{counter}/32" => { protocol: :any },
-              "10.0.0.#{counter}/32" => { protocol: 'UDP' },
+              "10.0.0.#{counter}/32" => { protocol: "UDP" },
               "10.0.0.#{counter}/32" => { protocol: nil },
               "10.0.0.#{counter}/32" => 1020,
               "10.0.0.#{counter}/32" => 1021..1023,
               "10.0.0.#{counter}/32" => [1024, 1025, 1125],
               "10.0.0.#{counter}/32" => :icmp,
-              "10.0.0.#{counter}/32" => 'Icmp',
+              "10.0.0.#{counter}/32" => "Icmp",
               "10.0.0.#{counter}/32" => :tcp,
-              "10.0.0.#{counter}/32" => 'UDP',
+              "10.0.0.#{counter}/32" => "UDP",
               "10.0.0.#{counter}/32" => nil,
               "10.0.0.#{counter}/32" => -1,
               "10.0.0.#{counter}/32" => :"-1",
               ["10.0.0.#{counter}/32", "10.0.0.#{counter}/32"] => :all,
               "10.0.0.#{counter}/32" => { port_range: 1..2, protocol: :icmp }
-              )
+            )
             outbound_rules(
               { port_range: -1..-1, protocol: -1 } => "10.0.0.#{counter}/32",
               { port: -1, protocol: -1 } => "10.0.0.#{counter}/32",
@@ -324,9 +308,9 @@ describe Chef::Resource::AwsSecurityGroup do
               { ports: 1003..1003, protocol: -1 } => "10.0.0.#{counter}/32",
               { port_range: 1004..1005, protocol: -1 } => "10.0.0.#{counter}/32",
               { port_range: [1006, 1007, 1108], protocol: -1 } => "10.0.0.#{counter}/32",
-        #       # If the protocol isn't `-1` and you don't specify all the ports
-        #       # aws wants `port_range` to be nil{ ports: nil, protocol: :tcp } => "10.0.0.#{counter}/32",
-              { port_range: 0..65535, protocol: :udp } => "10.0.0.#{counter}/32",
+              #       # If the protocol isn't `-1` and you don't specify all the ports
+              #       # aws wants `port_range` to be nil{ ports: nil, protocol: :tcp } => "10.0.0.#{counter}/32",
+              { port_range: 0..65_535, protocol: :udp } => "10.0.0.#{counter}/32",
               { port_range: -1, protocol: :icmp } => "10.0.0.#{counter}/32",
               { port_range: 1..2, protocol: :icmp } => "10.0.0.#{counter}/32",
               { port_range: 1011, protocol: :any } => "10.0.0.#{counter}/32",
@@ -335,255 +319,252 @@ describe Chef::Resource::AwsSecurityGroup do
               { port: 1014..1014 } => "10.0.0.#{counter}/32",
               { port: [1015, 1016, 1117] } => "10.0.0.#{counter}/32",
               { port: :icmp } => "10.0.0.#{counter}/32",
-              { port: 'tCp' } => "10.0.0.#{counter}/32",
+              { port: "tCp" } => "10.0.0.#{counter}/32",
               { port: nil } => "10.0.0.#{counter}/32",
               { protocol: -1 } => "10.0.0.#{counter}/32",
               { protocol: :any } => "10.0.0.#{counter}/32",
-              { protocol: 'UDP' } => "10.0.0.#{counter}/32",
+              { protocol: "UDP" } => "10.0.0.#{counter}/32",
               { protocol: nil } => "10.0.0.#{counter}/32",
               1020 => "10.0.0.#{counter}/32",
               1021..1023 => "10.0.0.#{counter}/32",
               [1024, 1025, 1125] => "10.0.0.#{counter}/32",
               :icmp => "10.0.0.#{counter}/32",
-              'Icmp' => "10.0.0.#{counter}/32",
+              "Icmp" => "10.0.0.#{counter}/32",
               :tcp => "10.0.0.#{counter}/32",
-              'UDP' => "10.0.0.#{counter}/32",
+              "UDP" => "10.0.0.#{counter}/32",
               nil => "10.0.0.#{counter}/32",
               -1 => "10.0.0.#{counter}/32",
               :"-1" => "10.0.0.#{counter}/32",
               :all => ["10.0.0.#{counter}/32", "10.0.0.#{counter}/32"]
-          )
+            )
           end
-          }.to create_an_aws_security_group('test_sg',
-            vpc_id: test_vpc.aws_object.id,
-            ip_permissions: [ 
-                              set_ip_pemissions_mock_object(from_port: 1125, to_port: 1125, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1025, to_port: 1025, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1012, to_port: 1012, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.11/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.7/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.16/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.17/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.21/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.27/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.30/32")], ip_protocol: "tcp"),
-                              # Note: Sometimes response ip_ranges array sequence changes and test fails
-                              # set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.16/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.17/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.21/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.27/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.30/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.7/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: -1, to_port: -1, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.9/32")], ip_protocol: "icmp"),
-                              set_ip_pemissions_mock_object(from_port: 1117, to_port: 1117, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1014, to_port: 1014, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.13/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.15/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.25/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.26/32")], ip_protocol: "icmp"),
-                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.20/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.28/32")], ip_protocol: "udp"),
-                              set_ip_pemissions_mock_object(from_port: 1013, to_port: 1013, ip_ranges: [ Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.12/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.1/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.2/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.3/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.4/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.5/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.6/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.10/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.18/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.19/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.29/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.31/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.32/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.33/32")], ip_protocol: "-1"),
-                              # Note: Sometimes response ip_ranges array sequence changes and test fails
-                              # set_ip_pemissions_mock_object(ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.1/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.10/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.18/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.19/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.2/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.29/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.3/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.31/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.32/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.33/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.4/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.5/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.6/32")], ip_protocol: "-1"),                              
-                              set_ip_pemissions_mock_object(from_port: 1016, to_port: 1016, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1024, to_port: 1024, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1, to_port: 2, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.34/32")], ip_protocol: "icmp"),
-                              set_ip_pemissions_mock_object(from_port: 1015, to_port: 1015, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1021, to_port: 1023, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.23/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1020, to_port: 1020, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.22/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 0, to_port: 65535, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.8/32")], ip_protocol: "udp")
-                            ],
-            ip_permissions_egress: [
-                                    set_ip_pemissions_mock_object(from_port: 1125, to_port: 1125, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1025, to_port: 1025, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1012, to_port: 1012, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.45/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.50/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.51/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.55/32"),Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.61/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.64/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: -1, to_port: -1, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.42/32")], ip_protocol: "icmp"),
-                                    set_ip_pemissions_mock_object(from_port: 1117, to_port: 1117, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1014, to_port: 1014, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.47/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.49/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.59/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.60/32")], ip_protocol: "icmp"),
-                                    set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.54/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.62/32")], ip_protocol: "udp"),
-                                    set_ip_pemissions_mock_object(from_port: 1013, to_port: 1013, ip_ranges: [ Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.46/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(ip_protocol: "-1", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.35/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.36/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.37/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.38/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.39/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.40/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.44/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.52/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.53/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.63/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.65/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.66/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.67/32") ]),
-                                    set_ip_pemissions_mock_object(from_port: 1016, to_port: 1016, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1024, to_port: 1024, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1, to_port: 2, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.43/32")], ip_protocol: "icmp"),
-                                    set_ip_pemissions_mock_object(from_port: 1015, to_port: 1015, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1021, to_port: 1023, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.57/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1020, to_port: 1020, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.56/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 0, to_port: 65535, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.41/32")], ip_protocol: "udp")
-                                   ] 
-          ).and be_idempotent
-      end      
+        end.to create_an_aws_security_group("test_sg",
+                                            vpc_id: test_vpc.aws_object.id,
+                                            ip_permissions: [
+                                              set_ip_pemissions_mock_object(from_port: 1125, to_port: 1125, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1025, to_port: 1025, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1012, to_port: 1012, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.11/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.7/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.16/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.17/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.21/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.27/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.30/32")], ip_protocol: "tcp"),
+                                              # Note: Sometimes response ip_ranges array sequence changes and test fails
+                                              # set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.16/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.17/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.21/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.27/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.30/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.7/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: -1, to_port: -1, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.9/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 1117, to_port: 1117, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1014, to_port: 1014, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.13/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.15/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.25/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.26/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.20/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.28/32")], ip_protocol: "udp"),
+                                              set_ip_pemissions_mock_object(from_port: 1013, to_port: 1013, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.12/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.1/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.2/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.3/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.4/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.5/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.6/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.10/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.18/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.19/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.29/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.31/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.32/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.33/32")], ip_protocol: "-1"),
+                                              # Note: Sometimes response ip_ranges array sequence changes and test fails
+                                              # set_ip_pemissions_mock_object(ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.1/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.10/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.18/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.19/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.2/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.29/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.3/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.31/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.32/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.33/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.4/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.5/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.6/32")], ip_protocol: "-1"),
+                                              set_ip_pemissions_mock_object(from_port: 1016, to_port: 1016, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1024, to_port: 1024, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1, to_port: 2, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.34/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 1015, to_port: 1015, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1021, to_port: 1023, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.23/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1020, to_port: 1020, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.22/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 65_535, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.8/32")], ip_protocol: "udp")
+                                            ],
+                                            ip_permissions_egress: [
+                                              set_ip_pemissions_mock_object(from_port: 1125, to_port: 1125, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1025, to_port: 1025, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1012, to_port: 1012, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.45/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.50/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.51/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.55/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.61/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.64/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: -1, to_port: -1, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.42/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 1117, to_port: 1117, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1014, to_port: 1014, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.47/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.49/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.59/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.60/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.54/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.62/32")], ip_protocol: "udp"),
+                                              set_ip_pemissions_mock_object(from_port: 1013, to_port: 1013, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.46/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(ip_protocol: "-1", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.35/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.36/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.37/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.38/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.39/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.40/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.44/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.52/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.53/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.63/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.65/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.66/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.67/32")]),
+                                              set_ip_pemissions_mock_object(from_port: 1016, to_port: 1016, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1024, to_port: 1024, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1, to_port: 2, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.43/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 1015, to_port: 1015, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1021, to_port: 1023, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.57/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1020, to_port: 1020, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.56/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 65_535, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.41/32")], ip_protocol: "udp")
+                                            ]).and be_idempotent
+      end
 
       it "can specify rules as a hash" do
-        expect_recipe {
-          aws_security_group 'test_sg' do
+        expect_recipe do
+          aws_security_group "test_sg" do
             # We need to define a list of ports and its easier to use a method than
             # have to add a new number when changing this test
-            def counter()
+            def counter
               @ip_counter ||= 0
               @ip_counter += 1
             end
 
-            vpc 'test_vpc'
+            vpc "test_vpc"
             inbound_rules([
-              { sources: "10.0.0.#{counter}/32", port_range: -1..-1, protocol: -1 },
-              { sources: "10.0.0.#{counter}/32", port: -1, protocol: -1 },
-              { sources: "10.0.0.#{counter}/32", port: 1002, protocol: -1 },
-              { sources: "10.0.0.#{counter}/32", ports: 1003..1003, protocol: -1 },
-              { sources: "10.0.0.#{counter}/32", port_range: 1004..1005, protocol: -1 },
-              { sources: "10.0.0.#{counter}/32", port_range: [1006, 1007, 1108], protocol: -1 },
-              # If the protocol isn't `-1` and you don't specify all the ports
-              # aws wants `port_range` to be nil
-              { sources: "10.0.0.#{counter}/32", ports: nil, protocol: :tcp },
-              { sources: "10.0.0.#{counter}/32", port_range: 0..65535, protocol: :udp },
-              { sources: "10.0.0.#{counter}/32", port_range: -1, protocol: :icmp },
-              { sources: "10.0.0.#{counter}/32", port_range: 1011, protocol: :any },
-              { sources: "10.0.0.#{counter}/32", port_range: 1012, protocol: nil },
-              { sources: "10.0.0.#{counter}/32", port: 1013 },
-              { sources: "10.0.0.#{counter}/32", port: 1014..1014 },
-              { sources: "10.0.0.#{counter}/32", port: [1015, 1016, 1117] },
-              { sources: "10.0.0.#{counter}/32", port: :icmp },
-              { sources: "10.0.0.#{counter}/32", port: 'tCp' },
-              { sources: "10.0.0.#{counter}/32", port: nil },
-              { sources: "10.0.0.#{counter}/32", protocol: -1 },
-              { sources: "10.0.0.#{counter}/32", protocol: :any },
-              { sources: "10.0.0.#{counter}/32", protocol: 'UDP' },
-              { sources: "10.0.0.#{counter}/32", protocol: nil },
-              { sources: "10.0.0.#{counter}/32", port_range: 1020 },
-              { sources: "10.0.0.#{counter}/32", port_range: 1021..1023 },
-              { sources: "10.0.0.#{counter}/32", port_range: [1024, 1025, 1125] },
-              { sources: "10.0.0.#{counter}/32", port_range: :icmp },
-              { sources: "10.0.0.#{counter}/32", port_range: 'Icmp' },
-              { sources: "10.0.0.#{counter}/32", port_range: :tcp },
-              { sources: "10.0.0.#{counter}/32", port_range: 'UDP' },
-              { sources: "10.0.0.#{counter}/32", port_range: nil },
-              { sources: "10.0.0.#{counter}/32", port_range: -1 },
-              { sources: "10.0.0.#{counter}/32", port_range: :"-1" },
-              { sources: ["10.0.0.#{counter}/32", "10.0.0.#{counter}/32"], port_range: :all },
-              { sources: "10.0.0.#{counter}/32", port_range: 1..2, protocol: :icmp }
-            ])
+                            { sources: "10.0.0.#{counter}/32", port_range: -1..-1, protocol: -1 },
+                            { sources: "10.0.0.#{counter}/32", port: -1, protocol: -1 },
+                            { sources: "10.0.0.#{counter}/32", port: 1002, protocol: -1 },
+                            { sources: "10.0.0.#{counter}/32", ports: 1003..1003, protocol: -1 },
+                            { sources: "10.0.0.#{counter}/32", port_range: 1004..1005, protocol: -1 },
+                            { sources: "10.0.0.#{counter}/32", port_range: [1006, 1007, 1108], protocol: -1 },
+                            # If the protocol isn't `-1` and you don't specify all the ports
+                            # aws wants `port_range` to be nil
+                            { sources: "10.0.0.#{counter}/32", ports: nil, protocol: :tcp },
+                            { sources: "10.0.0.#{counter}/32", port_range: 0..65_535, protocol: :udp },
+                            { sources: "10.0.0.#{counter}/32", port_range: -1, protocol: :icmp },
+                            { sources: "10.0.0.#{counter}/32", port_range: 1011, protocol: :any },
+                            { sources: "10.0.0.#{counter}/32", port_range: 1012, protocol: nil },
+                            { sources: "10.0.0.#{counter}/32", port: 1013 },
+                            { sources: "10.0.0.#{counter}/32", port: 1014..1014 },
+                            { sources: "10.0.0.#{counter}/32", port: [1015, 1016, 1117] },
+                            { sources: "10.0.0.#{counter}/32", port: :icmp },
+                            { sources: "10.0.0.#{counter}/32", port: "tCp" },
+                            { sources: "10.0.0.#{counter}/32", port: nil },
+                            { sources: "10.0.0.#{counter}/32", protocol: -1 },
+                            { sources: "10.0.0.#{counter}/32", protocol: :any },
+                            { sources: "10.0.0.#{counter}/32", protocol: "UDP" },
+                            { sources: "10.0.0.#{counter}/32", protocol: nil },
+                            { sources: "10.0.0.#{counter}/32", port_range: 1020 },
+                            { sources: "10.0.0.#{counter}/32", port_range: 1021..1023 },
+                            { sources: "10.0.0.#{counter}/32", port_range: [1024, 1025, 1125] },
+                            { sources: "10.0.0.#{counter}/32", port_range: :icmp },
+                            { sources: "10.0.0.#{counter}/32", port_range: "Icmp" },
+                            { sources: "10.0.0.#{counter}/32", port_range: :tcp },
+                            { sources: "10.0.0.#{counter}/32", port_range: "UDP" },
+                            { sources: "10.0.0.#{counter}/32", port_range: nil },
+                            { sources: "10.0.0.#{counter}/32", port_range: -1 },
+                            { sources: "10.0.0.#{counter}/32", port_range: :"-1" },
+                            { sources: ["10.0.0.#{counter}/32", "10.0.0.#{counter}/32"], port_range: :all },
+                            { sources: "10.0.0.#{counter}/32", port_range: 1..2, protocol: :icmp }
+                          ])
             outbound_rules([
-              { port_range: -1..-1, protocol: -1, destinations: "10.0.0.#{counter}/32" },
-              { port: -1, protocol: -1, destinations: "10.0.0.#{counter}/32" },
-              { port: 1002, protocol: -1, destinations: "10.0.0.#{counter}/32" },
-              { ports: 1003..1003, protocol: -1, destinations: "10.0.0.#{counter}/32" },
-              { port_range: 1004..1005, protocol: -1, destinations: "10.0.0.#{counter}/32" },
-              { port_range: [1006, 1007, 1108], protocol: -1, destinations: "10.0.0.#{counter}/32" },
-              # If the protocol isn't `-1` and you don't specify all the ports
-              # aws wants `port_range` to be nil{ ports: nil, protocol: :tcp } => "10.0.0.#{counter}/32",
-              { port_range: 0..65535, protocol: :udp, destinations: "10.0.0.#{counter}/32" },
-              { port_range: -1, protocol: :icmp, destinations: "10.0.0.#{counter}/32" },
-              { port_range: 1..2, protocol: :icmp, destinations: "10.0.0.#{counter}/32" },
-              { port_range: 1011, protocol: :any, destinations: "10.0.0.#{counter}/32" },
-              { port_range: 1012, protocol: nil, destinations: "10.0.0.#{counter}/32" },
-              { port: 1013, destinations: "10.0.0.#{counter}/32" },
-              { port: 1014..1014, destinations: "10.0.0.#{counter}/32" },
-              { port: [1015, 1016, 1117], destinations: "10.0.0.#{counter}/32" },
-              { port: :icmp, destinations: "10.0.0.#{counter}/32" },
-              { port: 'tCp', destinations: "10.0.0.#{counter}/32" },
-              { port: nil, destinations: "10.0.0.#{counter}/32" },
-              { protocol: -1, destinations: "10.0.0.#{counter}/32" },
-              { protocol: :any, destinations: "10.0.0.#{counter}/32" },
-              { protocol: 'UDP', destinations: "10.0.0.#{counter}/32" },
-              { protocol: nil, destinations: "10.0.0.#{counter}/32" },
-              { port_range: 1020, destinations: "10.0.0.#{counter}/32" },
-              { port_range: 1021..1023, destinations: "10.0.0.#{counter}/32" },
-              { port_range: [1024, 1025, 1125], destinations: "10.0.0.#{counter}/32" },
-              { port_range: :icmp, destinations: "10.0.0.#{counter}/32" },
-              { port_range: 'Icmp', destinations: "10.0.0.#{counter}/32" },
-              { port_range: :tcp, destinations: "10.0.0.#{counter}/32" },
-              { port_range: 'UDP', destinations: "10.0.0.#{counter}/32" },
-              { port_range: nil, destinations: "10.0.0.#{counter}/32" },
-              { port_range: -1, destinations: "10.0.0.#{counter}/32" },
-              { port_range: :"-1", destinations: "10.0.0.#{counter}/32" },
-              { port_range: :all, destinations: ["10.0.0.#{counter}/32", "10.0.0.#{counter}/32"] },
-            ])
+                             { port_range: -1..-1, protocol: -1, destinations: "10.0.0.#{counter}/32" },
+                             { port: -1, protocol: -1, destinations: "10.0.0.#{counter}/32" },
+                             { port: 1002, protocol: -1, destinations: "10.0.0.#{counter}/32" },
+                             { ports: 1003..1003, protocol: -1, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: 1004..1005, protocol: -1, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: [1006, 1007, 1108], protocol: -1, destinations: "10.0.0.#{counter}/32" },
+                             # If the protocol isn't `-1` and you don't specify all the ports
+                             # aws wants `port_range` to be nil{ ports: nil, protocol: :tcp } => "10.0.0.#{counter}/32",
+                             { port_range: 0..65_535, protocol: :udp, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: -1, protocol: :icmp, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: 1..2, protocol: :icmp, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: 1011, protocol: :any, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: 1012, protocol: nil, destinations: "10.0.0.#{counter}/32" },
+                             { port: 1013, destinations: "10.0.0.#{counter}/32" },
+                             { port: 1014..1014, destinations: "10.0.0.#{counter}/32" },
+                             { port: [1015, 1016, 1117], destinations: "10.0.0.#{counter}/32" },
+                             { port: :icmp, destinations: "10.0.0.#{counter}/32" },
+                             { port: "tCp", destinations: "10.0.0.#{counter}/32" },
+                             { port: nil, destinations: "10.0.0.#{counter}/32" },
+                             { protocol: -1, destinations: "10.0.0.#{counter}/32" },
+                             { protocol: :any, destinations: "10.0.0.#{counter}/32" },
+                             { protocol: "UDP", destinations: "10.0.0.#{counter}/32" },
+                             { protocol: nil, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: 1020, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: 1021..1023, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: [1024, 1025, 1125], destinations: "10.0.0.#{counter}/32" },
+                             { port_range: :icmp, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: "Icmp", destinations: "10.0.0.#{counter}/32" },
+                             { port_range: :tcp, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: "UDP", destinations: "10.0.0.#{counter}/32" },
+                             { port_range: nil, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: -1, destinations: "10.0.0.#{counter}/32" },
+                             { port_range: :"-1", destinations: "10.0.0.#{counter}/32" },
+                             { port_range: :all, destinations: ["10.0.0.#{counter}/32", "10.0.0.#{counter}/32"] }
+                           ])
           end
-        }.to create_an_aws_security_group('test_sg',
-          vpc_id: test_vpc.aws_object.id,
-          ip_permissions: [ 
-                              set_ip_pemissions_mock_object(from_port: 1125, to_port: 1125, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1025, to_port: 1025, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1012, to_port: 1012, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.11/32")], ip_protocol: "tcp"),
-                              # Note: Sometimes response ip_ranges array sequence changes and test fails
-                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.7/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.16/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.17/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.21/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.27/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.29/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.30/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: -1, to_port: -1, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.9/32")], ip_protocol: "icmp"),
-                              set_ip_pemissions_mock_object(from_port: 1117, to_port: 1117, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1014, to_port: 1014, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.13/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.15/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.25/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.26/32")], ip_protocol: "icmp"),
-                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.20/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.28/32")], ip_protocol: "udp"),
-                              set_ip_pemissions_mock_object(from_port: 1013, to_port: 1013, ip_ranges: [ Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.12/32")], ip_protocol: "tcp"),
-                              # Note: Sometimes response ip_ranges array sequence changes and test fails
-                              set_ip_pemissions_mock_object(ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.1/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.2/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.3/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.4/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.5/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.6/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.10/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.18/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.19/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.31/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.32/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.33/32")], ip_protocol: "-1"),
-                              set_ip_pemissions_mock_object(from_port: 1016, to_port: 1016, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1024, to_port: 1024, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1, to_port: 2, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.34/32")], ip_protocol: "icmp"),
-                              set_ip_pemissions_mock_object(from_port: 1015, to_port: 1015, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1021, to_port: 1023, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.23/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 1020, to_port: 1020, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.22/32")], ip_protocol: "tcp"),
-                              set_ip_pemissions_mock_object(from_port: 0, to_port: 65535, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.8/32")], ip_protocol: "udp")                              
-                            ],
-            ip_permissions_egress: [
-                                    set_ip_pemissions_mock_object(from_port: 1125, to_port: 1125, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1025, to_port: 1025, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1012, to_port: 1012, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.45/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.50/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.51/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.55/32"),Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.61/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.63/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.64/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: -1, to_port: -1, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.42/32")], ip_protocol: "icmp"),
-                                    set_ip_pemissions_mock_object(from_port: 1117, to_port: 1117, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1014, to_port: 1014, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.47/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.49/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.59/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.60/32")], ip_protocol: "icmp"),
-                                    set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.54/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.62/32")], ip_protocol: "udp"),
-                                    set_ip_pemissions_mock_object(from_port: 1013, to_port: 1013, ip_ranges: [ Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.46/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(ip_protocol: "-1", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.35/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.36/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.37/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.38/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.39/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.40/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.44/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.52/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.53/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.65/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.66/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.67/32") ]),
-                                    set_ip_pemissions_mock_object(from_port: 1016, to_port: 1016, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1024, to_port: 1024, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1, to_port: 2, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.43/32")], ip_protocol: "icmp"),
-                                    set_ip_pemissions_mock_object(from_port: 1015, to_port: 1015, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1021, to_port: 1023, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.57/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 1020, to_port: 1020, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.56/32")], ip_protocol: "tcp"),
-                                    set_ip_pemissions_mock_object(from_port: 0, to_port: 65535, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.41/32")], ip_protocol: "udp")
-                                   ]
-        ).and be_idempotent
+        end.to create_an_aws_security_group("test_sg",
+                                            vpc_id: test_vpc.aws_object.id,
+                                            ip_permissions: [
+                                              set_ip_pemissions_mock_object(from_port: 1125, to_port: 1125, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1025, to_port: 1025, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1012, to_port: 1012, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.11/32")], ip_protocol: "tcp"),
+                                              # Note: Sometimes response ip_ranges array sequence changes and test fails
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.7/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.16/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.17/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.21/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.27/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.29/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.30/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: -1, to_port: -1, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.9/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 1117, to_port: 1117, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1014, to_port: 1014, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.13/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.15/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.25/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.26/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.20/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.28/32")], ip_protocol: "udp"),
+                                              set_ip_pemissions_mock_object(from_port: 1013, to_port: 1013, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.12/32")], ip_protocol: "tcp"),
+                                              # Note: Sometimes response ip_ranges array sequence changes and test fails
+                                              set_ip_pemissions_mock_object(ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.1/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.2/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.3/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.4/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.5/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.6/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.10/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.18/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.19/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.31/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.32/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.33/32")], ip_protocol: "-1"),
+                                              set_ip_pemissions_mock_object(from_port: 1016, to_port: 1016, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1024, to_port: 1024, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.24/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1, to_port: 2, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.34/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 1015, to_port: 1015, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.14/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1021, to_port: 1023, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.23/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1020, to_port: 1020, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.22/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 65_535, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.8/32")], ip_protocol: "udp")
+                                            ],
+                                            ip_permissions_egress: [
+                                              set_ip_pemissions_mock_object(from_port: 1125, to_port: 1125, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1025, to_port: 1025, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1012, to_port: 1012, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.45/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.50/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.51/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.55/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.61/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.63/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.64/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: -1, to_port: -1, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.42/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 1117, to_port: 1117, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1014, to_port: 1014, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.47/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.49/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.59/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.60/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 0, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.54/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.62/32")], ip_protocol: "udp"),
+                                              set_ip_pemissions_mock_object(from_port: 1013, to_port: 1013, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.46/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(ip_protocol: "-1", ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.35/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.36/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.37/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.38/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.39/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.40/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.44/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.52/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.53/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.65/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.66/32"), Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.67/32")]),
+                                              set_ip_pemissions_mock_object(from_port: 1016, to_port: 1016, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1024, to_port: 1024, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.58/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1, to_port: 2, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.43/32")], ip_protocol: "icmp"),
+                                              set_ip_pemissions_mock_object(from_port: 1015, to_port: 1015, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.48/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1021, to_port: 1023, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.57/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 1020, to_port: 1020, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.56/32")], ip_protocol: "tcp"),
+                                              set_ip_pemissions_mock_object(from_port: 0, to_port: 65_535, ip_ranges: [Aws::EC2::Types::IpRange.new(cidr_ip: "10.0.0.41/32")], ip_protocol: "udp")
+                                            ]).and be_idempotent
       end
     end
 
     with_aws "when narrowing from multiple VPCs" do
-      aws_vpc 'test_vpc1' do
-        cidr_block '10.0.0.0/24'
+      aws_vpc "test_vpc1" do
+        cidr_block "10.0.0.0/24"
       end
 
-      aws_vpc 'test_vpc2' do
-        cidr_block '10.0.0.0/24'
+      aws_vpc "test_vpc2" do
+        cidr_block "10.0.0.0/24"
       end
-      aws_security_group 'test_sg' do
-        vpc 'test_vpc1'
+      aws_security_group "test_sg" do
+        vpc "test_vpc1"
       end
-      aws_security_group 'test_sg' do
-        vpc 'test_vpc2'
+      aws_security_group "test_sg" do
+        vpc "test_vpc2"
       end
 
       # We need to manually delete these because the auto-delete
       # won't specify VPC
       after(:context) do
-        converge {
-          aws_security_group 'test_sg' do
-            vpc 'test_vpc1'
+        converge do
+          aws_security_group "test_sg" do
+            vpc "test_vpc1"
             action :destroy
           end
-          aws_security_group 'test_sg' do
-            vpc 'test_vpc2'
+          aws_security_group "test_sg" do
+            vpc "test_vpc2"
             action :destroy
           end
-        }
+        end
       end
 
       it "raises an error if it finds multiple security groups" do
-        expect_converge {
-          r = aws_security_group 'test_sg'
+        expect_converge do
+          r = aws_security_group "test_sg"
           r.aws_object
-        }.to raise_error(::Chef::Provisioning::AWSDriver::Exceptions::MultipleSecurityGroupError)
+        end.to raise_error(::Chef::Provisioning::AWSDriver::Exceptions::MultipleSecurityGroupError)
       end
 
       it "correctly returns the security group when vpc is specified" do
         aws_obj = nil
-        expect_converge {
-          r = aws_security_group 'test_sg' do
-            vpc 'test_vpc1'
+        expect_converge do
+          r = aws_security_group "test_sg" do
+            vpc "test_vpc1"
           end
           aws_obj = r.aws_object
-        }.to_not raise_error
-        expect(aws_obj.vpc_id).to eq(driver.ec2.describe_vpcs({filters: [{name: "tag-value", values: ["test_vpc1"]}]})[:vpcs].first.vpc_id)
+        end.to_not raise_error
+        expect(aws_obj.vpc_id).to eq(driver.ec2.describe_vpcs(filters: [{ name: "tag-value", values: ["test_vpc1"] }])[:vpcs].first.vpc_id)
       end
     end
-
   end
 end