cmonson_2ndwatch_awspec 0.85.3

data/lib/awspec/stub/iam_group.rb

@@ -0,0 +1,90 @@
+Aws.config[:iam] = {
+  stub_responses: {
+    list_users: {
+      users: [
+        path: '/',
+        user_name: 'my-iam-user',
+        user_id: 'ABCDEFGHI1234556890',
+        arn: 'arn:aws:iam::123456789012:user/my-iam-user',
+        create_date: Time.new(2015, 1, 2, 10, 00, 00, '+00:00')
+      ]
+    },
+    list_groups: {
+      groups: [
+        path: '/',
+        group_name: 'my-iam-group',
+        group_id: 'GABCDEFGHI123455689',
+        arn: 'arn:aws:iam::123456789012:group/my-iam-group',
+        create_date: Time.new(2015, 1, 2, 11, 00, 00, '+00:00')
+      ]
+    },
+    list_groups_for_user: {
+      groups: [
+        {
+          path: '/',
+          group_name: 'my-iam-group',
+          group_id: 'GABCDEFGHI123455689',
+          arn: 'arn:aws:iam::123456789012:group/my-iam-group',
+          create_date: Time.new(2015, 1, 2, 12, 00, 00, '+00:00')
+        }
+      ]
+    },
+    list_attached_group_policies: {
+      attached_policies: [
+        {
+          policy_arn: 'arn:aws:iam::aws:policy/ReadOnlyAccess',
+          policy_name: 'ReadOnlyAccess'
+        }
+      ],
+      is_truncated: false,
+      marker: nil
+    },
+    list_group_policies: {
+      policy_names: [
+        'InlineEC2FullAccess'
+      ],
+      is_truncated: false,
+      marker: nil
+    },
+    get_group: {
+      group: {
+        path: '/',
+        group_name: 'my-iam-group',
+        group_id: 'GABCDEFGHI123455689',
+        arn: 'arn:aws:iam::123456789012:group/my-iam-group',
+        create_date: Time.new(2015, 1, 2, 10, 00, 00, '+00:00')
+      },
+      users: [
+        {
+          path: '/',
+          user_name: 'my-iam-user',
+          user_id: 'ABCDEFGHI1234556890',
+          arn: 'arn:aws:iam::123456789012:user/my-iam-user',
+          create_date: Time.new(2015, 1, 2, 10, 00, 00, '+00:00')
+        }
+      ]
+    },
+    get_group_policy: {
+      group_name: 'my-iam-group',
+      policy_name: 'InlineEC2FullAccess',
+      policy_document: '{"Statement": [{"Action": "ec2:*","Effect": "Allow",' \
+                       '"Resource": "*"},{"Effect": "Allow","Action": "elasticloadbalancing:*",' \
+                       '"Resource": "*"},{"Effect": "Allow","Action": "cloudwatch:*",' \
+                       '"Resource": "*"},{"Effect": "Allow","Action": "autoscaling:*",' \
+                       '"Resource": "*"}]}'
+    },
+    simulate_principal_policy: {
+      evaluation_results: [
+        {
+          eval_action_name: 'ec2:DescribeInstances',
+          eval_resource_name: '*',
+          eval_decision: 'allowed',
+          matched_statements: [
+          ]
+        }
+      ],
+      is_truncated: false,
+      marker: nil
+    }
+  }
+}

data/lib/awspec/stub/iam_policy.rb

@@ -0,0 +1,70 @@
+Aws.config[:iam] = {
+  stub_responses: {
+    list_users: {
+      users: [
+        path: '/',
+        user_name: 'my-iam-user',
+        user_id: 'ABCDEFGHI1234556890',
+        arn: 'arn:aws:iam::123456789012:user/my-iam-user',
+        create_date: Time.local(2015)
+      ]
+    },
+    list_groups: {
+      groups: [
+        path: '/',
+        group_name: 'my-iam-group',
+        group_id: 'GABCDEFGHI123455689',
+        arn: 'arn:aws:iam::123456789012:group/my-iam-group',
+        create_date: Time.local(2015)
+      ]
+    },
+    list_roles: {
+      roles: [
+        path: '/',
+        role_name: 'HelloIAmGodRole',
+        role_id: 'RABCDEFGHI123455689',
+        arn: 'arn:aws:iam::123456789012:role/HelloIAmGodRole',
+        create_date: Time.local(2015)
+      ]
+    },
+    list_policies: {
+      policies: [
+        {
+          attachment_count: 1,
+          arn: 'arn:aws:iam::aws:policy/my-iam-policy',
+          is_attachable: true,
+          policy_id: 'PABCDEFGHI123455689',
+          policy_name: 'my-iam-policy',
+          update_date: Time.new(2015, 1, 2, 10, 00, 00, '+00:00')
+        },
+        {
+          attachment_count: 1,
+          arn: 'arn:aws:iam::aws:policy/AmazonAPIGatewayAdministrator',
+          is_attachable: true,
+          policy_id: 'PABCDEFGHI123455688',
+          policy_name: 'AmazonAPIGatewayAdministrator',
+          update_date: Time.new(2015, 7, 9, 17, 34, 45, '+00:00')
+        },
+        {
+          attachment_count: 1,
+          arn: 'arn:aws:iam::aws:policy/service-role/AmazonEC2RoleforDataPipelineRole',
+          is_attachable: true,
+          policy_id: 'PABCDEFGHI123455687',
+          policy_name: 'AmazonEC2RoleforDataPipelineRole',
+          update_date: Time.new(2015, 3, 19, 19, 21, 14, '+00:00')
+        }
+      ]
+    },
+    list_entities_for_policy: {
+      policy_roles: [
+        { role_name: 'HelloIAmGodRole' }
+      ],
+      policy_users: [
+        { user_name: 'my-iam-user' }
+      ],
+      policy_groups: [
+        { group_name: 'my-iam-group' }
+      ]
+    }
+  }
+}

data/lib/awspec/stub/iam_role.rb

@@ -0,0 +1,60 @@
+Aws.config[:iam] = {
+  stub_responses: {
+    list_roles: {
+      roles: [
+        path: '/',
+        role_name: 'my-iam-role',
+        role_id: 'RABCDEFGHI123455689',
+        arn: 'arn:aws:iam::123456789012:role/my-iam-role',
+        create_date: Time.new(2015, 1, 2, 9, 00, 00, '+00:00')
+      ]
+    },
+    list_attached_role_policies: {
+      attached_policies: [
+        {
+          policy_arn: 'arn:aws:iam::aws:policy/ReadOnlyAccess',
+          policy_name: 'ReadOnlyAccess'
+        }
+      ],
+      is_truncated: false,
+      marker: nil
+    },
+    list_role_policies: {
+      policy_names: [
+        'AllowS3BucketAccess'
+      ],
+      is_truncated: false,
+      marker: nil
+    },
+    get_role: {
+      role: {
+        path: '/',
+        role_name: 'my-iam-role',
+        role_id: 'RABCDEFGHI123455689',
+        arn: 'arn:aws:iam::123456789012:role/my-iam-role',
+        create_date: Time.new(2015, 1, 2, 9, 00, 00, '+00:00')
+      }
+    },
+    get_role_policy: {
+      role_name: 'my-iam-role',
+      policy_name: 'AllowS3BucketAccess',
+      policy_document: '{"Statement": [{"Action": ["s3:ListAllMyBuckets"],' \
+                       '"Effect": "Allow","Resource": "arn:aws:s3:::*"},' \
+                       '{"Action": "s3:*","Effect": "Allow","Resource":' \
+                       '["arn:aws:s3:::my-bucket", "arn:aws:s3:::my-bucket/*"]}]}'
+    },
+    simulate_principal_policy: {
+      evaluation_results: [
+        {
+          eval_action_name: 'ec2:DescribeInstances',
+          eval_resource_name: '*',
+          eval_decision: 'allowed',
+          matched_statements: [
+          ]
+        }
+      ],
+      is_truncated: false,
+      marker: nil
+    }
+  }
+}

data/lib/awspec/stub/iam_user.rb

@@ -0,0 +1,71 @@
+Aws.config[:iam] = {
+  stub_responses: {
+    list_users: {
+      users: [
+        path: '/',
+        user_name: 'my-iam-user',
+        user_id: 'ABCDEFGHI1234556890',
+        arn: 'arn:aws:iam::123456789012:user/my-iam-user',
+        create_date: Time.new(2015, 1, 2, 10, 00, 00, '+00:00')
+      ]
+    },
+    list_groups_for_user: {
+      groups: [
+        {
+          path: '/',
+          group_name: 'my-iam-group',
+          group_id: 'GABCDEFGHI123455689',
+          arn: 'arn:aws:iam::123456789012:group/my-iam-group',
+          create_date: Time.new(2015, 1, 2, 10, 00, 00, '+00:00')
+        }
+      ]
+    },
+    list_attached_user_policies: {
+      attached_policies: [
+        {
+          policy_arn: 'arn:aws:iam::aws:policy/ReadOnlyAccess',
+          policy_name: 'ReadOnlyAccess'
+        }
+      ],
+      is_truncated: false,
+      marker: nil
+    },
+    list_user_policies: {
+      policy_names: [
+        'AllowS3BucketAccess'
+      ],
+      is_truncated: false,
+      marker: nil
+    },
+    get_user: {
+      user: {
+        path: '/',
+        user_name: 'my-iam-user',
+        user_id: 'ABCDEFGHI1234556890',
+        arn: 'arn:aws:iam::123456789012:user/my-iam-user',
+        create_date: Time.new(2015, 1, 2, 10, 00, 00, '+00:00')
+      }
+    },
+    get_user_policy: {
+      user_name: 'my-iam-user',
+      policy_name: 'AllowS3BucketAccess',
+      policy_document: '{"Statement": [{"Action": ["s3:ListAllMyBuckets"],' \
+                       '"Effect": "Allow","Resource": "arn:aws:s3:::*"},' \
+                       '{"Action": "s3:*","Effect": "Allow","Resource":' \
+                       '["arn:aws:s3:::my-bucket", "arn:aws:s3:::my-bucket/*"]}]}'
+    },
+    simulate_principal_policy: {
+      evaluation_results: [
+        {
+          eval_action_name: 'ec2:DescribeInstances',
+          eval_resource_name: '*',
+          eval_decision: 'allowed',
+          matched_statements: [
+          ]
+        }
+      ],
+      is_truncated: false,
+      marker: nil
+    }
+  }
+}

data/lib/awspec/stub/internet_gateway.rb

@@ -0,0 +1,36 @@
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_internet_gateways: {
+      internet_gateways: [
+        internet_gateway_id: 'igw-1ab2cd3e',
+        attachments: [
+          {
+            vpc_id: 'vpc-ab123cde',
+            state: 'available'
+          }
+        ],
+        tags: [
+          {
+            key: 'Name',
+            value: 'my-internet-gateway'
+          }
+        ]
+      ]
+    },
+    describe_vpcs: {
+      vpcs: [
+        {
+          vpc_id: 'vpc-ab123cde',
+          state: 'available',
+          cidr_block: '10.0.0.0/16',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-vpc'
+            }
+          ]
+        }
+      ]
+    }
+  }
+}

data/lib/awspec/stub/kms.rb

@@ -0,0 +1,71 @@
+Aws.config[:kms] = {
+  stub_responses: {
+    list_aliases: {
+      aliases: [
+        {
+          alias_arn: 'arn:aws:kms:us-east-1:1234567890:alias/my-kms-key',
+          alias_name: 'alias/my-kms-key',
+          target_key_id: 'b9989d41-eeaa-401f-8616-00546948aa92'
+        }
+      ]
+    },
+    describe_key: {
+      key_metadata: {
+        key_id:  'b9989d41-eeaa-401f-8616-00546948aa92',
+        description: '',
+        enabled: true,
+        key_usage: 'ENCRYPT_DECRYPT',
+        key_state: 'Enabled',
+        creation_date: Time.new(2015, 1, 2, 10, 10, 00, '+00:00'),
+        arn: 'arn:aws:kms:us-east-1:1234567890:key/b9989d41-eeaa-401f-8616-00546948aa92',
+        aws_account_id: '1234567890'
+      }
+    },
+    get_key_policy: {
+      policy: <<-DOC
+{
+  "Version" : "2012-10-17",
+  "Id" : "key-consolepolicy-2",
+  "Statement" : [ {
+    "Sid" : "Enable IAM User Permissions",
+    "Effect" : "Allow",
+    "Principal" : {
+      "AWS" : "arn:aws:iam::1234567890:root"
+    },
+    "Action" : "kms:*",
+    "Resource" : "*"
+  }, {
+    "Sid" : "Allow access for Key Administrators",
+    "Effect" : "Allow",
+    "Principal" : {
+      "AWS" : "arn:aws:iam::1234567890:user/test-user"
+    },
+    "Action" : [ "kms:Create*", "kms:Describe*", "kms:Enable*", "kms:List*", "kms:Put*", "kms:Update*", "kms:Revoke*", "kms:Disable*", "kms:Get*", "kms:Delete*", "kms:ScheduleKeyDeletion", "kms:CancelKeyDeletion" ],
+    "Resource" : "*"
+  }, {
+    "Sid" : "Allow use of the key",
+    "Effect" : "Allow",
+    "Principal" : {
+      "AWS" : [ "arn:aws:iam::1234567890:user/test-user", "arn:aws:iam::1234567890:role/test-role" ]
+    },
+    "Action" : [ "kms:Encrypt", "kms:Decrypt", "kms:ReEncrypt*", "kms:GenerateDataKey*", "kms:DescribeKey" ],
+    "Resource" : "*"
+  }, {
+    "Sid" : "Allow attachment of persistent resources",
+    "Effect" : "Allow",
+    "Principal" : {
+      "AWS" : [ "arn:aws:iam::1234567890:user/test-user", "arn:aws:iam::1234567890:role/test-role" ]
+    },
+    "Action" : [ "kms:CreateGrant", "kms:ListGrants", "kms:RevokeGrant" ],
+    "Resource" : "*",
+    "Condition" : {
+      "Bool" : {
+        "kms:GrantIsForAWSResource" : "true"
+      }
+    }
+  } ]
+}
+DOC
+    }
+  }
+}

data/lib/awspec/stub/lambda.rb

@@ -0,0 +1,21 @@
+Aws.config[:lambda] = {
+  stub_responses: {
+    list_functions: {
+      functions: [
+        {
+          function_name: 'my-lambda-function-name',
+          function_arn: 'arn:aws:lambda:us-east-1:123456789012:function:my-lambda-function-name',
+          description: 'My Lambda Function',
+          runtime: 'python2.7',
+          handler: 'lambda_function.lambda_handler',
+          timeout: 5,
+          memory_size: 256,
+          code_size: 1234
+        }
+      ]
+    },
+    list_event_source_mappings: {
+      # @todo
+    }
+  }
+}

data/lib/awspec/stub/launch_configuration.rb

@@ -0,0 +1,56 @@
+Aws.config[:autoscaling] = {
+  stub_responses: {
+    describe_launch_configurations: {
+      launch_configurations: [
+        launch_configuration_name: 'my-lc',
+        launch_configuration_arn:
+          'arn:aws:autoscaling:ap-northeast-1:123456789012:launchConfiguration:\
+1a11111b-22f2-3e33-444-55cf55e55555:launchConfigurationName/my-lc',
+        image_id: 'ami-abc12def',
+        key_name: 'my_key_pair',
+        security_groups: ['sg-1a2b3cd4'],
+        classic_link_vpc_id: nil,
+        classic_link_vpc_security_groups: [],
+        user_data: '',
+        instance_type: 'c3.large',
+        kernel_id: '',
+        ramdisk_id: '',
+        block_device_mappings: [
+          {
+            virtual_name: 'ephemeral0',
+            device_name: '/dev/sdf'
+          }
+        ],
+        instance_monitoring: {
+          enabled: true
+        },
+        spot_price: nil,
+        iam_instance_profile: nil,
+        created_time: Time.local(2015),
+        ebs_optimized: false,
+        associate_public_ip_address: true,
+        placement_tenancy: nil
+      ],
+      next_token: nil
+    }
+  }
+}
+
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_security_groups: {
+      security_groups: [
+        {
+          group_id: 'sg-1a2b3cd4',
+          group_name: 'my-security-group-name',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-security-group-tag-name'
+            }
+          ]
+        }
+      ]
+    }
+  }
+}