cmonson_2ndwatch_awspec 0.85.3

data/lib/awspec/stub/sqs.rb

@@ -0,0 +1,25 @@
+Aws.config[:sqs] = {
+  stub_responses: {
+    list_queues: {
+      queue_urls: [
+        'https://sqs.ap-northeast-1.amazonaws.com/123456789012/my-queue',
+        'https://sqs.ap-northeast-1.amazonaws.com/123456789012/my-queue2'
+      ]
+    },
+    get_queue_attributes: {
+      attributes: {
+        'QueueArn' => 'arn:aws:sqs:ap-northeast-1:123456789012:my-queue',
+        'ApproximateNumberOfMessages' => '0',
+        'ApproximateNumberOfMessagesNotVisible' => '0',
+        'ApproximateNumberOfMessagesDelayed' => '0',
+        'CreatedTimestamp' => '1499422322',
+        'LastModifiedTimestamp' => '1499422322',
+        'VisibilityTimeout' => '30',
+        'MaximumMessageSize' => '262144',
+        'MessageRetentionPeriod' => '345600',
+        'DelaySeconds' => '0',
+        'ReceiveMessageWaitTimeSeconds' => '0'
+      }
+    }
+  }
+}

data/lib/awspec/stub/subnet.rb

@@ -0,0 +1,33 @@
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_vpcs: {
+      vpcs: [
+        {
+          vpc_id: 'vpc-ab123cde',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-vpc'
+            }
+          ]
+        }
+      ]
+    },
+    describe_subnets: {
+      subnets: [
+        {
+          state: 'available',
+          vpc_id: 'vpc-ab123cde',
+          subnet_id: 'subnet-1234a567',
+          cidr_block: '10.0.1.0/24',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-subnet'
+            }
+          ]
+        }
+      ]
+    }
+  }
+}

data/lib/awspec/stub/vpc.rb

@@ -0,0 +1,69 @@
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_vpcs: {
+      vpcs: [
+        {
+          vpc_id: 'vpc-ab123cde',
+          state: 'available',
+          cidr_block: '10.0.0.0/16',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-vpc'
+            }
+          ]
+        }
+      ]
+    },
+    describe_route_tables: {
+      route_tables: [
+        {
+          route_table_id: 'rtb-a12bcd34',
+          vpc_id: 'vpc-ab123cde',
+          routes: [
+            {
+              destination_cidr_block: '10.0.0.0/16',
+              destination_prefix_list_id: nil,
+              gateway_id: 'local',
+              instance_id: nil,
+              instance_owner_id: nil,
+              network_interface_id: nil,
+              vpc_peering_connection_id: nil,
+              state: 'active'
+            },
+            {
+              destination_cidr_block: '0.0.0.0/0',
+              destination_prefix_list_id: nil,
+              gateway_id: 'igw-1ab2345c',
+              instance_id: nil,
+              instance_owner_id: nil,
+              network_interface_id: nil,
+              vpc_peering_connection_id: nil,
+              state: 'active'
+            }
+          ],
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-route-table'
+            }
+          ]
+        }
+      ]
+    },
+    describe_network_acls: {
+      network_acls: [
+        {
+          network_acl_id: 'acl-1abc2d3e',
+          vpc_id: 'vpc-ab123cde',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-network-acl'
+            }
+          ]
+        }
+      ]
+    }
+  }
+}

data/lib/awspec/stub/vpn_connection.rb

@@ -0,0 +1,20 @@
+# rubocop:disable all
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_vpn_connections: {
+      vpn_connections: [
+        {
+          vpn_connection_id: 'vpn-cg5692g4',
+          customer_gateway_id: 'cgw-cg5692g4',
+          vpn_gateway_id: 'vgw-cg5692g4',
+          state: 'available',
+          type: "ipsec.1",
+          tags: [
+            key: 'Name',
+            value: 'my-vpn'
+          ]
+        }
+      ]
+    }
+  }
+}

data/lib/awspec/stub/vpn_gateway.rb

@@ -0,0 +1,15 @@
+# rubocop:disable all
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_vpn_gateways: {
+      vpn_gateways: [
+        {
+          vpn_gateway_id: 'vgw-cg5692g4',
+          availability_zone: 'us-east-1a',
+          state: 'available',
+          type: "ipsec.1"
+        }
+      ]
+    }
+  }
+}

data/lib/awspec/stub/waf_web_acl.rb

@@ -0,0 +1,62 @@
+Aws.config[:waf] = {
+  stub_responses: {
+    list_web_acls: {
+      next_marker: nil,
+      web_acls: [
+        {
+          web_acl_id: '1234567-abcd-1234-efgh-5678-1234567890',
+          name: 'my-waf-web-acl'
+        }
+      ]
+    },
+    get_web_acl: {
+      web_acl: {
+        web_acl_id: '1234567-abcd-1234-efgh-5678-1234567890',
+        name: 'my-waf-web-acl',
+        metric_name: 'mywafwebacl',
+        default_action: {
+          type: 'BLOCK'
+        },
+        rules: [
+          {
+            priority: 1,
+            rule_id: 'aaaaaaaa-0000-5555-3333-eeeeeeeeeeee',
+            action: {
+              type: 'ALLOW'
+            }
+          },
+          {
+            priority: 2,
+            rule_id: 'dddddddd-1111-2222-3333-eeeeeeeeeeee',
+            action: {
+              type: 'BLOCK'
+            }
+          }
+        ]
+      }
+    },
+    list_rules: {
+      next_marker: nil,
+      rules: [
+        {
+          rule_id: 'dddddddd-1111-2222-3333-eeeeeeeeeeee',
+          name: 'my-waf-web-acl-allowed-ips'
+        }
+      ]
+    },
+    get_rule: {
+      rule: {
+        rule_id: 'dddddddd-1111-2222-3333-eeeeeeeeeeee',
+        name: 'my-waf-web-acl-allowed-ips',
+        metric_name: 'mywafwebaclallowedips',
+        predicates: [
+          {
+            negated: false,
+            type: 'IPMatch',
+            data_id: '22aa22bb-3333-aaaa-8888-bbbbbbbbbbbb'
+          }
+        ]
+      }
+    }
+  }
+}

data/lib/awspec/toolbox.rb

@@ -0,0 +1,18 @@
+module Awspec
+  class Toolbox < Thor
+    desc 'docgen > doc/resource_types.md', 'Generate doc/resource_types.md document'
+    def docgen
+      puts Awspec::Generator::Doc::Type.generate_doc
+    end
+
+    desc 'template [resource_type_name]', 'Generate template files'
+    option :account_attribute, type: :boolean, default: false, aliases: :a
+    def template(type)
+      if options[:account_attribute]
+        puts Awspec::Generator::Template.generate_account_attribute(type)
+      else
+        puts Awspec::Generator::Template.generate(type)
+      end
+    end
+  end
+end

data/lib/awspec/type/account.rb

@@ -0,0 +1,35 @@
+module Awspec::Type
+  class Account < Base
+    REMOVE_SUFFIX_RE = /
+    _account_attributes|_account_settings|_send_quota
+    /ix
+
+    def resource_via_client
+      attributes = sts_client.get_caller_identity.to_h
+      Awspec::Helper::Type::ACCOUNT_ATTRIBUTES.each do |type|
+        key = type.gsub(REMOVE_SUFFIX_RE, '').to_sym
+        if key == 'ses'
+          # https://docs.aws.amazon.com/ses/latest/DeveloperGuide/regions.html
+          next unless ['us-east-1', 'us-west-2', 'eu-west-1'].include?(Aws.config[:region])
+        end
+        eval "attributes[key] = Awspec::Type::#{type.camelize}.new.resource_via_client"
+      end
+      @resource_via_client ||= attributes.to_struct
+    end
+
+    def id
+      @id ||= sts_client.get_caller_identity.account
+    end
+
+    def lambda
+      resource_via_client[:lambda]
+    end
+
+    def method_missing(name)
+      name = name.to_s if name.class == Symbol
+      describe = name.tr('-', '_').to_sym
+      super unless resource_via_client.members.include?(describe)
+      resource_via_client[describe]
+    end
+  end
+end

data/lib/awspec/type/account_attribute.rb

@@ -0,0 +1,28 @@
+module Awspec::Type
+  class AccountAttribute < Base
+    def initialize(key = nil)
+      @key = key.to_sym
+    end
+
+    def resource_via_client
+      attributes = nil
+      Awspec::Helper::Type::ACCOUNT_ATTRIBUTES.each do |type|
+        key = type.gsub(Awspec::Type::Account::REMOVE_SUFFIX_RE, '').to_sym
+        next unless key == @key
+        if key == 'ses'
+          # https://docs.aws.amazon.com/ses/latest/DeveloperGuide/regions.html
+          next unless ['us-east-1', 'us-west-2', 'eu-west-1'].include?(Aws.config[:region])
+        end
+        eval "attributes = Awspec::Type::#{type.camelize}.new.resource_via_client"
+      end
+      @resource_via_client ||= attributes
+    end
+
+    def method_missing(name)
+      name = name.to_s if name.class == Symbol
+      describe = name.tr('-', '_').to_sym
+      super unless resource_via_client.members.include?(describe)
+      resource_via_client[describe]
+    end
+  end
+end

data/lib/awspec/type/account_attribute_base.rb

@@ -0,0 +1,4 @@
+module Awspec::Type
+  class AccountAttributeBase < Base
+  end
+end

data/lib/awspec/type/acm.rb

@@ -0,0 +1,27 @@
+module Awspec::Type
+  class Acm < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_certificate(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.certificate_arn if resource_via_client
+    end
+
+    STATUSES = %w(
+      PENDING_VALIDATION
+      ISSUED
+      INACTIVE
+      EXPIRED
+      VALIDATION_TIMED_OUT
+      REVOKED
+      FAILED
+    )
+
+    STATUSES.each do |status|
+      define_method status.downcase + '?' do
+        resource_via_client.status == status
+      end
+    end
+  end
+end

data/lib/awspec/type/alb.rb

@@ -0,0 +1,42 @@
+module Awspec::Type
+  class Alb < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_alb(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.load_balancer_name if resource_via_client
+    end
+
+    STATES = %w(
+      active provisioning failed
+    )
+
+    STATES.each do |state|
+      define_method state + '?' do
+        resource_via_client.state.code == state
+      end
+    end
+
+    def has_security_group?(sg_id)
+      sgs = resource_via_client.security_groups
+      ret = sgs.find do |sg|
+        sg == sg_id
+      end
+      return true if ret
+      sg2 = find_security_group(sg_id)
+      return true if sgs.include? sg2.group_id
+      false
+    end
+
+    def has_subnet?(subnet_id)
+      azs = resource_via_client.availability_zones
+      ret = azs.find do |az|
+        az.subnet_id == subnet_id
+      end
+      return true if ret
+      subnet2 = find_subnet(subnet_id)
+      subnet2.subnet_id = subnet_id
+    end
+  end
+end

data/lib/awspec/type/alb_listener.rb

@@ -0,0 +1,36 @@
+module Awspec::Type
+  class AlbListener < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_alb_listener(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.listener_arn if resource_via_client
+    end
+
+    def has_rule?(rule_id = nil, priority = nil, conditions = nil, actions = nil)
+      rules = select_rule_by_alb_listener_id(id)
+      ret = rules.select do |rule|
+        conditions = [conditions] if conditions.is_a?(Hash)
+        actions = [actions] if actions.is_a?(Hash)
+        next false if !rule_id.nil? && rule.rule_arn != rule_id
+        next false if !priority.nil? && rule.priority != priority
+        next false if !conditions.nil? && rule.conditions.map(&:to_h).sort_by(&:to_s) != conditions.sort_by(&:to_s)
+        unless actions.nil?
+          actions = actions.map do |action|
+            if action.key?(:target_group_name)
+              target_group = find_alb_target_group(action[:target_group_name])
+              action[:target_group_arn] = target_group.target_group_arn
+              action.delete(:target_group_name)
+            end
+            action
+          end
+          next false if rule.actions.map(&:to_h).sort_by(&:to_s) != actions.sort_by(&:to_s)
+        end
+        true
+      end
+      ret.single_resource("rule_id = #{rule_id}, priority = #{priority}, \
+conditions = #{conditions}, actions = #{actions}")
+    end
+  end
+end

data/lib/awspec/type/alb_target_group.rb

@@ -0,0 +1,22 @@
+module Awspec::Type
+  class AlbTargetGroup < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_alb_target_group(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.target_group_name if resource_via_client
+    end
+
+    def has_ec2?(id)
+      ec2 = find_ec2(id)
+      return nil unless ec2
+      descriptions = elbv2_client.describe_target_health(
+        target_group_arn: resource_via_client.target_group_arn
+      ).target_health_descriptions
+      descriptions.find do |description|
+        description.target.id == ec2.instance_id
+      end
+    end
+  end
+end