cthiesfork-awspec 1.0.0

data/lib/awspec/stub/subnet.rb

@@ -0,0 +1,33 @@
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_vpcs: {
+      vpcs: [
+        {
+          vpc_id: 'vpc-ab123cde',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-vpc'
+            }
+          ]
+        }
+      ]
+    },
+    describe_subnets: {
+      subnets: [
+        {
+          state: 'available',
+          vpc_id: 'vpc-ab123cde',
+          subnet_id: 'subnet-1234a567',
+          cidr_block: '10.0.1.0/24',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-subnet'
+            }
+          ]
+        }
+      ]
+    }
+  }
+}

data/lib/awspec/stub/vpc.rb

@@ -0,0 +1,114 @@
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_vpcs: {
+      vpcs: [
+        {
+          vpc_id: 'vpc-ab123cde',
+          state: 'available',
+          cidr_block: '10.0.0.0/16',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-vpc'
+            }
+          ]
+        }
+      ]
+    },
+    describe_route_tables: {
+      route_tables: [
+        {
+          route_table_id: 'rtb-a12bcd34',
+          vpc_id: 'vpc-ab123cde',
+          routes: [
+            {
+              destination_cidr_block: '10.0.0.0/16',
+              destination_prefix_list_id: nil,
+              gateway_id: 'local',
+              instance_id: nil,
+              instance_owner_id: nil,
+              network_interface_id: nil,
+              vpc_peering_connection_id: nil,
+              state: 'active'
+            },
+            {
+              destination_cidr_block: '0.0.0.0/0',
+              destination_prefix_list_id: nil,
+              gateway_id: 'igw-1ab2345c',
+              instance_id: nil,
+              instance_owner_id: nil,
+              network_interface_id: nil,
+              vpc_peering_connection_id: nil,
+              state: 'active'
+            }
+          ],
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-route-table'
+            }
+          ]
+        }
+      ]
+    },
+    describe_network_acls: {
+      network_acls: [
+        {
+          network_acl_id: 'acl-1abc2d3e',
+          vpc_id: 'vpc-ab123cde',
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-network-acl'
+            }
+          ]
+        }
+      ]
+    },
+    describe_vpc_peering_connections: {
+      vpc_peering_connections: [
+        {
+          vpc_peering_connection_id: 'pcx-c56789de',
+          accepter_vpc_info: {
+            cidr_block: nil,
+            ipv_6_cidr_block_set: [],
+            cidr_block_set: [],
+            owner_id: '123453345554',
+            peering_options: nil,
+            vpc_id: 'vpc-ab123cde',
+            region: 'ap-northeast-1'
+          },
+          expiration_time: nil,
+          requester_vpc_info: {
+            cidr_block: nil,
+            ipv_6_cidr_block_set: [],
+            cidr_block_set: [],
+            owner_id: '192912349399',
+            peering_options: nil,
+            vpc_id: 'vpc-bcd1235e',
+            region: 'ap-northeast-1'
+          },
+          status: {
+            code: 'active',
+            message: 'Active'
+          },
+          tags: [
+            {
+              key: 'Name',
+              value: 'my-pcx'
+            }
+          ]
+        }
+      ]
+    },
+    describe_vpc_attribute: {
+      vpc_id: 'vpc-bcd1235e',
+      enable_dns_hostnames: {
+        value: true
+      },
+      enable_dns_support: {
+        value: false
+      }
+    }
+  }
+}

data/lib/awspec/stub/vpn_connection.rb

@@ -0,0 +1,20 @@
+# rubocop:disable all
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_vpn_connections: {
+      vpn_connections: [
+        {
+          vpn_connection_id: 'vpn-cg5692g4',
+          customer_gateway_id: 'cgw-cg5692g4',
+          vpn_gateway_id: 'vgw-cg5692g4',
+          state: 'available',
+          type: "ipsec.1",
+          tags: [
+            key: 'Name',
+            value: 'my-vpn'
+          ]
+        }
+      ]
+    }
+  }
+}

data/lib/awspec/stub/vpn_gateway.rb

@@ -0,0 +1,15 @@
+# rubocop:disable all
+Aws.config[:ec2] = {
+  stub_responses: {
+    describe_vpn_gateways: {
+      vpn_gateways: [
+        {
+          vpn_gateway_id: 'vgw-cg5692g4',
+          availability_zone: 'us-east-1a',
+          state: 'available',
+          type: "ipsec.1"
+        }
+      ]
+    }
+  }
+}

data/lib/awspec/stub/waf_web_acl.rb

@@ -0,0 +1,62 @@
+Aws.config[:waf] = {
+  stub_responses: {
+    list_web_acls: {
+      next_marker: nil,
+      web_acls: [
+        {
+          web_acl_id: '1234567-abcd-1234-efgh-5678-1234567890',
+          name: 'my-waf-web-acl'
+        }
+      ]
+    },
+    get_web_acl: {
+      web_acl: {
+        web_acl_id: '1234567-abcd-1234-efgh-5678-1234567890',
+        name: 'my-waf-web-acl',
+        metric_name: 'mywafwebacl',
+        default_action: {
+          type: 'BLOCK'
+        },
+        rules: [
+          {
+            priority: 1,
+            rule_id: 'aaaaaaaa-0000-5555-3333-eeeeeeeeeeee',
+            action: {
+              type: 'ALLOW'
+            }
+          },
+          {
+            priority: 2,
+            rule_id: 'dddddddd-1111-2222-3333-eeeeeeeeeeee',
+            action: {
+              type: 'BLOCK'
+            }
+          }
+        ]
+      }
+    },
+    list_rules: {
+      next_marker: nil,
+      rules: [
+        {
+          rule_id: 'dddddddd-1111-2222-3333-eeeeeeeeeeee',
+          name: 'my-waf-web-acl-allowed-ips'
+        }
+      ]
+    },
+    get_rule: {
+      rule: {
+        rule_id: 'dddddddd-1111-2222-3333-eeeeeeeeeeee',
+        name: 'my-waf-web-acl-allowed-ips',
+        metric_name: 'mywafwebaclallowedips',
+        predicates: [
+          {
+            negated: false,
+            type: 'IPMatch',
+            data_id: '22aa22bb-3333-aaaa-8888-bbbbbbbbbbbb'
+          }
+        ]
+      }
+    }
+  }
+}

data/lib/awspec/stub/wafregional_web_acl.rb

@@ -0,0 +1,62 @@
+Aws.config[:wafregional] = {
+  stub_responses: {
+    list_web_acls: {
+      next_marker: nil,
+      web_acls: [
+        {
+          web_acl_id: '1234567-abcd-1234-efgh-5678-1234567890',
+          name: 'my-wafregional-web-acl'
+        }
+      ]
+    },
+    get_web_acl: {
+      web_acl: {
+        web_acl_id: '1234567-abcd-1234-efgh-5678-1234567890',
+        name: 'my-wafregional-web-acl',
+        metric_name: 'mywafregionalwebacl',
+        default_action: {
+          type: 'BLOCK'
+        },
+        rules: [
+          {
+            priority: 1,
+            rule_id: 'aaaaaaaa-0000-5555-3333-eeeeeeeeeeee',
+            action: {
+              type: 'ALLOW'
+            }
+          },
+          {
+            priority: 2,
+            rule_id: 'dddddddd-1111-2222-3333-eeeeeeeeeeee',
+            action: {
+              type: 'BLOCK'
+            }
+          }
+        ]
+      }
+    },
+    list_rules: {
+      next_marker: nil,
+      rules: [
+        {
+          rule_id: 'dddddddd-1111-2222-3333-eeeeeeeeeeee',
+          name: 'my-wafregional-web-acl-allowed-ips'
+        }
+      ]
+    },
+    get_rule: {
+      rule: {
+        rule_id: 'dddddddd-1111-2222-3333-eeeeeeeeeeee',
+        name: 'my-wafregional-web-acl-allowed-ips',
+        metric_name: 'mywafregionalwebaclallowedips',
+        predicates: [
+          {
+            negated: false,
+            type: 'IPMatch',
+            data_id: '22aa22bb-3333-aaaa-8888-bbbbbbbbbbbb'
+          }
+        ]
+      }
+    }
+  }
+}

data/lib/awspec/toolbox.rb

@@ -0,0 +1,18 @@
+module Awspec
+  class Toolbox < Thor
+    desc 'docgen > doc/resource_types.md', 'Generate doc/resource_types.md document'
+    def docgen
+      puts Awspec::Generator::Doc::Type.generate_doc
+    end
+
+    desc 'template [resource_type_name]', 'Generate template files'
+    option :account_attribute, type: :boolean, default: false, aliases: :a
+    def template(type)
+      if options[:account_attribute]
+        puts Awspec::Generator::Template.generate_account_attribute(type)
+      else
+        puts Awspec::Generator::Template.generate(type)
+      end
+    end
+  end
+end

data/lib/awspec/type/account.rb

@@ -0,0 +1,39 @@
+module Awspec::Type
+  class Account < Base
+    REMOVE_SUFFIX_RE = /
+    _account_attributes|_account_settings|_send_quota
+    /ix
+
+    def resource_via_client
+      attributes = sts_client.get_caller_identity.to_h
+      Awspec::Helper::Type::ACCOUNT_ATTRIBUTES.each do |type|
+        key = type.gsub(REMOVE_SUFFIX_RE, '').to_sym
+        if key == 'ses'
+          # https://docs.aws.amazon.com/ses/latest/DeveloperGuide/regions.html
+          next unless ['us-east-1', 'us-west-2', 'eu-west-1'].include?(Aws.config[:region])
+        end
+        eval "attributes[key] = Awspec::Type::#{type.camelize}.new.resource_via_client"
+      end
+      @resource_via_client ||= attributes.to_struct
+    end
+
+    def id
+      @id ||= sts_client.get_caller_identity.account
+    end
+
+    def account
+      id
+    end
+
+    def lambda
+      resource_via_client[:lambda]
+    end
+
+    def method_missing(name)
+      name = name.to_s if name.class == Symbol
+      describe = name.tr('-', '_').to_sym
+      super unless resource_via_client.members.include?(describe)
+      resource_via_client[describe]
+    end
+  end
+end

data/lib/awspec/type/account_attribute.rb

@@ -0,0 +1,28 @@
+module Awspec::Type
+  class AccountAttribute < Base
+    def initialize(key = nil)
+      @key = key.to_sym
+    end
+
+    def resource_via_client
+      attributes = nil
+      Awspec::Helper::Type::ACCOUNT_ATTRIBUTES.each do |type|
+        key = type.gsub(Awspec::Type::Account::REMOVE_SUFFIX_RE, '').to_sym
+        next unless key == @key
+        if key == 'ses'
+          # https://docs.aws.amazon.com/ses/latest/DeveloperGuide/regions.html
+          next unless ['us-east-1', 'us-west-2', 'eu-west-1'].include?(Aws.config[:region])
+        end
+        eval "attributes = Awspec::Type::#{type.camelize}.new.resource_via_client"
+      end
+      @resource_via_client ||= attributes
+    end
+
+    def method_missing(name)
+      name = name.to_s if name.class == Symbol
+      describe = name.tr('-', '_').to_sym
+      super unless resource_via_client.members.include?(describe)
+      resource_via_client[describe]
+    end
+  end
+end

data/lib/awspec/type/account_attribute_base.rb

@@ -0,0 +1,4 @@
+module Awspec::Type
+  class AccountAttributeBase < Base
+  end
+end

data/lib/awspec/type/acm.rb

@@ -0,0 +1,41 @@
+module Awspec::Type
+  class Acm < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_certificate(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.certificate_arn if resource_via_client
+    end
+
+    STATUSES = %w(
+      PENDING_VALIDATION
+      ISSUED
+      INACTIVE
+      EXPIRED
+      VALIDATION_TIMED_OUT
+      REVOKED
+      FAILED
+    )
+
+    STATUSES.each do |status|
+      define_method status.downcase + '?' do
+        resource_via_client.status == status
+      end
+    end
+
+    def has_domain_name?(domain)
+      resource_via_client.domain_name == domain && \
+      resource_via_client.certificate_arn == id
+    end
+
+    def has_domain_validation_option?(domain_name:, validation_method:, validation_status: nil)
+      resource_via_client.domain_validation_options.find do |domain_validation_option|
+        validation_status ||= domain_validation_option.validation_status
+        domain_validation_option.domain_name == domain_name && \
+        domain_validation_option.validation_method == validation_method && \
+        domain_validation_option.validation_status == validation_status
+      end
+    end
+  end
+end