cthiesfork-awspec 1.0.0

data/lib/awspec/type/emr.rb

@@ -0,0 +1,40 @@
+module Awspec::Type
+  class Emr < ResourceBase
+    attr_reader :id
+
+    def initialize(id)
+      super
+      @id = id
+    end
+
+    def resource_via_client
+      @resource_via_client ||= find_emr_cluster(@id)
+    end
+
+    STARTING_STATES = %w(STARTING BOOTSTRAPPING)
+    READY_STATES = %w(RUNNING WAITING)
+    STATES = (READY_STATES + STARTING_STATES)
+
+    STATES.each do |state|
+      define_method state.downcase + '?' do
+        resource_via_client.status.state == state
+      end
+    end
+
+    def applications
+      resource_via_client.applications.map { |a| { name: a.name, version: a.version } }
+    end
+
+    def tags
+      resource_via_client.tags.map { |t| { t.key.to_sym => t.value } }
+    end
+
+    def ok?
+      READY_STATES.include?(resource_via_client.status.state)
+    end
+
+    alias_method :healthy?, :ok?
+    alias_method :ready?, :ok?
+    alias_method :bootstrapping?, :starting?
+  end
+end

data/lib/awspec/type/firehose.rb

@@ -0,0 +1,30 @@
+module Awspec::Type
+  class Firehose < ResourceBase
+    def initialize(name)
+      super
+      @delivery_stream_name = name
+    end
+
+    def resource_via_client
+      @resource_via_client ||= find_delivery_stream(@delivery_stream_name)
+    end
+
+    def id
+      @id ||= @delivery_stream_name if resource_via_client
+    end
+
+    STATES = %w(ACTIVE CREATING DELETING)
+
+    STATES.each do |state|
+      define_method state.downcase + '?' do
+        resource_via_client.delivery_stream_status == state
+      end
+    end
+
+    def has_splunk_destination?
+      resource_via_client.destinations.find do |dest|
+        dest.splunk_destination_description
+      end
+    end
+  end
+end

data/lib/awspec/type/iam_group.rb

@@ -0,0 +1,48 @@
+module Awspec::Type
+  class IamGroup < ResourceBase
+    aws_resource Aws::IAM::Group
+
+    def resource_via_client
+      @resource_via_client ||= find_iam_group(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.group_name if resource_via_client
+    end
+
+    def has_iam_user?(user_id)
+      user = find_iam_user(user_id)
+      return false unless user
+      user_name = user.user_name
+      groups = select_iam_group_by_user_name(user_name)
+      groups.find do |group|
+        group.group_name == id
+      end
+    end
+
+    def has_iam_policy?(policy_id)
+      policies = select_iam_policy_by_group_name(id)
+      policies.find do |policy|
+        policy.policy_arn == policy_id || policy.policy_name == policy_id
+      end
+    end
+
+    def has_inline_policy?(policy_name, document = nil)
+      return has_any_inline_policies? unless policy_name
+
+      res = iam_client.get_group_policy({
+                                          group_name: id,
+                                          policy_name: policy_name
+                                        })
+      return JSON.parse(URI.decode(res.policy_document)) == JSON.parse(document) if document
+      res
+    end
+
+    private
+
+    def has_any_inline_policies?
+      res = iam_client.list_group_policies(group_name: id)
+      !res.policy_names.empty?
+    end
+  end
+end

data/lib/awspec/type/iam_policy.rb

@@ -0,0 +1,60 @@
+require 'awspec/error'
+
+module Awspec::Type
+  class IamPolicy < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_iam_policy(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.policy_id if resource_via_client
+    end
+
+    def attachable?
+      check_existence
+      resource_via_client.is_attachable
+    end
+
+    def attached_to_user?(user_id = nil)
+      check_existence
+      users = select_attached_users(id)
+      if user_id
+        user = find_iam_user(user_id)
+        return false unless user
+        users.any? do |u|
+          u.user_name == user.user_name
+        end
+      else
+        !users.empty?
+      end
+    end
+
+    def attached_to_group?(group_id = nil)
+      check_existence
+      groups = select_attached_groups(@id)
+      if group_id
+        group = find_iam_group(group_id)
+        return false unless group
+        groups.any? do |g|
+          g.group_name == group.group_name
+        end
+      else
+        !groups.empty?
+      end
+    end
+
+    def attached_to_role?(role_id = nil)
+      check_existence
+      roles = select_attached_roles(@id)
+      if role_id
+        role = find_iam_role(role_id)
+        return false unless role
+        roles.any? do |r|
+          r.role_name == role.role_name
+        end
+      else
+        !roles.empty?
+      end
+    end
+  end
+end

data/lib/awspec/type/iam_role.rb

@@ -0,0 +1,38 @@
+module Awspec::Type
+  class IamRole < ResourceBase
+    aws_resource Aws::IAM::Role
+
+    def resource_via_client
+      @resource_via_client ||= find_iam_role(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.role_name if resource_via_client
+    end
+
+    def has_iam_policy?(policy_id)
+      policies = select_iam_policy_by_role_name(resource_via_client.role_name)
+      policies.find do |policy|
+        policy.policy_arn == policy_id || policy.policy_name == policy_id
+      end
+    end
+
+    def has_inline_policy?(policy_name, document = nil)
+      return has_any_inline_policies? unless policy_name
+
+      res = iam_client.get_role_policy({
+                                         role_name: resource_via_client.role_name,
+                                         policy_name: policy_name
+                                       })
+      return JSON.parse(URI.decode(res.policy_document)) == JSON.parse(document) if document
+      res
+    end
+
+    private
+
+    def has_any_inline_policies?
+      res = iam_client.list_role_policies(role_name: resource_via_client.role_name)
+      !res.policy_names.empty?
+    end
+  end
+end

data/lib/awspec/type/iam_user.rb

@@ -0,0 +1,38 @@
+module Awspec::Type
+  class IamUser < ResourceBase
+    aws_resource Aws::IAM::User
+
+    def resource_via_client
+      @resource_via_client ||= find_iam_user(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.user_name if resource_via_client
+    end
+
+    def has_iam_policy?(policy_id)
+      policies = select_iam_policy_by_user_name(resource_via_client.user_name)
+      policies.find do |policy|
+        policy.policy_arn == policy_id || policy.policy_name == policy_id
+      end
+    end
+
+    def has_inline_policy?(policy_name, document = nil)
+      return has_any_inline_policies? unless policy_name
+
+      res = iam_client.get_user_policy({
+                                         user_name: resource_via_client.user_name,
+                                         policy_name: policy_name
+                                       })
+      return JSON.parse(URI.decode(res.policy_document)) == JSON.parse(document) if document
+      res
+    end
+
+    private
+
+    def has_any_inline_policies?
+      res = iam_client.list_user_policies(user_name: resource_via_client.user_name)
+      !res.policy_names.empty?
+    end
+  end
+end

data/lib/awspec/type/internet_gateway.rb

@@ -0,0 +1,20 @@
+module Awspec::Type
+  class InternetGateway < ResourceBase
+    aws_resource Aws::EC2::InternetGateway
+    tags_allowed
+
+    def resource_via_client
+      @resource_via_client ||= find_internet_gateway(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.internet_gateway_id if resource_via_client
+    end
+
+    def attached_to?(vpc)
+      resource_via_client.attachments.find do |a|
+        a.vpc_id == find_vpc(vpc).vpc_id && a.state == 'available'
+      end
+    end
+  end
+end

data/lib/awspec/type/kinesis.rb

@@ -0,0 +1,73 @@
+module Awspec::Type
+  class Kinesis < ResourceBase
+    aws_resource Aws::Kinesis::Client
+
+    def cache_values(res)
+      @id = res.stream_name
+      @stream_name = res.stream_name
+      @stream_arn = res.stream_arn
+      @stream_status = res.stream_status
+      @retention_period_hours = res.retention_period_hours
+      @stream_creation_timestamp = res.stream_creation_timestamp
+      @enhanced_monitoring = res.enhanced_monitoring
+      @encryption_type = res.encryption_type
+      @key_id = res.key_id
+      @open_shard_count = res.open_shard_count
+    end
+
+    def resource_via_client
+      return @resource_via_client unless @resource_via_client.nil?
+      @resource_via_client = find_kinesis_by_stream_name(@display_name)
+    end
+
+    def id
+      cache_values(resource_via_client) if @id.nil?
+      @id
+    end
+
+    def stream_name
+      cache_values(resource_via_client) if @stream_name.nil?
+      @stream_name
+    end
+
+    def stream_arn
+      cache_values(resource_via_client) if @stream_arn.nil?
+      @stream_arn
+    end
+
+    def stream_status
+      cache_values(resource_via_client) if @stream_status.nil?
+      @stream_status
+    end
+
+    def retention_period_hours
+      cache_values(resource_via_client) if @retention_period_hours.nil?
+      @retention_period_hours
+    end
+
+    def stream_creation_timestamp
+      cache_values(resource_via_client) if @stream_creation_timestamp.nil?
+      @stream_creation_timestamp
+    end
+
+    def enhanced_monitoring
+      cache_values(resource_via_client) if @enhanced_monitoring.nil?
+      @enhanced_monitoring
+    end
+
+    def encryption_type
+      cache_values(resource_via_client) if @encryption_type.nil?
+      @encryption_type
+    end
+
+    def key_id
+      cache_values(resource_via_client) if @key_id.nil?
+      @key_id
+    end
+
+    def open_shard_count
+      cache_values(resource_via_client) if @open_shard_count.nil?
+      @open_shard_count
+    end
+  end
+end

data/lib/awspec/type/kms.rb

@@ -0,0 +1,21 @@
+module Awspec::Type
+  class Kms < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_kms_key_by_alias(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.arn if resource_via_client
+    end
+
+    def enabled?
+      resource_via_client.enabled
+    end
+
+    def has_key_policy?(policy_name, document = nil)
+      res = kms_client.get_key_policy(key_id: id, policy_name: policy_name)
+      return JSON.parse(URI.decode(res.policy)) == JSON.parse(document) if document
+      res
+    end
+  end
+end

data/lib/awspec/type/lambda.rb

@@ -0,0 +1,23 @@
+module Awspec::Type
+  class Lambda < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_lambda(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.function_arn if resource_via_client
+    end
+
+    def timeout
+      check_existence
+      resource_via_client.timeout
+    end
+
+    def has_event_source?(event_source_arn)
+      sources = select_event_source_by_function_arn(id)
+      sources.find do |source|
+        source.event_source_arn == event_source_arn
+      end
+    end
+  end
+end

data/lib/awspec/type/lambda_account_settings.rb

@@ -0,0 +1,7 @@
+module Awspec::Type
+  class LambdaAccountSettings < AccountAttributeBase
+    def resource_via_client
+      @resource_via_client ||= find_lambda_account_settings
+    end
+  end
+end

data/lib/awspec/type/launch_configuration.rb

@@ -0,0 +1,28 @@
+module Awspec::Type
+  class LaunchConfiguration < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_launch_configuration(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.launch_configuration_arn if resource_via_client
+    end
+
+    def has_security_group?(sg_id)
+      sgs = resource_via_client.security_groups
+      ret = sgs.find do |sg|
+        sg == sg_id
+      end
+      return true if ret
+      sg2 = find_security_group(sg_id)
+      sgs.find do |sg|
+        sg == sg2.group_id
+      end
+    end
+
+    def has_block_device_mapping?(device_id)
+      ret = find_block_device_mapping(@display_name, device_id)
+      return true if ret
+    end
+  end
+end

data/lib/awspec/type/launch_template.rb

@@ -0,0 +1,34 @@
+module Awspec::Type
+  class LaunchTemplate < ResourceBase
+    attr_accessor :version
+    tags_allowed
+
+    def resource_via_client
+      @resource_via_client ||= find_launch_template(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.launch_template_id if resource_via_client
+    end
+
+    def has_version_number?(version_number)
+      launch_template_versions = find_launch_template_versions(@id)
+      launch_template_versions.launch_template_versions.each do |launch_template_version|
+        return true if launch_template_version.version_number.to_s == version_number.to_s
+      end
+    end
+
+    # launch_template_versions
+    define_method 'launch_template_version' do
+      if @version.nil? || @version == 'default'
+        @version = '$Default'
+      elsif @version == 'latest'
+        @version = '$Latest'
+      end
+      res = ec2_client.describe_launch_template_versions({
+                                                           launch_template_id: @id,
+                                                           versions: [@version.to_s]
+                                                         }).launch_template_versions.first
+    end
+  end
+end