cthiesfork-awspec 1.0.0

data/lib/awspec/type/mq.rb

@@ -0,0 +1,57 @@
+module Awspec::Type
+  class Mq < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_broker(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.broker_id if resource_via_client
+    end
+
+    STATES = %w(
+      running reboot-in-progress creation-in-progress
+      creation-failed deletion-in-progress
+    )
+
+    STATES.each do |state|
+      define_method state.tr('-', '_') + '?' do
+        resource_via_client.broker_state.downcase == state
+      end
+    end
+
+    def has_security_group?(sg_id)
+      return true if has_vpc_security_group_id?(sg_id)
+      return true if has_vpc_security_group_name?(sg_id)
+      return true if has_vpc_security_group_tag_name?(sg_id)
+    end
+
+    def has_tag?(tag_key, tag_value)
+      @resource_via_client.tags do |tag|
+        tag.key == tag_key && tag.value == tag_value
+      end
+    end
+
+    private
+
+    def has_vpc_security_group_id?(sg_id)
+      sgs = @resource_via_client.security_groups
+      sgs.find do |sg|
+        sg == sg_id
+      end
+    end
+
+    def has_vpc_security_group_name?(sg_id)
+      res = select_security_group_by_group_name([sg_id])
+
+      return false unless res.count == 1
+      has_vpc_security_group_id?(res.first.group_id)
+    end
+
+    def has_vpc_security_group_tag_name?(sg_id)
+      res = select_security_group_by_tag_name([sg_id])
+
+      return false unless res.count == 1
+      has_vpc_security_group_id?(res.first.group_id)
+    end
+  end
+end

data/lib/awspec/type/nat_gateway.rb

@@ -0,0 +1,29 @@
+module Awspec::Type
+  class NatGateway < ResourceBase
+    tags_allowed
+
+    def resource_via_client
+      @resource_via_client ||= find_nat_gateway(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.nat_gateway_id if resource_via_client
+    end
+
+    STATES = %w(
+      pending failed available deleting deleted
+    )
+
+    STATES.each do |state|
+      define_method state.tr('-', '_') + '?' do
+        resource_via_client.state == state
+      end
+    end
+
+    def has_eip?(ip_address = nil)
+      resource_via_client.nat_gateway_addresses.find do |address|
+        return address.public_ip == ip_address
+      end
+    end
+  end
+end

data/lib/awspec/type/network_acl.rb

@@ -0,0 +1,117 @@
+module Awspec::Type
+  class NetworkAcl < ResourceBase
+    aws_resource Aws::EC2::NetworkAcl
+    tags_allowed
+
+    def resource_via_client
+      @resource_via_client ||= find_network_acl(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.network_acl_id if resource_via_client
+    end
+
+    def has_subnet?(subnet_id)
+      resource_via_client.associations.find do |a|
+        next true if a.subnet_id == subnet_id
+        subnet = find_subnet(subnet_id)
+        next false unless subnet
+        next a.subnet_id == subnet.subnet_id
+      end
+    end
+
+    def allowed?(port = nil, protocol = nil, cidr = nil, rule_number = nil)
+      rule_action = 'allow'
+      entry?(rule_action, port, protocol, cidr, rule_number)
+    end
+
+    def denied?(port = nil, protocol = nil, cidr = nil, rule_number = nil)
+      rule_action = 'deny'
+      entry?(rule_action, port, protocol, cidr, rule_number)
+    end
+
+    def inbound
+      @egress = false
+      self
+    end
+
+    def outbound
+      @egress = true
+      self
+    end
+
+    def inbound_entries_count
+      resource_via_client.entries.count do |entry|
+        entry.egress == false
+      end
+    end
+
+    def outbound_entries_count
+      resource_via_client.entries.count do |entry|
+        entry.egress == true
+      end
+    end
+
+    # rubocop:disable Metrics/LineLength
+    PROTOCOLS = { 'ALL' => -1, 'HOPOPT' => 0, 'ICMP' => 1, 'IGMP' => 2, 'GGP' => 3, 'IPv4' => 4, 'ST' => 5, 'TCP' => 6, 'CBT' => 7, 'EGP' => 8, 'IGP' => 9, 'BBN-RCC-MON' => 10,
+                  'NVP-II' => 11, 'PUP' => 12, 'ARGUS' => 13, 'EMCON' => 14, 'XNET' => 15, 'CHAOS' => 16, 'UDP' => 17, 'MUX' => 18, 'DCN-MEAS' => 19, 'HMP' => 20,
+                  'PRM' => 21, 'XNS-IDP' => 22, 'TRUNK-1' => 23, 'TRUNK-2' => 24, 'LEAF-1' => 25, 'LEAF-2' => 26, 'RDP' => 27, 'IRTP' => 28, 'ISO-TP4' => 29, 'NETBLT' => 30,
+                  'MFE-NSP' => 31, 'MERIT-INP' => 32, 'DCCP' => 33, '3PC' => 34, 'IDPR' => 35, 'XTP' => 36, 'DDP' => 37, 'IDPR-CMTP' => 38, 'TP++' => 39, 'IL' => 40,
+                  'IPv6' => 41, 'SDRP' => 42, 'IPv6-Route' => 43, 'IPv6-Frag' => 44, 'IDRP' => 45, 'RSVP' => 46, 'GRE' => 47, 'DSR' => 48, 'BNA' => 49, 'ESP' => 50,
+                  'AH' => 51, 'I-NLSP' => 52, 'SWIPE' => 53, 'NARP' => 54, 'MOBILE' => 55, 'TLSP' => 56, 'IPv6-ICMP' => 58, 'IPv6-NoNxt' => 59, 'IPv6-Opts' => 60,
+                  '61' => 61, 'CFTP' => 62, '63' => 63, 'SAT-EXPAK' => 64, 'KRYPTOLAN' => 65, 'RVD' => 66, 'IPPC' => 67, '68' => 68, 'SAT-MON' => 69, 'VISA' => 70,
+                  'IPCV' => 71, 'CPNX' => 72, 'CPHB' => 73, 'WSN' => 74, 'PVP' => 75, 'BR-SAT-MON' => 76, 'SUN-ND' => 77, 'WB-MON' => 78, 'WB-EXPAK' => 79, 'ISO-IP' => 80,
+                  'VMTP' => 81, 'SECURE-VMTP' => 82, 'VINES' => 83, 'IPTM' => 84, 'TTP' => 84, 'NSFNET-IGP' => 85, 'DGP' => 86, 'TCF' => 87, 'EIGRP' => 88, 'OSPFIGP' => 89, 'Sprite-RPC' => 90,
+                  'LARP' => 91, 'MTP' => 92, 'AX.25' => 93, 'IPIP' => 94, 'MICP' => 95, 'SCC-SP' => 96, 'ETHERIP' => 97, 'ENCAP' => 98, '99' => 99, 'GMTP' => 100,
+                  'IFMP' => 101, 'PNNI' => 102, 'PIM' => 103, 'ARIS' => 104, 'SCPS' => 105, 'QNX' => 106, 'A/N' => 107, 'IPComp' => 108, 'SNP' => 109, 'Compaq-Peer' => 110,
+                  'IPX-in-IP' => 111, 'VRRP' => 112, 'PGM' => 113, '114' => 114, 'L2TP' => 115, 'DDX' => 116, 'IATP' => 117, 'STP' => 118, 'SRP' => 119, 'UTI' => 120,
+                  'SMP' => 121, 'SM' => 122, 'PTP' => 123, 'ISIS over IPv4' => 124, 'FIRE' => 125, 'CRTP' => 126, 'CRUDP' => 127, 'SSCOPMCE' => 128, 'IPLT' => 129, 'SPS' => 130,
+                  'PIPE' => 131, 'SCTP' => 132, 'FC' => 133, 'RSVP-E2E-IGNORE' => 134, 'Mobility Header' => 135, 'UDPLite' => 136, 'MPLS-in-IP' => 137, 'manet' => 138, 'HIP' => 139, 'Shim6' => 140,
+                  'WESP' => 141, 'ROHC' => 142, '253' => 253, '254' => 254 }
+    # rubocop:enable Metrics/LineLength
+
+    private
+
+    def entry?(rule_action, port = nil, protocol = nil, cidr = nil, rule_number = nil)
+      resource_via_client.entries.find do |entry|
+        # egress rule_action
+        next false if entry.egress != @egress
+        next false if entry.rule_action != rule_action
+        # protocol
+        unless protocol.nil?
+          next false unless protocol_match?(protocol, entry.protocol)
+        end
+        # cidr
+        next false if !cidr.nil? && entry.cidr_block != cidr
+        # rule_number
+        rule_number = 32_767 if rule_number == '*'
+        next false if !rule_number.nil? && entry.rule_number != rule_number
+        # port
+        unless entry.port_range.nil?
+          next false unless port_between?(port, entry.port_range.from, entry.port_range.to)
+        end
+        next true
+      end
+    end
+
+    def protocol_match?(a, b)
+      if a.match(/\A\d+\z/) && a.to_i >= 0
+        return false unless b.to_i == a.to_i
+      else
+        lower_h = PROTOCOLS.map { |k, v| [k.downcase, v] }.to_h
+        return false unless lower_h.key?(a.downcase)
+        return false unless b.to_i == lower_h[a.downcase]
+      end
+      true
+    end
+
+    def port_between?(port, from_port, to_port)
+      if port.is_a?(String) && port.include?('-')
+        f, t = port.split('-')
+        from_port == f.to_i && to_port == t.to_i
+      else
+        port.between?(from_port, to_port)
+      end
+    end
+  end
+end

data/lib/awspec/type/network_interface.rb

@@ -0,0 +1,56 @@
+module Awspec::Type
+  class NetworkInterface < ResourceBase
+    tags_allowed
+
+    def resource_via_client
+      @resource_via_client ||= find_network_interface(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.network_interface_id if resource_via_client
+    end
+
+    STATES = %w(
+      available attaching in-use detaching
+    )
+
+    STATES.each do |state|
+      define_method state.tr('-', '_') + '?' do
+        resource_via_client.status == state
+      end
+    end
+
+    def attached_to?(instance_id, device_index = nil)
+      instance = find_ec2(instance_id)
+      return false unless instance
+      return false unless resource_via_client.attachment
+      return false if device_index && resource_via_client.attachment.device_index != device_index
+      resource_via_client.attachment.instance_id == instance.instance_id && \
+        resource_via_client.attachment.status == 'attached'
+    end
+
+    def has_private_ip_address?(ip_address, primary = nil)
+      resource_via_client.private_ip_addresses.find do |i|
+        next false if !primary.nil? && i.primary != primary
+        i.private_ip_address == ip_address
+      end
+    end
+
+    def has_security_group?(sg_id)
+      sgs = resource_via_client.groups
+      ret = sgs.find do |sg|
+        sg.group_id == sg_id || sg.group_name == sg_id
+      end
+      return true if ret
+      sg2 = find_security_group(sg_id)
+      return false unless sg2.tag_name == sg_id
+      sgs.find do |sg|
+        sg.group_id == sg2.group_id
+      end
+    end
+
+    def private_ip_addresses_count
+      resource_via_client.private_ip_addresses.count
+    end
+  end
+end

data/lib/awspec/type/nlb.rb

@@ -0,0 +1,35 @@
+module Awspec::Type
+  class Nlb < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_nlb(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.load_balancer_name if resource_via_client
+    end
+
+    STATES = %w(
+      active provisioning failed
+    )
+
+    STATES.each do |state|
+      define_method state + '?' do
+        resource_via_client.state.code == state
+      end
+    end
+
+    def has_security_group?(_sg_id)
+      false
+    end
+
+    def has_subnet?(subnet_id)
+      azs = resource_via_client.availability_zones
+      ret = azs.find do |az|
+        az.subnet_id == subnet_id
+      end
+      return true if ret
+      subnet2 = find_subnet(subnet_id)
+      subnet2.subnet_id = subnet_id
+    end
+  end
+end

data/lib/awspec/type/nlb_listener.rb

@@ -0,0 +1,43 @@
+module Awspec::Type
+  class NlbListener < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_nlb_listener(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.listener_arn if resource_via_client
+    end
+
+    def has_rule?(rule_id = nil, priority = nil, conditions = nil, actions = nil)
+      rules = select_rule_by_nlb_listener_id(id)
+      ret = rules.select do |rule|
+        conditions = [conditions] if conditions.is_a?(Hash)
+        actions = [actions] if actions.is_a?(Hash)
+        next false if !rule_id.nil? && rule.rule_arn != rule_id
+        next false if !priority.nil? && rule.priority != priority
+        unless conditions.nil?
+          next false unless conditions.map do |condition|
+            rule_conds = rule.conditions.select { |rule_cond| rule_cond[:field] == condition[:field] }
+            next if rule_conds.empty?
+            next unless rule_conds.reject { |rule_cond| condition[:values] == rule_cond[:values] }.empty?
+            condition
+          end.compact.size == conditions.size
+        end
+        unless actions.nil?
+          actions = actions.map do |action|
+            if action.key?(:target_group_name)
+              target_group = find_nlb_target_group(action[:target_group_name])
+              action[:target_group_arn] = target_group.target_group_arn
+              action.delete(:target_group_name)
+            end
+            action
+          end
+          next false if rule.actions.map(&:to_h).sort_by(&:to_s) != actions.sort_by(&:to_s)
+        end
+        true
+      end
+      ret.single_resource("rule_id = #{rule_id}, priority = #{priority}, \
+conditions = #{conditions}, actions = #{actions}")
+    end
+  end
+end

data/lib/awspec/type/nlb_target_group.rb

@@ -0,0 +1,22 @@
+module Awspec::Type
+  class NlbTargetGroup < ResourceBase
+    def resource_via_client
+      @resource_via_client ||= find_nlb_target_group(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.target_group_name if resource_via_client
+    end
+
+    def has_ec2?(id)
+      ec2 = find_ec2(id)
+      return nil unless ec2
+      descriptions = elbv2_client.describe_target_health(
+        target_group_arn: resource_via_client.target_group_arn
+      ).target_health_descriptions
+      descriptions.find do |description|
+        description.target.id == ec2.instance_id
+      end
+    end
+  end
+end

data/lib/awspec/type/rds.rb

@@ -0,0 +1,109 @@
+module Awspec::Type
+  class Rds < ResourceBase
+    aws_resource Aws::RDS::DBInstance
+
+    def resource_via_client
+      @resource_via_client ||= find_rds(@display_name)
+    end
+
+    def id
+      @id ||= resource_via_client.db_instance_identifier if resource_via_client
+    end
+
+    STATES = %w(
+      available backing-up creating deleting
+      failed inaccessible-encryption-credentials
+      incompatible-credentials incompatible-network
+      incompatible-option-group incompatible-parameters
+      incompatible-restore maintenance
+      modifying rebooting renaming resetting-master-credentials
+      restore-error storage-full upgrading
+    )
+
+    STATES.each do |state|
+      define_method state.tr('-', '_') + '?' do
+        resource_via_client.db_instance_status == state
+      end
+    end
+
+    def vpc_id
+      resource_via_client.db_subnet_group.vpc_id
+    end
+
+    def has_security_group?(sg_id)
+      return true if has_vpc_security_group_id?(sg_id)
+      return true if has_vpc_security_group_name?(sg_id)
+      return true if has_vpc_security_group_tag_name?(sg_id)
+      return true if has_db_security_group_name?(sg_id)
+    end
+
+    def has_db_parameter_group?(name, parameter_apply_status = nil)
+      pgs = resource_via_client.db_parameter_groups
+      pgs.find do |pg|
+        if parameter_apply_status.nil?
+          pg.db_parameter_group_name == name
+        else
+          pg.db_parameter_group_name == name && \
+            pg.parameter_apply_status == parameter_apply_status
+        end
+      end
+    end
+
+    def has_option_group?(name, status = nil)
+      ogs = resource_via_client.option_group_memberships
+      ogs.find do |og|
+        if status.nil?
+          og.option_group_name == name
+        else
+          og.option_group_name == name && og.status == status
+        end
+      end
+    end
+
+    def has_tag?(tag_key, tag_value)
+      arn = resource_via_client.db_instance_arn
+      tag_set = rds_client.list_tags_for_resource({ resource_name: arn })
+      tag_set.tag_list.find do |tag|
+        tag.key == tag_key && tag.value == tag_value
+      end
+    end
+
+    private
+
+    def has_vpc_security_group_id?(sg_id)
+      sgs = resource_via_client.vpc_security_groups
+      sgs.find do |sg|
+        sg.vpc_security_group_id == sg_id
+      end
+    end
+
+    def has_vpc_security_group_name?(sg_id)
+      sgs = resource_via_client.vpc_security_groups
+      res = ec2_client.describe_security_groups({
+                                                  filters: [{ name: 'group-name', values: [sg_id] }]
+                                                })
+      return false unless res.security_groups.count == 1
+      sgs.find do |sg|
+        sg.vpc_security_group_id == res.security_groups.first.group_id
+      end
+    end
+
+    def has_vpc_security_group_tag_name?(sg_id)
+      sgs = resource_via_client.vpc_security_groups
+      res = ec2_client.describe_security_groups({
+                                                  filters: [{ name: 'tag:Name', values: [sg_id] }]
+                                                })
+      return false unless res.security_groups.count == 1
+      sgs.find do |sg|
+        sg.vpc_security_group_id == res.security_groups.first.group_id
+      end
+    end
+
+    def has_db_security_group_name?(sg_id)
+      sgs = resource_via_client.db_security_groups
+      sgs.find do |sg|
+        sg.db_security_group_name == sg_id
+      end
+    end
+  end
+end