gcloud 0.0.4 → 0.0.6

data/packages/gsutil/boto/tests/unit/cloudformation/test_stack.py

@@ -0,0 +1,63 @@
+#!/usr/bin/env python
+import xml.sax
+import unittest
+import boto.handler
+import boto.resultset
+import boto.cloudformation
+
+SAMPLE_XML = r"""
+<DescribeStacksResponse xmlns="http://cloudformation.amazonaws.com/doc/2010-05-15/">
+  <DescribeStacksResult>
+    <Stacks>
+      <member>
+        <Tags>
+          <member>
+            <Value>value0</Value>
+            <Key>key0</Key>
+          </member>
+          <member>
+            <Key>key1</Key>
+            <Value>value1</Value>
+          </member>
+        </Tags>
+        <StackId>arn:aws:cloudformation:ap-southeast-1:100:stack/Name/id</StackId>
+        <StackStatus>CREATE_COMPLETE</StackStatus>
+        <StackName>Name</StackName>
+        <StackStatusReason/>
+        <Description/>
+        <NotificationARNs>
+          <member>arn:aws:sns:ap-southeast-1:100:name</member>
+        </NotificationARNs>
+        <CreationTime>2013-01-10T05:04:56Z</CreationTime>
+        <DisableRollback>false</DisableRollback>
+        <Outputs>
+          <member>
+            <OutputValue>value0</OutputValue>
+            <Description>output0</Description>
+            <OutputKey>key0</OutputKey>
+          </member>
+          <member>
+            <OutputValue>value1</OutputValue>
+            <Description>output1</Description>
+            <OutputKey>key1</OutputKey>
+          </member>
+        </Outputs>
+      </member>
+    </Stacks>
+  </DescribeStacksResult>
+  <ResponseMetadata>
+    <RequestId>1</RequestId>
+  </ResponseMetadata>
+</DescribeStacksResponse>
+"""
+
+class TestStackParse(unittest.TestCase):
+    def test_parse_tags(self):
+        rs = boto.resultset.ResultSet([('member', boto.cloudformation.stack.Stack)])
+        h = boto.handler.XmlHandler(rs, None)
+        xml.sax.parseString(SAMPLE_XML, h)
+        tags = rs[0].tags
+        self.assertEqual(tags, {u'key0': u'value0', u'key1': u'value1'})
+
+if __name__ == '__main__':
+    unittest.main()

data/packages/gsutil/boto/tests/unit/cloudfront/test_invalidation_list.py

@@ -0,0 +1,113 @@
+#!/usr/bin/env python
+import random
+import string
+from tests.unit import unittest
+
+import mock
+import boto
+
+
+RESPONSE_TEMPLATE = r"""
+<InvalidationList>
+   <Marker/>
+   <NextMarker>%(next_marker)s</NextMarker>
+   <MaxItems>%(max_items)s</MaxItems>
+   <IsTruncated>%(is_truncated)s</IsTruncated>
+   %(inval_summaries)s
+</InvalidationList>
+"""
+
+INVAL_SUMMARY_TEMPLATE = r"""
+   <InvalidationSummary>
+      <Id>%(cfid)s</Id>
+      <Status>%(status)s</Status>
+   </InvalidationSummary>
+"""
+
+
+class CFInvalidationListTest(unittest.TestCase):
+
+    cloudfront = True
+
+    def setUp(self):
+        self.cf = boto.connect_cloudfront('aws.aws_access_key_id',
+                                          'aws.aws_secret_access_key')
+
+    def _get_random_id(self, length=14):
+        return ''.join([random.choice(string.ascii_letters) for i in
+                        range(length)])
+
+    def _group_iter(self, iterator, n):
+        accumulator = []
+        for item in iterator:
+            accumulator.append(item)
+            if len(accumulator) == n:
+                yield accumulator
+                accumulator = []
+        if len(accumulator) != 0:
+            yield accumulator
+
+    def _get_mock_responses(self, num, max_items):
+        max_items = min(max_items, 100)
+        cfid_groups = list(self._group_iter([self._get_random_id() for i in
+                                             range(num)], max_items))
+        cfg = dict(status='Completed', max_items=max_items, next_marker='')
+        responses = []
+        is_truncated = 'true'
+        for i, group in enumerate(cfid_groups):
+            next_marker = group[-1]
+            if (i + 1) == len(cfid_groups):
+                is_truncated = 'false'
+                next_marker = ''
+            invals = ''
+            cfg.update(dict(next_marker=next_marker,
+                            is_truncated=is_truncated))
+            for cfid in group:
+                cfg.update(dict(cfid=cfid))
+                invals += INVAL_SUMMARY_TEMPLATE % cfg
+            cfg.update(dict(inval_summaries=invals))
+            mock_response = mock.Mock()
+            mock_response.read.return_value = RESPONSE_TEMPLATE % cfg
+            mock_response.status = 200
+            responses.append(mock_response)
+        return responses
+
+    def test_manual_pagination(self, num_invals=30, max_items=4):
+        """
+        Test that paginating manually works properly
+        """
+        self.assertGreater(num_invals, max_items)
+        responses = self._get_mock_responses(num=num_invals,
+                                             max_items=max_items)
+        self.cf.make_request = mock.Mock(side_effect=responses)
+        ir = self.cf.get_invalidation_requests('dist-id-here',
+                                               max_items=max_items)
+        all_invals = list(ir)
+        self.assertEqual(len(all_invals), max_items)
+        while ir.is_truncated:
+            ir = self.cf.get_invalidation_requests('dist-id-here',
+                                                   marker=ir.next_marker,
+                                                   max_items=max_items)
+            invals = list(ir)
+            self.assertLessEqual(len(invals), max_items)
+            all_invals.extend(invals)
+        remainder = num_invals % max_items
+        if remainder != 0:
+            self.assertEqual(len(invals), remainder)
+        self.assertEqual(len(all_invals), num_invals)
+
+    def test_auto_pagination(self, num_invals=1024):
+        """
+        Test that auto-pagination works properly
+        """
+        max_items = 100
+        self.assertGreaterEqual(num_invals, max_items)
+        responses = self._get_mock_responses(num=num_invals,
+                                             max_items=max_items)
+        self.cf.make_request = mock.Mock(side_effect=responses)
+        ir = self.cf.get_invalidation_requests('dist-id-here')
+        self.assertEqual(len(ir._inval_cache), max_items)
+        self.assertEqual(len(list(ir)), num_invals)
+
+if __name__ == '__main__':
+    unittest.main()

data/packages/gsutil/boto/tests/unit/cloudfront/test_signed_urls.py

@@ -0,0 +1,354 @@
+import tempfile
+import unittest
+try:
+    import simplejson as json
+except ImportError:
+    import json
+from textwrap import dedent
+
+from boto.cloudfront.distribution import Distribution
+
+class CloudfrontSignedUrlsTest(unittest.TestCase):
+
+    cloudfront = True
+    notdefault = True
+
+    def setUp(self):
+        self.pk_str = dedent("""
+            -----BEGIN RSA PRIVATE KEY-----
+            MIICXQIBAAKBgQDA7ki9gI/lRygIoOjV1yymgx6FYFlzJ+z1ATMaLo57nL57AavW
+            hb68HYY8EA0GJU9xQdMVaHBogF3eiCWYXSUZCWM/+M5+ZcdQraRRScucmn6g4EvY
+            2K4W2pxbqH8vmUikPxir41EeBPLjMOzKvbzzQy9e/zzIQVREKSp/7y1mywIDAQAB
+            AoGABc7mp7XYHynuPZxChjWNJZIq+A73gm0ASDv6At7F8Vi9r0xUlQe/v0AQS3yc
+            N8QlyR4XMbzMLYk3yjxFDXo4ZKQtOGzLGteCU2srANiLv26/imXA8FVidZftTAtL
+            viWQZBVPTeYIA69ATUYPEq0a5u5wjGyUOij9OWyuy01mbPkCQQDluYoNpPOekQ0Z
+            WrPgJ5rxc8f6zG37ZVoDBiexqtVShIF5W3xYuWhW5kYb0hliYfkq15cS7t9m95h3
+            1QJf/xI/AkEA1v9l/WN1a1N3rOK4VGoCokx7kR2SyTMSbZgF9IWJNOugR/WZw7HT
+            njipO3c9dy1Ms9pUKwUF46d7049ck8HwdQJARgrSKuLWXMyBH+/l1Dx/I4tXuAJI
+            rlPyo+VmiOc7b5NzHptkSHEPfR9s1OK0VqjknclqCJ3Ig86OMEtEFBzjZQJBAKYz
+            470hcPkaGk7tKYAgP48FvxRsnzeooptURW5E+M+PQ2W9iDPPOX9739+Xi02hGEWF
+            B0IGbQoTRFdE4VVcPK0CQQCeS84lODlC0Y2BZv2JxW3Osv/WkUQ4dslfAQl1T303
+            7uwwr7XTroMv8dIFQIPreoPhRKmd/SbJzbiKfS/4QDhU
+            -----END RSA PRIVATE KEY-----
+            """)
+        self.pk_id = "PK123456789754"
+        self.dist = Distribution()
+        self.canned_policy = (
+            '{"Statement":[{"Resource":'
+            '"http://d604721fxaaqy9.cloudfront.net/horizon.jpg'
+            '?large=yes&license=yes",'
+            '"Condition":{"DateLessThan":{"AWS:EpochTime":1258237200}}}]}')
+        self.custom_policy_1 = (
+            '{ \n'
+            '   "Statement": [{ \n'
+            '      "Resource":"http://d604721fxaaqy9.cloudfront.net/training/*", \n'
+            '      "Condition":{ \n'
+            '         "IpAddress":{"AWS:SourceIp":"145.168.143.0/24"}, \n'
+            '         "DateLessThan":{"AWS:EpochTime":1258237200}      \n'
+            '      } \n'
+            '   }] \n'
+            '}\n')
+        self.custom_policy_2 = (
+            '{ \n'
+            '   "Statement": [{ \n'
+            '      "Resource":"http://*", \n'
+            '      "Condition":{ \n'
+            '         "IpAddress":{"AWS:SourceIp":"216.98.35.1/32"},\n'
+            '         "DateGreaterThan":{"AWS:EpochTime":1241073790},\n'
+            '         "DateLessThan":{"AWS:EpochTime":1255674716}\n'
+            '      } \n'
+            '   }] \n'
+            '}\n')
+
+    def test_encode_custom_policy_1(self):
+        """
+        Test base64 encoding custom policy 1 from Amazon's documentation.
+        """
+        expected = ("eyAKICAgIlN0YXRlbWVudCI6IFt7IAogICAgICAiUmVzb3VyY2Ui"
+                    "OiJodHRwOi8vZDYwNDcyMWZ4YWFxeTkuY2xvdWRmcm9udC5uZXQv"
+                    "dHJhaW5pbmcvKiIsIAogICAgICAiQ29uZGl0aW9uIjp7IAogICAg"
+                    "ICAgICAiSXBBZGRyZXNzIjp7IkFXUzpTb3VyY2VJcCI6IjE0NS4x"
+                    "NjguMTQzLjAvMjQifSwgCiAgICAgICAgICJEYXRlTGVzc1RoYW4i"
+                    "OnsiQVdTOkVwb2NoVGltZSI6MTI1ODIzNzIwMH0gICAgICAKICAg"
+                    "ICAgfSAKICAgfV0gCn0K")
+        encoded = self.dist._url_base64_encode(self.custom_policy_1)
+        self.assertEqual(expected, encoded)
+
+    def test_encode_custom_policy_2(self):
+        """
+        Test base64 encoding custom policy 2 from Amazon's documentation.
+        """
+        expected = ("eyAKICAgIlN0YXRlbWVudCI6IFt7IAogICAgICAiUmVzb3VyY2Ui"
+                    "OiJodHRwOi8vKiIsIAogICAgICAiQ29uZGl0aW9uIjp7IAogICAg"
+                    "ICAgICAiSXBBZGRyZXNzIjp7IkFXUzpTb3VyY2VJcCI6IjIxNi45"
+                    "OC4zNS4xLzMyIn0sCiAgICAgICAgICJEYXRlR3JlYXRlclRoYW4i"
+                    "OnsiQVdTOkVwb2NoVGltZSI6MTI0MTA3Mzc5MH0sCiAgICAgICAg"
+                    "ICJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTI1NTY3"
+                    "NDcxNn0KICAgICAgfSAKICAgfV0gCn0K")
+        encoded = self.dist._url_base64_encode(self.custom_policy_2)
+        self.assertEqual(expected, encoded)
+
+    def test_sign_canned_policy(self):
+        """
+        Test signing the canned policy from amazon's cloudfront documentation.
+        """
+        expected = ("Nql641NHEUkUaXQHZINK1FZ~SYeUSoBJMxjdgqrzIdzV2gyEXPDN"
+                    "v0pYdWJkflDKJ3xIu7lbwRpSkG98NBlgPi4ZJpRRnVX4kXAJK6td"
+                    "Nx6FucDB7OVqzcxkxHsGFd8VCG1BkC-Afh9~lOCMIYHIaiOB6~5j"
+                    "t9w2EOwi6sIIqrg_")
+        sig = self.dist._sign_string(self.canned_policy, private_key_string=self.pk_str)
+        encoded_sig = self.dist._url_base64_encode(sig)
+        self.assertEqual(expected, encoded_sig)
+
+    def test_sign_canned_policy_pk_file(self):
+        """
+        Test signing the canned policy from amazon's cloudfront documentation
+        with a file object.
+        """
+        expected = ("Nql641NHEUkUaXQHZINK1FZ~SYeUSoBJMxjdgqrzIdzV2gyEXPDN"
+                    "v0pYdWJkflDKJ3xIu7lbwRpSkG98NBlgPi4ZJpRRnVX4kXAJK6td"
+                    "Nx6FucDB7OVqzcxkxHsGFd8VCG1BkC-Afh9~lOCMIYHIaiOB6~5j"
+                    "t9w2EOwi6sIIqrg_")
+        pk_file = tempfile.TemporaryFile()
+        pk_file.write(self.pk_str)
+        pk_file.seek(0)
+        sig = self.dist._sign_string(self.canned_policy, private_key_file=pk_file)
+        encoded_sig = self.dist._url_base64_encode(sig)
+        self.assertEqual(expected, encoded_sig)
+
+    def test_sign_canned_policy_pk_file_name(self):
+        """
+        Test signing the canned policy from amazon's cloudfront documentation
+        with a file name.
+        """
+        expected = ("Nql641NHEUkUaXQHZINK1FZ~SYeUSoBJMxjdgqrzIdzV2gyEXPDN"
+                    "v0pYdWJkflDKJ3xIu7lbwRpSkG98NBlgPi4ZJpRRnVX4kXAJK6td"
+                    "Nx6FucDB7OVqzcxkxHsGFd8VCG1BkC-Afh9~lOCMIYHIaiOB6~5j"
+                    "t9w2EOwi6sIIqrg_")
+        pk_file = tempfile.NamedTemporaryFile()
+        pk_file.write(self.pk_str)
+        pk_file.flush()
+        sig = self.dist._sign_string(self.canned_policy, private_key_file=pk_file.name)
+        encoded_sig = self.dist._url_base64_encode(sig)
+        self.assertEqual(expected, encoded_sig)
+
+    def test_sign_canned_policy_unicode(self):
+        """
+        Test signing the canned policy from amazon's cloudfront documentation.
+        """
+        expected = ("Nql641NHEUkUaXQHZINK1FZ~SYeUSoBJMxjdgqrzIdzV2gyEXPDN"
+                    "v0pYdWJkflDKJ3xIu7lbwRpSkG98NBlgPi4ZJpRRnVX4kXAJK6td"
+                    "Nx6FucDB7OVqzcxkxHsGFd8VCG1BkC-Afh9~lOCMIYHIaiOB6~5j"
+                    "t9w2EOwi6sIIqrg_")
+        unicode_policy = unicode(self.canned_policy)
+        sig = self.dist._sign_string(unicode_policy, private_key_string=self.pk_str)
+        encoded_sig = self.dist._url_base64_encode(sig)
+        self.assertEqual(expected, encoded_sig)
+
+    def test_sign_custom_policy_1(self):
+        """
+        Test signing custom policy 1 from amazon's cloudfront documentation.
+        """
+        expected = ("cPFtRKvUfYNYmxek6ZNs6vgKEZP6G3Cb4cyVt~FjqbHOnMdxdT7e"
+                    "T6pYmhHYzuDsFH4Jpsctke2Ux6PCXcKxUcTIm8SO4b29~1QvhMl-"
+                    "CIojki3Hd3~Unxjw7Cpo1qRjtvrimW0DPZBZYHFZtiZXsaPt87yB"
+                    "P9GWnTQoaVysMxQ_")
+        sig = self.dist._sign_string(self.custom_policy_1, private_key_string=self.pk_str)
+        encoded_sig = self.dist._url_base64_encode(sig)
+        self.assertEqual(expected, encoded_sig)
+
+    def test_sign_custom_policy_2(self):
+        """
+        Test signing custom policy 2 from amazon's cloudfront documentation.
+        """
+        expected = ("rc~5Qbbm8EJXjUTQ6Cn0LAxR72g1DOPrTmdtfbWVVgQNw0q~KHUA"
+                    "mBa2Zv1Wjj8dDET4XSL~Myh44CLQdu4dOH~N9huH7QfPSR~O4tIO"
+                    "S1WWcP~2JmtVPoQyLlEc8YHRCuN3nVNZJ0m4EZcXXNAS-0x6Zco2"
+                    "SYx~hywTRxWR~5Q_")
+        sig = self.dist._sign_string(self.custom_policy_2, private_key_string=self.pk_str)
+        encoded_sig = self.dist._url_base64_encode(sig)
+        self.assertEqual(expected, encoded_sig)
+
+    def test_create_canned_policy(self):
+        """
+        Test that a canned policy is generated correctly.
+        """
+        url = "http://1234567.cloudfront.com/test_resource.mp3?dog=true"
+        expires = 999999
+        policy = self.dist._canned_policy(url, expires)
+        policy = json.loads(policy)
+
+        self.assertEqual(1, len(policy.keys()))
+        statements = policy["Statement"]
+        self.assertEqual(1, len(statements))
+        statement = statements[0]
+        resource = statement["Resource"]
+        self.assertEqual(url, resource)
+        condition = statement["Condition"]
+        self.assertEqual(1, len(condition.keys()))
+        date_less_than = condition["DateLessThan"]
+        self.assertEqual(1, len(date_less_than.keys()))
+        aws_epoch_time = date_less_than["AWS:EpochTime"]
+        self.assertEqual(expires, aws_epoch_time)
+        
+    def test_custom_policy_expires_and_policy_url(self):
+        """
+        Test that a custom policy can be created with an expire time and an
+        arbitrary URL.
+        """
+        url = "http://1234567.cloudfront.com/*"
+        expires = 999999
+        policy = self.dist._custom_policy(url, expires=expires)
+        policy = json.loads(policy)
+
+        self.assertEqual(1, len(policy.keys()))
+        statements = policy["Statement"]
+        self.assertEqual(1, len(statements))
+        statement = statements[0]
+        resource = statement["Resource"]
+        self.assertEqual(url, resource)
+        condition = statement["Condition"]
+        self.assertEqual(1, len(condition.keys()))
+        date_less_than = condition["DateLessThan"]
+        self.assertEqual(1, len(date_less_than.keys()))
+        aws_epoch_time = date_less_than["AWS:EpochTime"]
+        self.assertEqual(expires, aws_epoch_time)
+
+    def test_custom_policy_valid_after(self):
+        """
+        Test that a custom policy can be created with a valid-after time and
+        an arbitrary URL.
+        """
+        url = "http://1234567.cloudfront.com/*"
+        valid_after = 999999
+        policy = self.dist._custom_policy(url, valid_after=valid_after)
+        policy = json.loads(policy)
+
+        self.assertEqual(1, len(policy.keys()))
+        statements = policy["Statement"]
+        self.assertEqual(1, len(statements))
+        statement = statements[0]
+        resource = statement["Resource"]
+        self.assertEqual(url, resource)
+        condition = statement["Condition"]
+        self.assertEqual(2, len(condition.keys()))
+        date_less_than = condition["DateLessThan"]
+        date_greater_than = condition["DateGreaterThan"]
+        self.assertEqual(1, len(date_greater_than.keys()))
+        aws_epoch_time = date_greater_than["AWS:EpochTime"]
+        self.assertEqual(valid_after, aws_epoch_time)
+
+    def test_custom_policy_ip_address(self):
+        """
+        Test that a custom policy can be created with an IP address and
+        an arbitrary URL.
+        """
+        url = "http://1234567.cloudfront.com/*"
+        ip_range = "192.168.0.1"
+        policy = self.dist._custom_policy(url, ip_address=ip_range)
+        policy = json.loads(policy)
+
+        self.assertEqual(1, len(policy.keys()))
+        statements = policy["Statement"]
+        self.assertEqual(1, len(statements))
+        statement = statements[0]
+        resource = statement["Resource"]
+        self.assertEqual(url, resource)
+        condition = statement["Condition"]
+        self.assertEqual(2, len(condition.keys()))
+        ip_address = condition["IpAddress"]
+        self.assertTrue("DateLessThan" in condition)
+        self.assertEqual(1, len(ip_address.keys()))
+        source_ip = ip_address["AWS:SourceIp"]
+        self.assertEqual("%s/32" % ip_range, source_ip)
+
+    def test_custom_policy_ip_range(self):
+        """
+        Test that a custom policy can be created with an IP address and
+        an arbitrary URL.
+        """
+        url = "http://1234567.cloudfront.com/*"
+        ip_range = "192.168.0.0/24"
+        policy = self.dist._custom_policy(url, ip_address=ip_range)
+        policy = json.loads(policy)
+
+        self.assertEqual(1, len(policy.keys()))
+        statements = policy["Statement"]
+        self.assertEqual(1, len(statements))
+        statement = statements[0]
+        resource = statement["Resource"]
+        self.assertEqual(url, resource)
+        condition = statement["Condition"]
+        self.assertEqual(2, len(condition.keys()))
+        self.assertTrue("DateLessThan" in condition)
+        ip_address = condition["IpAddress"]
+        self.assertEqual(1, len(ip_address.keys()))
+        source_ip = ip_address["AWS:SourceIp"]
+        self.assertEqual(ip_range, source_ip)
+
+    def test_custom_policy_all(self):
+        """
+        Test that a custom policy can be created with an IP address and
+        an arbitrary URL.
+        """
+        url = "http://1234567.cloudfront.com/test.txt"
+        expires = 999999
+        valid_after = 111111
+        ip_range = "192.168.0.0/24"
+        policy = self.dist._custom_policy(url, expires=expires,
+                                          valid_after=valid_after,
+                                          ip_address=ip_range)
+        policy = json.loads(policy)
+
+        self.assertEqual(1, len(policy.keys()))
+        statements = policy["Statement"]
+        self.assertEqual(1, len(statements))
+        statement = statements[0]
+        resource = statement["Resource"]
+        self.assertEqual(url, resource)
+        condition = statement["Condition"]
+        self.assertEqual(3, len(condition.keys()))
+        #check expires condition
+        date_less_than = condition["DateLessThan"]
+        self.assertEqual(1, len(date_less_than.keys()))
+        aws_epoch_time = date_less_than["AWS:EpochTime"]
+        self.assertEqual(expires, aws_epoch_time)
+        #check valid_after condition
+        date_greater_than = condition["DateGreaterThan"]
+        self.assertEqual(1, len(date_greater_than.keys()))
+        aws_epoch_time = date_greater_than["AWS:EpochTime"]
+        self.assertEqual(valid_after, aws_epoch_time)
+        #check source ip address condition
+        ip_address = condition["IpAddress"]
+        self.assertEqual(1, len(ip_address.keys()))
+        source_ip = ip_address["AWS:SourceIp"]
+        self.assertEqual(ip_range, source_ip)
+
+    def test_params_canned_policy(self):
+        """
+        Test the correct params are generated for a canned policy.
+        """
+        url = "http://d604721fxaaqy9.cloudfront.net/horizon.jpg?large=yes&license=yes"
+        expire_time = 1258237200
+        expected_sig = ("Nql641NHEUkUaXQHZINK1FZ~SYeUSoBJMxjdgqrzIdzV2gyE"
+                        "XPDNv0pYdWJkflDKJ3xIu7lbwRpSkG98NBlgPi4ZJpRRnVX4"
+                        "kXAJK6tdNx6FucDB7OVqzcxkxHsGFd8VCG1BkC-Afh9~lOCM"
+                        "IYHIaiOB6~5jt9w2EOwi6sIIqrg_")
+        signed_url_params = self.dist._create_signing_params(url, self.pk_id, expire_time, private_key_string=self.pk_str)
+        self.assertEqual(3, len(signed_url_params))
+        self.assertEqual(signed_url_params["Expires"], "1258237200")
+        self.assertEqual(signed_url_params["Signature"], expected_sig)
+        self.assertEqual(signed_url_params["Key-Pair-Id"], "PK123456789754")
+
+    def test_canned_policy(self):
+        """
+        Generate signed url from the Example Canned Policy in Amazon's
+        documentation.
+        """
+        url = "http://d604721fxaaqy9.cloudfront.net/horizon.jpg?large=yes&license=yes"
+        expire_time = 1258237200
+        expected_url = "http://d604721fxaaqy9.cloudfront.net/horizon.jpg?large=yes&license=yes&Expires=1258237200&Signature=Nql641NHEUkUaXQHZINK1FZ~SYeUSoBJMxjdgqrzIdzV2gyEXPDNv0pYdWJkflDKJ3xIu7lbwRpSkG98NBlgPi4ZJpRRnVX4kXAJK6tdNx6FucDB7OVqzcxkxHsGFd8VCG1BkC-Afh9~lOCMIYHIaiOB6~5jt9w2EOwi6sIIqrg_&Key-Pair-Id=PK123456789754"
+        signed_url = self.dist.create_signed_url(
+            url, self.pk_id, expire_time, private_key_string=self.pk_str)
+        self.assertEqual(expected_url, signed_url)
+