inspec 3.7.1 → 3.7.11

data/lib/resources/aws/aws_ec2_instances.rb

@@ -1,11 +1,11 @@
 class AwsEc2Instances < Inspec.resource(1)
   name 'aws_ec2_instances'
   desc 'Verifies settings for AWS EC2 Instances in bulk'
-  example '
+  example <<~EXAMPLE
     describe aws_ec2_instances do
       it { should exist }
     end
-  '
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsPluralResourceMixin

data/lib/resources/aws/aws_ecs_cluster.rb

@@ -2,11 +2,11 @@ class AwsEcsCluster < Inspec.resource(1)
   name 'aws_ecs_cluster'
   desc 'Verifies settings for an ECS cluster'
 
-  example <<-EOX
+  example <<~EXAMPLE
     describe aws_ecs_cluster('default') do
       it { should exist }
     end
-EOX
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_eks_cluster.rb

@@ -2,11 +2,11 @@ class AwsEksCluster < Inspec.resource(1)
   name 'aws_eks_cluster'
   desc 'Verifies settings for an EKS cluster'
 
-  example <<-EOX
+  example <<~EXAMPLE
     describe aws_eks_cluster('default') do
       it { should exist }
     end
-EOX
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_elb.rb

@@ -1,11 +1,11 @@
 class AwsElb < Inspec.resource(1)
   name 'aws_elb'
   desc 'Verifies settings for AWS Elastic Load Balancer'
-  example "
+  example <<~EXAMPLE
     describe aws_elb('myelb') do
       it { should exist }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_elbs.rb

@@ -1,11 +1,11 @@
 class AwsElbs < Inspec.resource(1)
   name 'aws_elbs'
   desc 'Verifies settings for AWS ELBs (classic Elastic Load Balancers) in bulk'
-  example '
+  example <<~EXAMPLE
     describe aws_elbs do
       it { should exist }
     end
-  '
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsPluralResourceMixin

data/lib/resources/aws/aws_flow_log.rb

@@ -2,11 +2,11 @@ class AwsFlowLog < Inspec.resource(1)
   name 'aws_flow_log'
   supports platform: 'aws'
   desc 'This resource is used to test the attributes of a Flow Log.'
-  example <<~EOT
+  example <<~EXAMPLE
     describe aws_flow_log('fl-9c718cf5') do
       it { should exist }
     end
-    EOT
+  EXAMPLE
 
   include AwsSingularResourceMixin
 

data/lib/resources/aws/aws_iam_access_key.rb

@@ -1,14 +1,14 @@
 class AwsIamAccessKey < Inspec.resource(1)
   name 'aws_iam_access_key'
   desc 'Verifies settings for an individual IAM access key'
-  example "
+  example <<~EXAMPLE
     describe aws_iam_access_key(username: 'username', id: 'access-key id') do
       it { should exist }
       it { should_not be_active }
       its('create_date') { should be > Time.now - 365 * 86400 }
       its('last_used_date') { should be > Time.now - 90 * 86400 }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_iam_access_keys.rb

@@ -1,11 +1,11 @@
 class AwsIamAccessKeys < Inspec.resource(1)
   name 'aws_iam_access_keys'
   desc 'Verifies settings for AWS IAM Access Keys in bulk'
-  example '
+  example <<~EXAMPLE
     describe aws_iam_access_keys do
       it { should_not exist }
     end
-  '
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsPluralResourceMixin

data/lib/resources/aws/aws_iam_group.rb

@@ -1,11 +1,11 @@
 class AwsIamGroup < Inspec.resource(1)
   name 'aws_iam_group'
   desc 'Verifies settings for AWS IAM Group'
-  example "
+  example <<~EXAMPLE
     describe aws_iam_group('mygroup') do
       it { should exist }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_iam_groups.rb

@@ -1,11 +1,11 @@
 class AwsIamGroups < Inspec.resource(1)
   name 'aws_iam_groups'
   desc 'Verifies settings for AWS IAM groups in bulk'
-  example '
+  example <<~EXAMPLE
     describe aws_iam_groups do
       it { should exist }
     end
-  '
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsPluralResourceMixin

data/lib/resources/aws/aws_iam_password_policy.rb

@@ -3,7 +3,7 @@ class AwsIamPasswordPolicy < Inspec.resource(1)
   name 'aws_iam_password_policy'
   desc 'Verifies iam password policy'
 
-  example <<-EOX
+  example <<~EXAMPLE
     describe aws_iam_password_policy do
       its('requires_lowercase_characters?') { should be true }
     end
@@ -11,7 +11,7 @@ class AwsIamPasswordPolicy < Inspec.resource(1)
     describe aws_iam_password_policy do
       its('requires_uppercase_characters?') { should be true }
     end
-EOX
+  EXAMPLE
   supports platform: 'aws'
 
   # TODO: rewrite to avoid direct injection, match other resources, use AwsSingularResourceMixin

data/lib/resources/aws/aws_iam_policies.rb

@@ -1,11 +1,11 @@
 class AwsIamPolicies < Inspec.resource(1)
   name 'aws_iam_policies'
   desc 'Verifies settings for AWS IAM Policies in bulk'
-  example '
+  example <<~EXAMPLE
     describe aws_iam_policies do
       it { should exist }
     end
-  '
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsPluralResourceMixin

data/lib/resources/aws/aws_iam_policy.rb

@@ -5,11 +5,11 @@ require 'uri'
 class AwsIamPolicy < Inspec.resource(1)
   name 'aws_iam_policy'
   desc 'Verifies settings for individual AWS IAM Policy'
-  example "
+  example <<~EXAMPLE
     describe aws_iam_policy('AWSSupportAccess') do
       it { should be_attached }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_iam_role.rb

@@ -1,11 +1,11 @@
 class AwsIamRole < Inspec.resource(1)
   name 'aws_iam_role'
   desc 'Verifies settings for an IAM Role'
-  example "
+  example <<~EXAMPLE
     describe aws_iam_role('my-role') do
       it { should exist }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_iam_root_user.rb

@@ -1,11 +1,11 @@
 class AwsIamRootUser < Inspec.resource(1)
   name 'aws_iam_root_user'
   desc 'Verifies settings for AWS root account'
-  example "
+  example <<~EXAMPLE
     describe aws_iam_root_user do
       it { should have_access_key }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   # TODO: rewrite to avoid direct injection, match other resources, use AwsSingularResourceMixin

data/lib/resources/aws/aws_iam_user.rb

@@ -5,14 +5,14 @@
 class AwsIamUser < Inspec.resource(1)
   name 'aws_iam_user'
   desc 'Verifies settings for AWS IAM user'
-  example "
+  example <<~EXAMPLE
     describe aws_iam_user(username: 'test_user') do
       it { should have_mfa_enabled }
       it { should_not have_console_password }
       it { should_not have_inline_user_policies }
       it { should_not have_attached_user_policies }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_iam_users.rb

@@ -5,7 +5,7 @@
 class AwsIamUsers < Inspec.resource(1)
   name 'aws_iam_users'
   desc 'Verifies settings for AWS IAM users'
-  example '
+  example <<~EXAMPLE
     describe aws_iam_users.where(has_mfa_enabled?: false) do
       it { should_not exist }
     end
@@ -18,7 +18,7 @@ class AwsIamUsers < Inspec.resource(1)
     describe aws_iam_users.where(has_attached_policies?: true) do
       it { should_not exist }
     end
-  '
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsPluralResourceMixin

data/lib/resources/aws/aws_kms_key.rb

@@ -1,11 +1,11 @@
 class AwsKmsKey < Inspec.resource(1)
   name 'aws_kms_key'
   desc 'Verifies settings for an individual AWS KMS Key'
-  example "
+  example <<~EXAMPLE
     describe aws_kms_key('arn:aws:kms:us-east-1::key/4321dcba-21io-23de-85he-ab0987654321') do
       it { should exist }
     end
-  "
+  EXAMPLE
 
   supports platform: 'aws'
 

data/lib/resources/aws/aws_kms_keys.rb

@@ -1,11 +1,11 @@
 class AwsKmsKeys < Inspec.resource(1)
   name 'aws_kms_keys'
   desc 'Verifies settings for AWS KMS Keys in bulk'
-  example '
+  example <<~EXAMPLE
     describe aws_kms_keys do
       it { should exist }
     end
-  '
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsPluralResourceMixin

data/lib/resources/aws/aws_rds_instance.rb

@@ -2,11 +2,11 @@
 class AwsRdsInstance < Inspec.resource(1)
   name 'aws_rds_instance'
   desc 'Verifies settings for an rds instance'
-  example "
+  example <<~EXAMPLE
     describe aws_rds_instance(db_instance_identifier: 'test-instance-id') do
       it { should exist }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_route_table.rb

@@ -1,11 +1,11 @@
 class AwsRouteTable < Inspec.resource(1)
   name 'aws_route_table'
   desc 'Verifies settings for an AWS Route Table'
-  example "
+  example <<~EXAMPLE
     describe aws_route_table do
       its('route_table_id') { should cmp 'rtb-05462d2278326a79c' }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_route_tables.rb

@@ -1,11 +1,11 @@
 class AwsRouteTables < Inspec.resource(1)
   name 'aws_route_tables'
   desc 'Verifies settings for AWS Route Tables in bulk'
-  example '
+  example <<~EXAMPLE
     describe aws_route_tables do
       it { should exist }
     end
-  '
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsPluralResourceMixin

data/lib/resources/aws/aws_s3_bucket.rb

@@ -2,11 +2,11 @@
 class AwsS3Bucket < Inspec.resource(1)
   name 'aws_s3_bucket'
   desc 'Verifies settings for a s3 bucket'
-  example "
+  example <<~EXAMPLE
     describe aws_s3_bucket(bucket_name: 'test_bucket') do
       it { should exist }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_s3_bucket_object.rb

@@ -2,12 +2,12 @@
 class AwsS3BucketObject < Inspec.resource(1)
   name 'aws_s3_bucket_object'
   desc 'Verifies settings for a s3 bucket object'
-  example "
+  example <<~EXAMPLE
     describe aws_s3_bucket_object(bucket_name: 'bucket_name', key: 'file_name') do
       it { should exist }
       it { should_not be_public }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_s3_buckets.rb

@@ -3,11 +3,11 @@
 class AwsS3Buckets < Inspec.resource(1)
   name 'aws_s3_buckets'
   desc 'Verifies settings for AWS S3 Buckets in bulk'
-  example "
+  example <<~EXAMPLE
     describe aws_s3_bucket do
       its('bucket_names') { should eq ['my_bucket'] }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsPluralResourceMixin

data/lib/resources/aws/aws_security_group.rb

@@ -4,11 +4,11 @@ require 'ipaddr'
 class AwsSecurityGroup < Inspec.resource(1)
   name 'aws_security_group'
   desc 'Verifies settings for an individual AWS Security Group.'
-  example "
-  describe aws_security_group('sg-12345678') do
-    it { should exist }
-  end
-  "
+  example <<~EXAMPLE
+    describe aws_security_group('sg-12345678') do
+      it { should exist }
+    end
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin

data/lib/resources/aws/aws_security_groups.rb

@@ -1,7 +1,7 @@
 class AwsSecurityGroups < Inspec.resource(1)
   name 'aws_security_groups'
   desc 'Verifies settings for AWS Security Groups in bulk'
-  example <<-EOX
+  example <<~EXAMPLE
     # Verify that you have security groups defined
     describe aws_security_groups do
       it { should exist }
@@ -11,7 +11,7 @@ class AwsSecurityGroups < Inspec.resource(1)
     describe aws_security_groups do
       its('entries.count') { should be > 1 }
     end
-EOX
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsPluralResourceMixin

data/lib/resources/aws/aws_sns_subscription.rb

@@ -1,7 +1,7 @@
 class AwsSnsSubscription < Inspec.resource(1)
   name 'aws_sns_subscription'
   desc 'Verifies settings for an SNS Subscription'
-  example "
+  example <<~EXAMPLE
     describe aws_sns_subscription('arn:aws:sns:us-east-1::test-topic-01:b214aff5-a2c7-438f-a753-8494493f2ff6') do
       it { should_not have_raw_message_delivery }
       it { should be_confirmation_authenticated }
@@ -10,7 +10,7 @@ class AwsSnsSubscription < Inspec.resource(1)
       its('endpoint') { should cmp 'arn:aws:sqs:us-east-1::test-queue-01' }
       its('protocol') { should cmp 'sqs' }
     end
-  "
+  EXAMPLE
 
   supports platform: 'aws'
 

data/lib/resources/aws/aws_sns_topic.rb

@@ -1,12 +1,12 @@
 class AwsSnsTopic < Inspec.resource(1)
   name 'aws_sns_topic'
   desc 'Verifies settings for an SNS Topic'
-  example "
+  example <<~EXAMPLE
     describe aws_sns_topic('arn:aws:sns:us-east-1:123456789012:some-topic') do
       it { should exist }
       its('confirmed_subscription_count') { should_not be_zero }
     end
-  "
+  EXAMPLE
   supports platform: 'aws'
 
   include AwsSingularResourceMixin