@aws-solutions-constructs/aws-iot-sqs 1.120.0 → 1.121.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/.jsii +35 -8
  2. package/lib/index.js +1 -1
  3. package/package.json +14 -14
  4. package/test/iot-sqs.test.js +1 -10
  5. package/test/__snapshots__/iot-sqs.test.js.snap +0 -2477
package/test/__snapshots__/iot-sqs.test.js.snap DELETED
@@ -1,2477 +0,0 @@
1
- // Jest Snapshot v1, https://goo.gl/fbAQLP
2
-
3
- exports[`Pattern deployment passing KMS key props 1`] = `
4
- Object {
5
- "Resources": Object {
6
- "testiotsqsEncryptionKey64EE64B1": Object {
7
- "DeletionPolicy": "Retain",
8
- "Properties": Object {
9
- "EnableKeyRotation": false,
10
- "KeyPolicy": Object {
11
- "Statement": Array [
12
- Object {
13
- "Action": Array [
14
- "kms:Create*",
15
- "kms:Describe*",
16
- "kms:Enable*",
17
- "kms:List*",
18
- "kms:Put*",
19
- "kms:Update*",
20
- "kms:Revoke*",
21
- "kms:Disable*",
22
- "kms:Get*",
23
- "kms:Delete*",
24
- "kms:ScheduleKeyDeletion",
25
- "kms:CancelKeyDeletion",
26
- "kms:GenerateDataKey",
27
- "kms:TagResource",
28
- "kms:UntagResource",
29
- ],
30
- "Effect": "Allow",
31
- "Principal": Object {
32
- "AWS": Object {
33
- "Fn::Join": Array [
34
- "",
35
- Array [
36
- "arn:",
37
- Object {
38
- "Ref": "AWS::Partition",
39
- },
40
- ":iam::",
41
- Object {
42
- "Ref": "AWS::AccountId",
43
- },
44
- ":root",
45
- ],
46
- ],
47
- },
48
- },
49
- "Resource": "*",
50
- },
51
- Object {
52
- "Action": Array [
53
- "kms:Decrypt",
54
- "kms:Encrypt",
55
- "kms:ReEncrypt*",
56
- "kms:GenerateDataKey*",
57
- ],
58
- "Effect": "Allow",
59
- "Principal": Object {
60
- "AWS": Object {
61
- "Fn::GetAtt": Array [
62
- "testiotsqsiotactionsrole93B1D327",
63
- "Arn",
64
- ],
65
- },
66
- },
67
- "Resource": "*",
68
- },
69
- Object {
70
- "Action": Array [
71
- "kms:Encrypt",
72
- "kms:ReEncrypt*",
73
- "kms:GenerateDataKey*",
74
- ],
75
- "Effect": "Allow",
76
- "Principal": Object {
77
- "AWS": Object {
78
- "Fn::GetAtt": Array [
79
- "testiotsqsiotactionsrole93B1D327",
80
- "Arn",
81
- ],
82
- },
83
- },
84
- "Resource": "*",
85
- },
86
- ],
87
- "Version": "2012-10-17",
88
- },
89
- },
90
- "Type": "AWS::KMS::Key",
91
- "UpdateReplacePolicy": "Retain",
92
- },
93
- "testiotsqsEncryptionKeyAlias5A222BA1": Object {
94
- "Properties": Object {
95
- "AliasName": "alias/new-key-alias-from-props",
96
- "TargetKeyId": Object {
97
- "Fn::GetAtt": Array [
98
- "testiotsqsEncryptionKey64EE64B1",
99
- "Arn",
100
- ],
101
- },
102
- },
103
- "Type": "AWS::KMS::Alias",
104
- },
105
- "testiotsqsIotTopicRule3ABB9E1A": Object {
106
- "Properties": Object {
107
- "TopicRulePayload": Object {
108
- "Actions": Array [
109
- Object {
110
- "Sqs": Object {
111
- "QueueUrl": Object {
112
- "Ref": "testiotsqsqueue630B4C1F",
113
- },
114
- "RoleArn": Object {
115
- "Fn::GetAtt": Array [
116
- "testiotsqsiotactionsrole93B1D327",
117
- "Arn",
118
- ],
119
- },
120
- },
121
- },
122
- ],
123
- "Description": "Processing messages from IoT devices or factory machines",
124
- "RuleDisabled": false,
125
- "Sql": "SELECT * FROM 'test/topic/#'",
126
- },
127
- },
128
- "Type": "AWS::IoT::TopicRule",
129
- },
130
- "testiotsqsdeadLetterQueue66A04E81": Object {
131
- "DeletionPolicy": "Delete",
132
- "Properties": Object {
133
- "KmsMasterKeyId": "alias/aws/sqs",
134
- },
135
- "Type": "AWS::SQS::Queue",
136
- "UpdateReplacePolicy": "Delete",
137
- },
138
- "testiotsqsdeadLetterQueuePolicyE13575BF": Object {
139
- "Properties": Object {
140
- "PolicyDocument": Object {
141
- "Statement": Array [
142
- Object {
143
- "Action": Array [
144
- "sqs:DeleteMessage",
145
- "sqs:ReceiveMessage",
146
- "sqs:SendMessage",
147
- "sqs:GetQueueAttributes",
148
- "sqs:RemovePermission",
149
- "sqs:AddPermission",
150
- "sqs:SetQueueAttributes",
151
- ],
152
- "Effect": "Allow",
153
- "Principal": Object {
154
- "AWS": Object {
155
- "Fn::Join": Array [
156
- "",
157
- Array [
158
- "arn:",
159
- Object {
160
- "Ref": "AWS::Partition",
161
- },
162
- ":iam::",
163
- Object {
164
- "Ref": "AWS::AccountId",
165
- },
166
- ":root",
167
- ],
168
- ],
169
- },
170
- },
171
- "Resource": Object {
172
- "Fn::GetAtt": Array [
173
- "testiotsqsdeadLetterQueue66A04E81",
174
- "Arn",
175
- ],
176
- },
177
- "Sid": "QueueOwnerOnlyAccess",
178
- },
179
- Object {
180
- "Action": "SQS:*",
181
- "Condition": Object {
182
- "Bool": Object {
183
- "aws:SecureTransport": "false",
184
- },
185
- },
186
- "Effect": "Deny",
187
- "Principal": Object {
188
- "AWS": "*",
189
- },
190
- "Resource": Object {
191
- "Fn::GetAtt": Array [
192
- "testiotsqsdeadLetterQueue66A04E81",
193
- "Arn",
194
- ],
195
- },
196
- "Sid": "HttpsOnly",
197
- },
198
- ],
199
- "Version": "2012-10-17",
200
- },
201
- "Queues": Array [
202
- Object {
203
- "Ref": "testiotsqsdeadLetterQueue66A04E81",
204
- },
205
- ],
206
- },
207
- "Type": "AWS::SQS::QueuePolicy",
208
- },
209
- "testiotsqsiotactionsrole93B1D327": Object {
210
- "Properties": Object {
211
- "AssumeRolePolicyDocument": Object {
212
- "Statement": Array [
213
- Object {
214
- "Action": "sts:AssumeRole",
215
- "Effect": "Allow",
216
- "Principal": Object {
217
- "Service": "iot.amazonaws.com",
218
- },
219
- },
220
- ],
221
- "Version": "2012-10-17",
222
- },
223
- },
224
- "Type": "AWS::IAM::Role",
225
- },
226
- "testiotsqsiotactionsroleDefaultPolicyEE46FAE6": Object {
227
- "Properties": Object {
228
- "PolicyDocument": Object {
229
- "Statement": Array [
230
- Object {
231
- "Action": Array [
232
- "sqs:SendMessage",
233
- "sqs:GetQueueAttributes",
234
- "sqs:GetQueueUrl",
235
- ],
236
- "Effect": "Allow",
237
- "Resource": Object {
238
- "Fn::GetAtt": Array [
239
- "testiotsqsqueue630B4C1F",
240
- "Arn",
241
- ],
242
- },
243
- },
244
- Object {
245
- "Action": Array [
246
- "kms:Decrypt",
247
- "kms:Encrypt",
248
- "kms:ReEncrypt*",
249
- "kms:GenerateDataKey*",
250
- ],
251
- "Effect": "Allow",
252
- "Resource": Object {
253
- "Fn::GetAtt": Array [
254
- "testiotsqsEncryptionKey64EE64B1",
255
- "Arn",
256
- ],
257
- },
258
- },
259
- Object {
260
- "Action": Array [
261
- "kms:Encrypt",
262
- "kms:ReEncrypt*",
263
- "kms:GenerateDataKey*",
264
- ],
265
- "Effect": "Allow",
266
- "Resource": Object {
267
- "Fn::GetAtt": Array [
268
- "testiotsqsEncryptionKey64EE64B1",
269
- "Arn",
270
- ],
271
- },
272
- },
273
- ],
274
- "Version": "2012-10-17",
275
- },
276
- "PolicyName": "testiotsqsiotactionsroleDefaultPolicyEE46FAE6",
277
- "Roles": Array [
278
- Object {
279
- "Ref": "testiotsqsiotactionsrole93B1D327",
280
- },
281
- ],
282
- },
283
- "Type": "AWS::IAM::Policy",
284
- },
285
- "testiotsqsqueue630B4C1F": Object {
286
- "DeletionPolicy": "Delete",
287
- "Properties": Object {
288
- "KmsMasterKeyId": Object {
289
- "Fn::GetAtt": Array [
290
- "testiotsqsEncryptionKey64EE64B1",
291
- "Arn",
292
- ],
293
- },
294
- "RedrivePolicy": Object {
295
- "deadLetterTargetArn": Object {
296
- "Fn::GetAtt": Array [
297
- "testiotsqsdeadLetterQueue66A04E81",
298
- "Arn",
299
- ],
300
- },
301
- "maxReceiveCount": 15,
302
- },
303
- },
304
- "Type": "AWS::SQS::Queue",
305
- "UpdateReplacePolicy": "Delete",
306
- },
307
- "testiotsqsqueuePolicyD1FF6491": Object {
308
- "Properties": Object {
309
- "PolicyDocument": Object {
310
- "Statement": Array [
311
- Object {
312
- "Action": Array [
313
- "sqs:DeleteMessage",
314
- "sqs:ReceiveMessage",
315
- "sqs:SendMessage",
316
- "sqs:GetQueueAttributes",
317
- "sqs:RemovePermission",
318
- "sqs:AddPermission",
319
- "sqs:SetQueueAttributes",
320
- ],
321
- "Effect": "Allow",
322
- "Principal": Object {
323
- "AWS": Object {
324
- "Fn::Join": Array [
325
- "",
326
- Array [
327
- "arn:",
328
- Object {
329
- "Ref": "AWS::Partition",
330
- },
331
- ":iam::",
332
- Object {
333
- "Ref": "AWS::AccountId",
334
- },
335
- ":root",
336
- ],
337
- ],
338
- },
339
- },
340
- "Resource": Object {
341
- "Fn::GetAtt": Array [
342
- "testiotsqsqueue630B4C1F",
343
- "Arn",
344
- ],
345
- },
346
- "Sid": "QueueOwnerOnlyAccess",
347
- },
348
- Object {
349
- "Action": "SQS:*",
350
- "Condition": Object {
351
- "Bool": Object {
352
- "aws:SecureTransport": "false",
353
- },
354
- },
355
- "Effect": "Deny",
356
- "Principal": Object {
357
- "AWS": "*",
358
- },
359
- "Resource": Object {
360
- "Fn::GetAtt": Array [
361
- "testiotsqsqueue630B4C1F",
362
- "Arn",
363
- ],
364
- },
365
- "Sid": "HttpsOnly",
366
- },
367
- ],
368
- "Version": "2012-10-17",
369
- },
370
- "Queues": Array [
371
- Object {
372
- "Ref": "testiotsqsqueue630B4C1F",
373
- },
374
- ],
375
- },
376
- "Type": "AWS::SQS::QueuePolicy",
377
- },
378
- },
379
- }
380
- `;
381
-
382
- exports[`Pattern deployment with custom maxReceiveCount 1`] = `
383
- Object {
384
- "Resources": Object {
385
- "testiotsqsEncryptionKey64EE64B1": Object {
386
- "DeletionPolicy": "Retain",
387
- "Properties": Object {
388
- "EnableKeyRotation": true,
389
- "KeyPolicy": Object {
390
- "Statement": Array [
391
- Object {
392
- "Action": Array [
393
- "kms:Create*",
394
- "kms:Describe*",
395
- "kms:Enable*",
396
- "kms:List*",
397
- "kms:Put*",
398
- "kms:Update*",
399
- "kms:Revoke*",
400
- "kms:Disable*",
401
- "kms:Get*",
402
- "kms:Delete*",
403
- "kms:ScheduleKeyDeletion",
404
- "kms:CancelKeyDeletion",
405
- "kms:GenerateDataKey",
406
- "kms:TagResource",
407
- "kms:UntagResource",
408
- ],
409
- "Effect": "Allow",
410
- "Principal": Object {
411
- "AWS": Object {
412
- "Fn::Join": Array [
413
- "",
414
- Array [
415
- "arn:",
416
- Object {
417
- "Ref": "AWS::Partition",
418
- },
419
- ":iam::",
420
- Object {
421
- "Ref": "AWS::AccountId",
422
- },
423
- ":root",
424
- ],
425
- ],
426
- },
427
- },
428
- "Resource": "*",
429
- },
430
- Object {
431
- "Action": Array [
432
- "kms:Decrypt",
433
- "kms:Encrypt",
434
- "kms:ReEncrypt*",
435
- "kms:GenerateDataKey*",
436
- ],
437
- "Effect": "Allow",
438
- "Principal": Object {
439
- "AWS": Object {
440
- "Fn::GetAtt": Array [
441
- "testiotsqsiotactionsrole93B1D327",
442
- "Arn",
443
- ],
444
- },
445
- },
446
- "Resource": "*",
447
- },
448
- Object {
449
- "Action": Array [
450
- "kms:Encrypt",
451
- "kms:ReEncrypt*",
452
- "kms:GenerateDataKey*",
453
- ],
454
- "Effect": "Allow",
455
- "Principal": Object {
456
- "AWS": Object {
457
- "Fn::GetAtt": Array [
458
- "testiotsqsiotactionsrole93B1D327",
459
- "Arn",
460
- ],
461
- },
462
- },
463
- "Resource": "*",
464
- },
465
- ],
466
- "Version": "2012-10-17",
467
- },
468
- },
469
- "Type": "AWS::KMS::Key",
470
- "UpdateReplacePolicy": "Retain",
471
- },
472
- "testiotsqsIotTopicRule3ABB9E1A": Object {
473
- "Properties": Object {
474
- "TopicRulePayload": Object {
475
- "Actions": Array [
476
- Object {
477
- "Sqs": Object {
478
- "QueueUrl": Object {
479
- "Ref": "testiotsqsqueue630B4C1F",
480
- },
481
- "RoleArn": Object {
482
- "Fn::GetAtt": Array [
483
- "testiotsqsiotactionsrole93B1D327",
484
- "Arn",
485
- ],
486
- },
487
- },
488
- },
489
- ],
490
- "Description": "Processing messages from IoT devices or factory machines",
491
- "RuleDisabled": false,
492
- "Sql": "SELECT * FROM 'test/topic/#'",
493
- },
494
- },
495
- "Type": "AWS::IoT::TopicRule",
496
- },
497
- "testiotsqsdeadLetterQueue66A04E81": Object {
498
- "DeletionPolicy": "Delete",
499
- "Properties": Object {
500
- "KmsMasterKeyId": "alias/aws/sqs",
501
- "QueueName": "dlq-name",
502
- },
503
- "Type": "AWS::SQS::Queue",
504
- "UpdateReplacePolicy": "Delete",
505
- },
506
- "testiotsqsdeadLetterQueuePolicyE13575BF": Object {
507
- "Properties": Object {
508
- "PolicyDocument": Object {
509
- "Statement": Array [
510
- Object {
511
- "Action": Array [
512
- "sqs:DeleteMessage",
513
- "sqs:ReceiveMessage",
514
- "sqs:SendMessage",
515
- "sqs:GetQueueAttributes",
516
- "sqs:RemovePermission",
517
- "sqs:AddPermission",
518
- "sqs:SetQueueAttributes",
519
- ],
520
- "Effect": "Allow",
521
- "Principal": Object {
522
- "AWS": Object {
523
- "Fn::Join": Array [
524
- "",
525
- Array [
526
- "arn:",
527
- Object {
528
- "Ref": "AWS::Partition",
529
- },
530
- ":iam::",
531
- Object {
532
- "Ref": "AWS::AccountId",
533
- },
534
- ":root",
535
- ],
536
- ],
537
- },
538
- },
539
- "Resource": Object {
540
- "Fn::GetAtt": Array [
541
- "testiotsqsdeadLetterQueue66A04E81",
542
- "Arn",
543
- ],
544
- },
545
- "Sid": "QueueOwnerOnlyAccess",
546
- },
547
- Object {
548
- "Action": "SQS:*",
549
- "Condition": Object {
550
- "Bool": Object {
551
- "aws:SecureTransport": "false",
552
- },
553
- },
554
- "Effect": "Deny",
555
- "Principal": Object {
556
- "AWS": "*",
557
- },
558
- "Resource": Object {
559
- "Fn::GetAtt": Array [
560
- "testiotsqsdeadLetterQueue66A04E81",
561
- "Arn",
562
- ],
563
- },
564
- "Sid": "HttpsOnly",
565
- },
566
- ],
567
- "Version": "2012-10-17",
568
- },
569
- "Queues": Array [
570
- Object {
571
- "Ref": "testiotsqsdeadLetterQueue66A04E81",
572
- },
573
- ],
574
- },
575
- "Type": "AWS::SQS::QueuePolicy",
576
- },
577
- "testiotsqsiotactionsrole93B1D327": Object {
578
- "Properties": Object {
579
- "AssumeRolePolicyDocument": Object {
580
- "Statement": Array [
581
- Object {
582
- "Action": "sts:AssumeRole",
583
- "Effect": "Allow",
584
- "Principal": Object {
585
- "Service": "iot.amazonaws.com",
586
- },
587
- },
588
- ],
589
- "Version": "2012-10-17",
590
- },
591
- },
592
- "Type": "AWS::IAM::Role",
593
- },
594
- "testiotsqsiotactionsroleDefaultPolicyEE46FAE6": Object {
595
- "Properties": Object {
596
- "PolicyDocument": Object {
597
- "Statement": Array [
598
- Object {
599
- "Action": Array [
600
- "sqs:SendMessage",
601
- "sqs:GetQueueAttributes",
602
- "sqs:GetQueueUrl",
603
- ],
604
- "Effect": "Allow",
605
- "Resource": Object {
606
- "Fn::GetAtt": Array [
607
- "testiotsqsqueue630B4C1F",
608
- "Arn",
609
- ],
610
- },
611
- },
612
- Object {
613
- "Action": Array [
614
- "kms:Decrypt",
615
- "kms:Encrypt",
616
- "kms:ReEncrypt*",
617
- "kms:GenerateDataKey*",
618
- ],
619
- "Effect": "Allow",
620
- "Resource": Object {
621
- "Fn::GetAtt": Array [
622
- "testiotsqsEncryptionKey64EE64B1",
623
- "Arn",
624
- ],
625
- },
626
- },
627
- Object {
628
- "Action": Array [
629
- "kms:Encrypt",
630
- "kms:ReEncrypt*",
631
- "kms:GenerateDataKey*",
632
- ],
633
- "Effect": "Allow",
634
- "Resource": Object {
635
- "Fn::GetAtt": Array [
636
- "testiotsqsEncryptionKey64EE64B1",
637
- "Arn",
638
- ],
639
- },
640
- },
641
- ],
642
- "Version": "2012-10-17",
643
- },
644
- "PolicyName": "testiotsqsiotactionsroleDefaultPolicyEE46FAE6",
645
- "Roles": Array [
646
- Object {
647
- "Ref": "testiotsqsiotactionsrole93B1D327",
648
- },
649
- ],
650
- },
651
- "Type": "AWS::IAM::Policy",
652
- },
653
- "testiotsqsqueue630B4C1F": Object {
654
- "DeletionPolicy": "Delete",
655
- "Properties": Object {
656
- "KmsMasterKeyId": Object {
657
- "Fn::GetAtt": Array [
658
- "testiotsqsEncryptionKey64EE64B1",
659
- "Arn",
660
- ],
661
- },
662
- "QueueName": "queue-name",
663
- "RedrivePolicy": Object {
664
- "deadLetterTargetArn": Object {
665
- "Fn::GetAtt": Array [
666
- "testiotsqsdeadLetterQueue66A04E81",
667
- "Arn",
668
- ],
669
- },
670
- "maxReceiveCount": 1,
671
- },
672
- },
673
- "Type": "AWS::SQS::Queue",
674
- "UpdateReplacePolicy": "Delete",
675
- },
676
- "testiotsqsqueuePolicyD1FF6491": Object {
677
- "Properties": Object {
678
- "PolicyDocument": Object {
679
- "Statement": Array [
680
- Object {
681
- "Action": Array [
682
- "sqs:DeleteMessage",
683
- "sqs:ReceiveMessage",
684
- "sqs:SendMessage",
685
- "sqs:GetQueueAttributes",
686
- "sqs:RemovePermission",
687
- "sqs:AddPermission",
688
- "sqs:SetQueueAttributes",
689
- ],
690
- "Effect": "Allow",
691
- "Principal": Object {
692
- "AWS": Object {
693
- "Fn::Join": Array [
694
- "",
695
- Array [
696
- "arn:",
697
- Object {
698
- "Ref": "AWS::Partition",
699
- },
700
- ":iam::",
701
- Object {
702
- "Ref": "AWS::AccountId",
703
- },
704
- ":root",
705
- ],
706
- ],
707
- },
708
- },
709
- "Resource": Object {
710
- "Fn::GetAtt": Array [
711
- "testiotsqsqueue630B4C1F",
712
- "Arn",
713
- ],
714
- },
715
- "Sid": "QueueOwnerOnlyAccess",
716
- },
717
- Object {
718
- "Action": "SQS:*",
719
- "Condition": Object {
720
- "Bool": Object {
721
- "aws:SecureTransport": "false",
722
- },
723
- },
724
- "Effect": "Deny",
725
- "Principal": Object {
726
- "AWS": "*",
727
- },
728
- "Resource": Object {
729
- "Fn::GetAtt": Array [
730
- "testiotsqsqueue630B4C1F",
731
- "Arn",
732
- ],
733
- },
734
- "Sid": "HttpsOnly",
735
- },
736
- ],
737
- "Version": "2012-10-17",
738
- },
739
- "Queues": Array [
740
- Object {
741
- "Ref": "testiotsqsqueue630B4C1F",
742
- },
743
- ],
744
- },
745
- "Type": "AWS::SQS::QueuePolicy",
746
- },
747
- },
748
- }
749
- `;
750
-
751
- exports[`Pattern deployment with dead letter queue turned off 1`] = `
752
- Object {
753
- "Resources": Object {
754
- "testiotsqsEncryptionKey64EE64B1": Object {
755
- "DeletionPolicy": "Retain",
756
- "Properties": Object {
757
- "EnableKeyRotation": true,
758
- "KeyPolicy": Object {
759
- "Statement": Array [
760
- Object {
761
- "Action": Array [
762
- "kms:Create*",
763
- "kms:Describe*",
764
- "kms:Enable*",
765
- "kms:List*",
766
- "kms:Put*",
767
- "kms:Update*",
768
- "kms:Revoke*",
769
- "kms:Disable*",
770
- "kms:Get*",
771
- "kms:Delete*",
772
- "kms:ScheduleKeyDeletion",
773
- "kms:CancelKeyDeletion",
774
- "kms:GenerateDataKey",
775
- "kms:TagResource",
776
- "kms:UntagResource",
777
- ],
778
- "Effect": "Allow",
779
- "Principal": Object {
780
- "AWS": Object {
781
- "Fn::Join": Array [
782
- "",
783
- Array [
784
- "arn:",
785
- Object {
786
- "Ref": "AWS::Partition",
787
- },
788
- ":iam::",
789
- Object {
790
- "Ref": "AWS::AccountId",
791
- },
792
- ":root",
793
- ],
794
- ],
795
- },
796
- },
797
- "Resource": "*",
798
- },
799
- Object {
800
- "Action": Array [
801
- "kms:Decrypt",
802
- "kms:Encrypt",
803
- "kms:ReEncrypt*",
804
- "kms:GenerateDataKey*",
805
- ],
806
- "Effect": "Allow",
807
- "Principal": Object {
808
- "AWS": Object {
809
- "Fn::GetAtt": Array [
810
- "testiotsqsiotactionsrole93B1D327",
811
- "Arn",
812
- ],
813
- },
814
- },
815
- "Resource": "*",
816
- },
817
- Object {
818
- "Action": Array [
819
- "kms:Encrypt",
820
- "kms:ReEncrypt*",
821
- "kms:GenerateDataKey*",
822
- ],
823
- "Effect": "Allow",
824
- "Principal": Object {
825
- "AWS": Object {
826
- "Fn::GetAtt": Array [
827
- "testiotsqsiotactionsrole93B1D327",
828
- "Arn",
829
- ],
830
- },
831
- },
832
- "Resource": "*",
833
- },
834
- ],
835
- "Version": "2012-10-17",
836
- },
837
- },
838
- "Type": "AWS::KMS::Key",
839
- "UpdateReplacePolicy": "Retain",
840
- },
841
- "testiotsqsIotTopicRule3ABB9E1A": Object {
842
- "Properties": Object {
843
- "TopicRulePayload": Object {
844
- "Actions": Array [
845
- Object {
846
- "Sqs": Object {
847
- "QueueUrl": Object {
848
- "Ref": "testiotsqsqueue630B4C1F",
849
- },
850
- "RoleArn": Object {
851
- "Fn::GetAtt": Array [
852
- "testiotsqsiotactionsrole93B1D327",
853
- "Arn",
854
- ],
855
- },
856
- },
857
- },
858
- ],
859
- "Description": "Processing messages from IoT devices or factory machines",
860
- "RuleDisabled": false,
861
- "Sql": "SELECT * FROM 'test/topic/#'",
862
- },
863
- },
864
- "Type": "AWS::IoT::TopicRule",
865
- },
866
- "testiotsqsiotactionsrole93B1D327": Object {
867
- "Properties": Object {
868
- "AssumeRolePolicyDocument": Object {
869
- "Statement": Array [
870
- Object {
871
- "Action": "sts:AssumeRole",
872
- "Effect": "Allow",
873
- "Principal": Object {
874
- "Service": "iot.amazonaws.com",
875
- },
876
- },
877
- ],
878
- "Version": "2012-10-17",
879
- },
880
- },
881
- "Type": "AWS::IAM::Role",
882
- },
883
- "testiotsqsiotactionsroleDefaultPolicyEE46FAE6": Object {
884
- "Properties": Object {
885
- "PolicyDocument": Object {
886
- "Statement": Array [
887
- Object {
888
- "Action": Array [
889
- "sqs:SendMessage",
890
- "sqs:GetQueueAttributes",
891
- "sqs:GetQueueUrl",
892
- ],
893
- "Effect": "Allow",
894
- "Resource": Object {
895
- "Fn::GetAtt": Array [
896
- "testiotsqsqueue630B4C1F",
897
- "Arn",
898
- ],
899
- },
900
- },
901
- Object {
902
- "Action": Array [
903
- "kms:Decrypt",
904
- "kms:Encrypt",
905
- "kms:ReEncrypt*",
906
- "kms:GenerateDataKey*",
907
- ],
908
- "Effect": "Allow",
909
- "Resource": Object {
910
- "Fn::GetAtt": Array [
911
- "testiotsqsEncryptionKey64EE64B1",
912
- "Arn",
913
- ],
914
- },
915
- },
916
- Object {
917
- "Action": Array [
918
- "kms:Encrypt",
919
- "kms:ReEncrypt*",
920
- "kms:GenerateDataKey*",
921
- ],
922
- "Effect": "Allow",
923
- "Resource": Object {
924
- "Fn::GetAtt": Array [
925
- "testiotsqsEncryptionKey64EE64B1",
926
- "Arn",
927
- ],
928
- },
929
- },
930
- ],
931
- "Version": "2012-10-17",
932
- },
933
- "PolicyName": "testiotsqsiotactionsroleDefaultPolicyEE46FAE6",
934
- "Roles": Array [
935
- Object {
936
- "Ref": "testiotsqsiotactionsrole93B1D327",
937
- },
938
- ],
939
- },
940
- "Type": "AWS::IAM::Policy",
941
- },
942
- "testiotsqsqueue630B4C1F": Object {
943
- "DeletionPolicy": "Delete",
944
- "Properties": Object {
945
- "KmsMasterKeyId": Object {
946
- "Fn::GetAtt": Array [
947
- "testiotsqsEncryptionKey64EE64B1",
948
- "Arn",
949
- ],
950
- },
951
- "QueueName": "queue-name",
952
- },
953
- "Type": "AWS::SQS::Queue",
954
- "UpdateReplacePolicy": "Delete",
955
- },
956
- "testiotsqsqueuePolicyD1FF6491": Object {
957
- "Properties": Object {
958
- "PolicyDocument": Object {
959
- "Statement": Array [
960
- Object {
961
- "Action": Array [
962
- "sqs:DeleteMessage",
963
- "sqs:ReceiveMessage",
964
- "sqs:SendMessage",
965
- "sqs:GetQueueAttributes",
966
- "sqs:RemovePermission",
967
- "sqs:AddPermission",
968
- "sqs:SetQueueAttributes",
969
- ],
970
- "Effect": "Allow",
971
- "Principal": Object {
972
- "AWS": Object {
973
- "Fn::Join": Array [
974
- "",
975
- Array [
976
- "arn:",
977
- Object {
978
- "Ref": "AWS::Partition",
979
- },
980
- ":iam::",
981
- Object {
982
- "Ref": "AWS::AccountId",
983
- },
984
- ":root",
985
- ],
986
- ],
987
- },
988
- },
989
- "Resource": Object {
990
- "Fn::GetAtt": Array [
991
- "testiotsqsqueue630B4C1F",
992
- "Arn",
993
- ],
994
- },
995
- "Sid": "QueueOwnerOnlyAccess",
996
- },
997
- Object {
998
- "Action": "SQS:*",
999
- "Condition": Object {
1000
- "Bool": Object {
1001
- "aws:SecureTransport": "false",
1002
- },
1003
- },
1004
- "Effect": "Deny",
1005
- "Principal": Object {
1006
- "AWS": "*",
1007
- },
1008
- "Resource": Object {
1009
- "Fn::GetAtt": Array [
1010
- "testiotsqsqueue630B4C1F",
1011
- "Arn",
1012
- ],
1013
- },
1014
- "Sid": "HttpsOnly",
1015
- },
1016
- ],
1017
- "Version": "2012-10-17",
1018
- },
1019
- "Queues": Array [
1020
- Object {
1021
- "Ref": "testiotsqsqueue630B4C1F",
1022
- },
1023
- ],
1024
- },
1025
- "Type": "AWS::SQS::QueuePolicy",
1026
- },
1027
- },
1028
- }
1029
- `;
1030
-
1031
- exports[`Pattern deployment with default props 1`] = `
1032
- Object {
1033
- "Resources": Object {
1034
- "testiotsqsEncryptionKey64EE64B1": Object {
1035
- "DeletionPolicy": "Retain",
1036
- "Properties": Object {
1037
- "EnableKeyRotation": true,
1038
- "KeyPolicy": Object {
1039
- "Statement": Array [
1040
- Object {
1041
- "Action": Array [
1042
- "kms:Create*",
1043
- "kms:Describe*",
1044
- "kms:Enable*",
1045
- "kms:List*",
1046
- "kms:Put*",
1047
- "kms:Update*",
1048
- "kms:Revoke*",
1049
- "kms:Disable*",
1050
- "kms:Get*",
1051
- "kms:Delete*",
1052
- "kms:ScheduleKeyDeletion",
1053
- "kms:CancelKeyDeletion",
1054
- "kms:GenerateDataKey",
1055
- "kms:TagResource",
1056
- "kms:UntagResource",
1057
- ],
1058
- "Effect": "Allow",
1059
- "Principal": Object {
1060
- "AWS": Object {
1061
- "Fn::Join": Array [
1062
- "",
1063
- Array [
1064
- "arn:",
1065
- Object {
1066
- "Ref": "AWS::Partition",
1067
- },
1068
- ":iam::",
1069
- Object {
1070
- "Ref": "AWS::AccountId",
1071
- },
1072
- ":root",
1073
- ],
1074
- ],
1075
- },
1076
- },
1077
- "Resource": "*",
1078
- },
1079
- Object {
1080
- "Action": Array [
1081
- "kms:Decrypt",
1082
- "kms:Encrypt",
1083
- "kms:ReEncrypt*",
1084
- "kms:GenerateDataKey*",
1085
- ],
1086
- "Effect": "Allow",
1087
- "Principal": Object {
1088
- "AWS": Object {
1089
- "Fn::GetAtt": Array [
1090
- "testiotsqsiotactionsrole93B1D327",
1091
- "Arn",
1092
- ],
1093
- },
1094
- },
1095
- "Resource": "*",
1096
- },
1097
- Object {
1098
- "Action": Array [
1099
- "kms:Encrypt",
1100
- "kms:ReEncrypt*",
1101
- "kms:GenerateDataKey*",
1102
- ],
1103
- "Effect": "Allow",
1104
- "Principal": Object {
1105
- "AWS": Object {
1106
- "Fn::GetAtt": Array [
1107
- "testiotsqsiotactionsrole93B1D327",
1108
- "Arn",
1109
- ],
1110
- },
1111
- },
1112
- "Resource": "*",
1113
- },
1114
- ],
1115
- "Version": "2012-10-17",
1116
- },
1117
- },
1118
- "Type": "AWS::KMS::Key",
1119
- "UpdateReplacePolicy": "Retain",
1120
- },
1121
- "testiotsqsIotTopicRule3ABB9E1A": Object {
1122
- "Properties": Object {
1123
- "TopicRulePayload": Object {
1124
- "Actions": Array [
1125
- Object {
1126
- "Sqs": Object {
1127
- "QueueUrl": Object {
1128
- "Ref": "testiotsqsqueue630B4C1F",
1129
- },
1130
- "RoleArn": Object {
1131
- "Fn::GetAtt": Array [
1132
- "testiotsqsiotactionsrole93B1D327",
1133
- "Arn",
1134
- ],
1135
- },
1136
- },
1137
- },
1138
- ],
1139
- "Description": "Processing messages from IoT devices or factory machines",
1140
- "RuleDisabled": false,
1141
- "Sql": "SELECT * FROM 'test/topic/#'",
1142
- },
1143
- },
1144
- "Type": "AWS::IoT::TopicRule",
1145
- },
1146
- "testiotsqsdeadLetterQueue66A04E81": Object {
1147
- "DeletionPolicy": "Delete",
1148
- "Properties": Object {
1149
- "KmsMasterKeyId": "alias/aws/sqs",
1150
- },
1151
- "Type": "AWS::SQS::Queue",
1152
- "UpdateReplacePolicy": "Delete",
1153
- },
1154
- "testiotsqsdeadLetterQueuePolicyE13575BF": Object {
1155
- "Properties": Object {
1156
- "PolicyDocument": Object {
1157
- "Statement": Array [
1158
- Object {
1159
- "Action": Array [
1160
- "sqs:DeleteMessage",
1161
- "sqs:ReceiveMessage",
1162
- "sqs:SendMessage",
1163
- "sqs:GetQueueAttributes",
1164
- "sqs:RemovePermission",
1165
- "sqs:AddPermission",
1166
- "sqs:SetQueueAttributes",
1167
- ],
1168
- "Effect": "Allow",
1169
- "Principal": Object {
1170
- "AWS": Object {
1171
- "Fn::Join": Array [
1172
- "",
1173
- Array [
1174
- "arn:",
1175
- Object {
1176
- "Ref": "AWS::Partition",
1177
- },
1178
- ":iam::",
1179
- Object {
1180
- "Ref": "AWS::AccountId",
1181
- },
1182
- ":root",
1183
- ],
1184
- ],
1185
- },
1186
- },
1187
- "Resource": Object {
1188
- "Fn::GetAtt": Array [
1189
- "testiotsqsdeadLetterQueue66A04E81",
1190
- "Arn",
1191
- ],
1192
- },
1193
- "Sid": "QueueOwnerOnlyAccess",
1194
- },
1195
- Object {
1196
- "Action": "SQS:*",
1197
- "Condition": Object {
1198
- "Bool": Object {
1199
- "aws:SecureTransport": "false",
1200
- },
1201
- },
1202
- "Effect": "Deny",
1203
- "Principal": Object {
1204
- "AWS": "*",
1205
- },
1206
- "Resource": Object {
1207
- "Fn::GetAtt": Array [
1208
- "testiotsqsdeadLetterQueue66A04E81",
1209
- "Arn",
1210
- ],
1211
- },
1212
- "Sid": "HttpsOnly",
1213
- },
1214
- ],
1215
- "Version": "2012-10-17",
1216
- },
1217
- "Queues": Array [
1218
- Object {
1219
- "Ref": "testiotsqsdeadLetterQueue66A04E81",
1220
- },
1221
- ],
1222
- },
1223
- "Type": "AWS::SQS::QueuePolicy",
1224
- },
1225
- "testiotsqsiotactionsrole93B1D327": Object {
1226
- "Properties": Object {
1227
- "AssumeRolePolicyDocument": Object {
1228
- "Statement": Array [
1229
- Object {
1230
- "Action": "sts:AssumeRole",
1231
- "Effect": "Allow",
1232
- "Principal": Object {
1233
- "Service": "iot.amazonaws.com",
1234
- },
1235
- },
1236
- ],
1237
- "Version": "2012-10-17",
1238
- },
1239
- },
1240
- "Type": "AWS::IAM::Role",
1241
- },
1242
- "testiotsqsiotactionsroleDefaultPolicyEE46FAE6": Object {
1243
- "Properties": Object {
1244
- "PolicyDocument": Object {
1245
- "Statement": Array [
1246
- Object {
1247
- "Action": Array [
1248
- "sqs:SendMessage",
1249
- "sqs:GetQueueAttributes",
1250
- "sqs:GetQueueUrl",
1251
- ],
1252
- "Effect": "Allow",
1253
- "Resource": Object {
1254
- "Fn::GetAtt": Array [
1255
- "testiotsqsqueue630B4C1F",
1256
- "Arn",
1257
- ],
1258
- },
1259
- },
1260
- Object {
1261
- "Action": Array [
1262
- "kms:Decrypt",
1263
- "kms:Encrypt",
1264
- "kms:ReEncrypt*",
1265
- "kms:GenerateDataKey*",
1266
- ],
1267
- "Effect": "Allow",
1268
- "Resource": Object {
1269
- "Fn::GetAtt": Array [
1270
- "testiotsqsEncryptionKey64EE64B1",
1271
- "Arn",
1272
- ],
1273
- },
1274
- },
1275
- Object {
1276
- "Action": Array [
1277
- "kms:Encrypt",
1278
- "kms:ReEncrypt*",
1279
- "kms:GenerateDataKey*",
1280
- ],
1281
- "Effect": "Allow",
1282
- "Resource": Object {
1283
- "Fn::GetAtt": Array [
1284
- "testiotsqsEncryptionKey64EE64B1",
1285
- "Arn",
1286
- ],
1287
- },
1288
- },
1289
- ],
1290
- "Version": "2012-10-17",
1291
- },
1292
- "PolicyName": "testiotsqsiotactionsroleDefaultPolicyEE46FAE6",
1293
- "Roles": Array [
1294
- Object {
1295
- "Ref": "testiotsqsiotactionsrole93B1D327",
1296
- },
1297
- ],
1298
- },
1299
- "Type": "AWS::IAM::Policy",
1300
- },
1301
- "testiotsqsqueue630B4C1F": Object {
1302
- "DeletionPolicy": "Delete",
1303
- "Properties": Object {
1304
- "KmsMasterKeyId": Object {
1305
- "Fn::GetAtt": Array [
1306
- "testiotsqsEncryptionKey64EE64B1",
1307
- "Arn",
1308
- ],
1309
- },
1310
- "RedrivePolicy": Object {
1311
- "deadLetterTargetArn": Object {
1312
- "Fn::GetAtt": Array [
1313
- "testiotsqsdeadLetterQueue66A04E81",
1314
- "Arn",
1315
- ],
1316
- },
1317
- "maxReceiveCount": 15,
1318
- },
1319
- },
1320
- "Type": "AWS::SQS::Queue",
1321
- "UpdateReplacePolicy": "Delete",
1322
- },
1323
- "testiotsqsqueuePolicyD1FF6491": Object {
1324
- "Properties": Object {
1325
- "PolicyDocument": Object {
1326
- "Statement": Array [
1327
- Object {
1328
- "Action": Array [
1329
- "sqs:DeleteMessage",
1330
- "sqs:ReceiveMessage",
1331
- "sqs:SendMessage",
1332
- "sqs:GetQueueAttributes",
1333
- "sqs:RemovePermission",
1334
- "sqs:AddPermission",
1335
- "sqs:SetQueueAttributes",
1336
- ],
1337
- "Effect": "Allow",
1338
- "Principal": Object {
1339
- "AWS": Object {
1340
- "Fn::Join": Array [
1341
- "",
1342
- Array [
1343
- "arn:",
1344
- Object {
1345
- "Ref": "AWS::Partition",
1346
- },
1347
- ":iam::",
1348
- Object {
1349
- "Ref": "AWS::AccountId",
1350
- },
1351
- ":root",
1352
- ],
1353
- ],
1354
- },
1355
- },
1356
- "Resource": Object {
1357
- "Fn::GetAtt": Array [
1358
- "testiotsqsqueue630B4C1F",
1359
- "Arn",
1360
- ],
1361
- },
1362
- "Sid": "QueueOwnerOnlyAccess",
1363
- },
1364
- Object {
1365
- "Action": "SQS:*",
1366
- "Condition": Object {
1367
- "Bool": Object {
1368
- "aws:SecureTransport": "false",
1369
- },
1370
- },
1371
- "Effect": "Deny",
1372
- "Principal": Object {
1373
- "AWS": "*",
1374
- },
1375
- "Resource": Object {
1376
- "Fn::GetAtt": Array [
1377
- "testiotsqsqueue630B4C1F",
1378
- "Arn",
1379
- ],
1380
- },
1381
- "Sid": "HttpsOnly",
1382
- },
1383
- ],
1384
- "Version": "2012-10-17",
1385
- },
1386
- "Queues": Array [
1387
- Object {
1388
- "Ref": "testiotsqsqueue630B4C1F",
1389
- },
1390
- ],
1391
- },
1392
- "Type": "AWS::SQS::QueuePolicy",
1393
- },
1394
- },
1395
- }
1396
- `;
1397
-
1398
- exports[`Pattern deployment with existing KMS key 1`] = `
1399
- Object {
1400
- "Resources": Object {
1401
- "existingkey205DFC01": Object {
1402
- "DeletionPolicy": "Retain",
1403
- "Properties": Object {
1404
- "EnableKeyRotation": false,
1405
- "KeyPolicy": Object {
1406
- "Statement": Array [
1407
- Object {
1408
- "Action": Array [
1409
- "kms:Create*",
1410
- "kms:Describe*",
1411
- "kms:Enable*",
1412
- "kms:List*",
1413
- "kms:Put*",
1414
- "kms:Update*",
1415
- "kms:Revoke*",
1416
- "kms:Disable*",
1417
- "kms:Get*",
1418
- "kms:Delete*",
1419
- "kms:ScheduleKeyDeletion",
1420
- "kms:CancelKeyDeletion",
1421
- "kms:GenerateDataKey",
1422
- "kms:TagResource",
1423
- "kms:UntagResource",
1424
- ],
1425
- "Effect": "Allow",
1426
- "Principal": Object {
1427
- "AWS": Object {
1428
- "Fn::Join": Array [
1429
- "",
1430
- Array [
1431
- "arn:",
1432
- Object {
1433
- "Ref": "AWS::Partition",
1434
- },
1435
- ":iam::",
1436
- Object {
1437
- "Ref": "AWS::AccountId",
1438
- },
1439
- ":root",
1440
- ],
1441
- ],
1442
- },
1443
- },
1444
- "Resource": "*",
1445
- },
1446
- Object {
1447
- "Action": Array [
1448
- "kms:Decrypt",
1449
- "kms:Encrypt",
1450
- "kms:ReEncrypt*",
1451
- "kms:GenerateDataKey*",
1452
- ],
1453
- "Effect": "Allow",
1454
- "Principal": Object {
1455
- "AWS": Object {
1456
- "Fn::GetAtt": Array [
1457
- "testiotsqsiotactionsrole93B1D327",
1458
- "Arn",
1459
- ],
1460
- },
1461
- },
1462
- "Resource": "*",
1463
- },
1464
- Object {
1465
- "Action": Array [
1466
- "kms:Encrypt",
1467
- "kms:ReEncrypt*",
1468
- "kms:GenerateDataKey*",
1469
- ],
1470
- "Effect": "Allow",
1471
- "Principal": Object {
1472
- "AWS": Object {
1473
- "Fn::GetAtt": Array [
1474
- "testiotsqsiotactionsrole93B1D327",
1475
- "Arn",
1476
- ],
1477
- },
1478
- },
1479
- "Resource": "*",
1480
- },
1481
- ],
1482
- "Version": "2012-10-17",
1483
- },
1484
- },
1485
- "Type": "AWS::KMS::Key",
1486
- "UpdateReplacePolicy": "Retain",
1487
- },
1488
- "existingkeyAliasE18FEC67": Object {
1489
- "Properties": Object {
1490
- "AliasName": "alias/existing-key-alias",
1491
- "TargetKeyId": Object {
1492
- "Fn::GetAtt": Array [
1493
- "existingkey205DFC01",
1494
- "Arn",
1495
- ],
1496
- },
1497
- },
1498
- "Type": "AWS::KMS::Alias",
1499
- },
1500
- "testiotsqsIotTopicRule3ABB9E1A": Object {
1501
- "Properties": Object {
1502
- "TopicRulePayload": Object {
1503
- "Actions": Array [
1504
- Object {
1505
- "Sqs": Object {
1506
- "QueueUrl": Object {
1507
- "Ref": "testiotsqsqueue630B4C1F",
1508
- },
1509
- "RoleArn": Object {
1510
- "Fn::GetAtt": Array [
1511
- "testiotsqsiotactionsrole93B1D327",
1512
- "Arn",
1513
- ],
1514
- },
1515
- },
1516
- },
1517
- ],
1518
- "Description": "Processing messages from IoT devices or factory machines",
1519
- "RuleDisabled": false,
1520
- "Sql": "SELECT * FROM 'test/topic/#'",
1521
- },
1522
- },
1523
- "Type": "AWS::IoT::TopicRule",
1524
- },
1525
- "testiotsqsdeadLetterQueue66A04E81": Object {
1526
- "DeletionPolicy": "Delete",
1527
- "Properties": Object {
1528
- "KmsMasterKeyId": "alias/aws/sqs",
1529
- },
1530
- "Type": "AWS::SQS::Queue",
1531
- "UpdateReplacePolicy": "Delete",
1532
- },
1533
- "testiotsqsdeadLetterQueuePolicyE13575BF": Object {
1534
- "Properties": Object {
1535
- "PolicyDocument": Object {
1536
- "Statement": Array [
1537
- Object {
1538
- "Action": Array [
1539
- "sqs:DeleteMessage",
1540
- "sqs:ReceiveMessage",
1541
- "sqs:SendMessage",
1542
- "sqs:GetQueueAttributes",
1543
- "sqs:RemovePermission",
1544
- "sqs:AddPermission",
1545
- "sqs:SetQueueAttributes",
1546
- ],
1547
- "Effect": "Allow",
1548
- "Principal": Object {
1549
- "AWS": Object {
1550
- "Fn::Join": Array [
1551
- "",
1552
- Array [
1553
- "arn:",
1554
- Object {
1555
- "Ref": "AWS::Partition",
1556
- },
1557
- ":iam::",
1558
- Object {
1559
- "Ref": "AWS::AccountId",
1560
- },
1561
- ":root",
1562
- ],
1563
- ],
1564
- },
1565
- },
1566
- "Resource": Object {
1567
- "Fn::GetAtt": Array [
1568
- "testiotsqsdeadLetterQueue66A04E81",
1569
- "Arn",
1570
- ],
1571
- },
1572
- "Sid": "QueueOwnerOnlyAccess",
1573
- },
1574
- Object {
1575
- "Action": "SQS:*",
1576
- "Condition": Object {
1577
- "Bool": Object {
1578
- "aws:SecureTransport": "false",
1579
- },
1580
- },
1581
- "Effect": "Deny",
1582
- "Principal": Object {
1583
- "AWS": "*",
1584
- },
1585
- "Resource": Object {
1586
- "Fn::GetAtt": Array [
1587
- "testiotsqsdeadLetterQueue66A04E81",
1588
- "Arn",
1589
- ],
1590
- },
1591
- "Sid": "HttpsOnly",
1592
- },
1593
- ],
1594
- "Version": "2012-10-17",
1595
- },
1596
- "Queues": Array [
1597
- Object {
1598
- "Ref": "testiotsqsdeadLetterQueue66A04E81",
1599
- },
1600
- ],
1601
- },
1602
- "Type": "AWS::SQS::QueuePolicy",
1603
- },
1604
- "testiotsqsiotactionsrole93B1D327": Object {
1605
- "Properties": Object {
1606
- "AssumeRolePolicyDocument": Object {
1607
- "Statement": Array [
1608
- Object {
1609
- "Action": "sts:AssumeRole",
1610
- "Effect": "Allow",
1611
- "Principal": Object {
1612
- "Service": "iot.amazonaws.com",
1613
- },
1614
- },
1615
- ],
1616
- "Version": "2012-10-17",
1617
- },
1618
- },
1619
- "Type": "AWS::IAM::Role",
1620
- },
1621
- "testiotsqsiotactionsroleDefaultPolicyEE46FAE6": Object {
1622
- "Properties": Object {
1623
- "PolicyDocument": Object {
1624
- "Statement": Array [
1625
- Object {
1626
- "Action": Array [
1627
- "sqs:SendMessage",
1628
- "sqs:GetQueueAttributes",
1629
- "sqs:GetQueueUrl",
1630
- ],
1631
- "Effect": "Allow",
1632
- "Resource": Object {
1633
- "Fn::GetAtt": Array [
1634
- "testiotsqsqueue630B4C1F",
1635
- "Arn",
1636
- ],
1637
- },
1638
- },
1639
- Object {
1640
- "Action": Array [
1641
- "kms:Decrypt",
1642
- "kms:Encrypt",
1643
- "kms:ReEncrypt*",
1644
- "kms:GenerateDataKey*",
1645
- ],
1646
- "Effect": "Allow",
1647
- "Resource": Object {
1648
- "Fn::GetAtt": Array [
1649
- "existingkey205DFC01",
1650
- "Arn",
1651
- ],
1652
- },
1653
- },
1654
- Object {
1655
- "Action": Array [
1656
- "kms:Encrypt",
1657
- "kms:ReEncrypt*",
1658
- "kms:GenerateDataKey*",
1659
- ],
1660
- "Effect": "Allow",
1661
- "Resource": Object {
1662
- "Fn::GetAtt": Array [
1663
- "existingkey205DFC01",
1664
- "Arn",
1665
- ],
1666
- },
1667
- },
1668
- ],
1669
- "Version": "2012-10-17",
1670
- },
1671
- "PolicyName": "testiotsqsiotactionsroleDefaultPolicyEE46FAE6",
1672
- "Roles": Array [
1673
- Object {
1674
- "Ref": "testiotsqsiotactionsrole93B1D327",
1675
- },
1676
- ],
1677
- },
1678
- "Type": "AWS::IAM::Policy",
1679
- },
1680
- "testiotsqsqueue630B4C1F": Object {
1681
- "DeletionPolicy": "Delete",
1682
- "Properties": Object {
1683
- "KmsMasterKeyId": Object {
1684
- "Fn::GetAtt": Array [
1685
- "existingkey205DFC01",
1686
- "Arn",
1687
- ],
1688
- },
1689
- "RedrivePolicy": Object {
1690
- "deadLetterTargetArn": Object {
1691
- "Fn::GetAtt": Array [
1692
- "testiotsqsdeadLetterQueue66A04E81",
1693
- "Arn",
1694
- ],
1695
- },
1696
- "maxReceiveCount": 15,
1697
- },
1698
- },
1699
- "Type": "AWS::SQS::Queue",
1700
- "UpdateReplacePolicy": "Delete",
1701
- },
1702
- "testiotsqsqueuePolicyD1FF6491": Object {
1703
- "Properties": Object {
1704
- "PolicyDocument": Object {
1705
- "Statement": Array [
1706
- Object {
1707
- "Action": Array [
1708
- "sqs:DeleteMessage",
1709
- "sqs:ReceiveMessage",
1710
- "sqs:SendMessage",
1711
- "sqs:GetQueueAttributes",
1712
- "sqs:RemovePermission",
1713
- "sqs:AddPermission",
1714
- "sqs:SetQueueAttributes",
1715
- ],
1716
- "Effect": "Allow",
1717
- "Principal": Object {
1718
- "AWS": Object {
1719
- "Fn::Join": Array [
1720
- "",
1721
- Array [
1722
- "arn:",
1723
- Object {
1724
- "Ref": "AWS::Partition",
1725
- },
1726
- ":iam::",
1727
- Object {
1728
- "Ref": "AWS::AccountId",
1729
- },
1730
- ":root",
1731
- ],
1732
- ],
1733
- },
1734
- },
1735
- "Resource": Object {
1736
- "Fn::GetAtt": Array [
1737
- "testiotsqsqueue630B4C1F",
1738
- "Arn",
1739
- ],
1740
- },
1741
- "Sid": "QueueOwnerOnlyAccess",
1742
- },
1743
- Object {
1744
- "Action": "SQS:*",
1745
- "Condition": Object {
1746
- "Bool": Object {
1747
- "aws:SecureTransport": "false",
1748
- },
1749
- },
1750
- "Effect": "Deny",
1751
- "Principal": Object {
1752
- "AWS": "*",
1753
- },
1754
- "Resource": Object {
1755
- "Fn::GetAtt": Array [
1756
- "testiotsqsqueue630B4C1F",
1757
- "Arn",
1758
- ],
1759
- },
1760
- "Sid": "HttpsOnly",
1761
- },
1762
- ],
1763
- "Version": "2012-10-17",
1764
- },
1765
- "Queues": Array [
1766
- Object {
1767
- "Ref": "testiotsqsqueue630B4C1F",
1768
- },
1769
- ],
1770
- },
1771
- "Type": "AWS::SQS::QueuePolicy",
1772
- },
1773
- },
1774
- }
1775
- `;
1776
-
1777
- exports[`Pattern deployment with existing queue 1`] = `
1778
- Object {
1779
- "Resources": Object {
1780
- "existingqueueobjF8AF0ED1": Object {
1781
- "DeletionPolicy": "Delete",
1782
- "Properties": Object {
1783
- "QueueName": "existing-queue-obj",
1784
- },
1785
- "Type": "AWS::SQS::Queue",
1786
- "UpdateReplacePolicy": "Delete",
1787
- },
1788
- "testiotsqsIotTopicRule3ABB9E1A": Object {
1789
- "Properties": Object {
1790
- "TopicRulePayload": Object {
1791
- "Actions": Array [
1792
- Object {
1793
- "Sqs": Object {
1794
- "QueueUrl": Object {
1795
- "Ref": "existingqueueobjF8AF0ED1",
1796
- },
1797
- "RoleArn": Object {
1798
- "Fn::GetAtt": Array [
1799
- "testiotsqsiotactionsrole93B1D327",
1800
- "Arn",
1801
- ],
1802
- },
1803
- },
1804
- },
1805
- ],
1806
- "Description": "Processing messages from IoT devices or factory machines",
1807
- "RuleDisabled": false,
1808
- "Sql": "SELECT * FROM 'test/topic/#'",
1809
- },
1810
- },
1811
- "Type": "AWS::IoT::TopicRule",
1812
- },
1813
- "testiotsqsiotactionsrole93B1D327": Object {
1814
- "Properties": Object {
1815
- "AssumeRolePolicyDocument": Object {
1816
- "Statement": Array [
1817
- Object {
1818
- "Action": "sts:AssumeRole",
1819
- "Effect": "Allow",
1820
- "Principal": Object {
1821
- "Service": "iot.amazonaws.com",
1822
- },
1823
- },
1824
- ],
1825
- "Version": "2012-10-17",
1826
- },
1827
- },
1828
- "Type": "AWS::IAM::Role",
1829
- },
1830
- "testiotsqsiotactionsroleDefaultPolicyEE46FAE6": Object {
1831
- "Properties": Object {
1832
- "PolicyDocument": Object {
1833
- "Statement": Array [
1834
- Object {
1835
- "Action": Array [
1836
- "sqs:SendMessage",
1837
- "sqs:GetQueueAttributes",
1838
- "sqs:GetQueueUrl",
1839
- ],
1840
- "Effect": "Allow",
1841
- "Resource": Object {
1842
- "Fn::GetAtt": Array [
1843
- "existingqueueobjF8AF0ED1",
1844
- "Arn",
1845
- ],
1846
- },
1847
- },
1848
- ],
1849
- "Version": "2012-10-17",
1850
- },
1851
- "PolicyName": "testiotsqsiotactionsroleDefaultPolicyEE46FAE6",
1852
- "Roles": Array [
1853
- Object {
1854
- "Ref": "testiotsqsiotactionsrole93B1D327",
1855
- },
1856
- ],
1857
- },
1858
- "Type": "AWS::IAM::Policy",
1859
- },
1860
- },
1861
- }
1862
- `;
1863
-
1864
- exports[`Pattern deployment with queue and dead letter queue props 1`] = `
1865
- Object {
1866
- "Resources": Object {
1867
- "testiotsqsEncryptionKey64EE64B1": Object {
1868
- "DeletionPolicy": "Retain",
1869
- "Properties": Object {
1870
- "EnableKeyRotation": true,
1871
- "KeyPolicy": Object {
1872
- "Statement": Array [
1873
- Object {
1874
- "Action": Array [
1875
- "kms:Create*",
1876
- "kms:Describe*",
1877
- "kms:Enable*",
1878
- "kms:List*",
1879
- "kms:Put*",
1880
- "kms:Update*",
1881
- "kms:Revoke*",
1882
- "kms:Disable*",
1883
- "kms:Get*",
1884
- "kms:Delete*",
1885
- "kms:ScheduleKeyDeletion",
1886
- "kms:CancelKeyDeletion",
1887
- "kms:GenerateDataKey",
1888
- "kms:TagResource",
1889
- "kms:UntagResource",
1890
- ],
1891
- "Effect": "Allow",
1892
- "Principal": Object {
1893
- "AWS": Object {
1894
- "Fn::Join": Array [
1895
- "",
1896
- Array [
1897
- "arn:",
1898
- Object {
1899
- "Ref": "AWS::Partition",
1900
- },
1901
- ":iam::",
1902
- Object {
1903
- "Ref": "AWS::AccountId",
1904
- },
1905
- ":root",
1906
- ],
1907
- ],
1908
- },
1909
- },
1910
- "Resource": "*",
1911
- },
1912
- Object {
1913
- "Action": Array [
1914
- "kms:Decrypt",
1915
- "kms:Encrypt",
1916
- "kms:ReEncrypt*",
1917
- "kms:GenerateDataKey*",
1918
- ],
1919
- "Effect": "Allow",
1920
- "Principal": Object {
1921
- "AWS": Object {
1922
- "Fn::GetAtt": Array [
1923
- "testiotsqsiotactionsrole93B1D327",
1924
- "Arn",
1925
- ],
1926
- },
1927
- },
1928
- "Resource": "*",
1929
- },
1930
- Object {
1931
- "Action": Array [
1932
- "kms:Encrypt",
1933
- "kms:ReEncrypt*",
1934
- "kms:GenerateDataKey*",
1935
- ],
1936
- "Effect": "Allow",
1937
- "Principal": Object {
1938
- "AWS": Object {
1939
- "Fn::GetAtt": Array [
1940
- "testiotsqsiotactionsrole93B1D327",
1941
- "Arn",
1942
- ],
1943
- },
1944
- },
1945
- "Resource": "*",
1946
- },
1947
- ],
1948
- "Version": "2012-10-17",
1949
- },
1950
- },
1951
- "Type": "AWS::KMS::Key",
1952
- "UpdateReplacePolicy": "Retain",
1953
- },
1954
- "testiotsqsIotTopicRule3ABB9E1A": Object {
1955
- "Properties": Object {
1956
- "TopicRulePayload": Object {
1957
- "Actions": Array [
1958
- Object {
1959
- "Sqs": Object {
1960
- "QueueUrl": Object {
1961
- "Ref": "testiotsqsqueue630B4C1F",
1962
- },
1963
- "RoleArn": Object {
1964
- "Fn::GetAtt": Array [
1965
- "testiotsqsiotactionsrole93B1D327",
1966
- "Arn",
1967
- ],
1968
- },
1969
- },
1970
- },
1971
- ],
1972
- "Description": "Processing messages from IoT devices or factory machines",
1973
- "RuleDisabled": false,
1974
- "Sql": "SELECT * FROM 'test/topic/#'",
1975
- },
1976
- },
1977
- "Type": "AWS::IoT::TopicRule",
1978
- },
1979
- "testiotsqsdeadLetterQueue66A04E81": Object {
1980
- "DeletionPolicy": "Delete",
1981
- "Properties": Object {
1982
- "KmsMasterKeyId": "alias/aws/sqs",
1983
- "QueueName": "dlq-name",
1984
- },
1985
- "Type": "AWS::SQS::Queue",
1986
- "UpdateReplacePolicy": "Delete",
1987
- },
1988
- "testiotsqsdeadLetterQueuePolicyE13575BF": Object {
1989
- "Properties": Object {
1990
- "PolicyDocument": Object {
1991
- "Statement": Array [
1992
- Object {
1993
- "Action": Array [
1994
- "sqs:DeleteMessage",
1995
- "sqs:ReceiveMessage",
1996
- "sqs:SendMessage",
1997
- "sqs:GetQueueAttributes",
1998
- "sqs:RemovePermission",
1999
- "sqs:AddPermission",
2000
- "sqs:SetQueueAttributes",
2001
- ],
2002
- "Effect": "Allow",
2003
- "Principal": Object {
2004
- "AWS": Object {
2005
- "Fn::Join": Array [
2006
- "",
2007
- Array [
2008
- "arn:",
2009
- Object {
2010
- "Ref": "AWS::Partition",
2011
- },
2012
- ":iam::",
2013
- Object {
2014
- "Ref": "AWS::AccountId",
2015
- },
2016
- ":root",
2017
- ],
2018
- ],
2019
- },
2020
- },
2021
- "Resource": Object {
2022
- "Fn::GetAtt": Array [
2023
- "testiotsqsdeadLetterQueue66A04E81",
2024
- "Arn",
2025
- ],
2026
- },
2027
- "Sid": "QueueOwnerOnlyAccess",
2028
- },
2029
- Object {
2030
- "Action": "SQS:*",
2031
- "Condition": Object {
2032
- "Bool": Object {
2033
- "aws:SecureTransport": "false",
2034
- },
2035
- },
2036
- "Effect": "Deny",
2037
- "Principal": Object {
2038
- "AWS": "*",
2039
- },
2040
- "Resource": Object {
2041
- "Fn::GetAtt": Array [
2042
- "testiotsqsdeadLetterQueue66A04E81",
2043
- "Arn",
2044
- ],
2045
- },
2046
- "Sid": "HttpsOnly",
2047
- },
2048
- ],
2049
- "Version": "2012-10-17",
2050
- },
2051
- "Queues": Array [
2052
- Object {
2053
- "Ref": "testiotsqsdeadLetterQueue66A04E81",
2054
- },
2055
- ],
2056
- },
2057
- "Type": "AWS::SQS::QueuePolicy",
2058
- },
2059
- "testiotsqsiotactionsrole93B1D327": Object {
2060
- "Properties": Object {
2061
- "AssumeRolePolicyDocument": Object {
2062
- "Statement": Array [
2063
- Object {
2064
- "Action": "sts:AssumeRole",
2065
- "Effect": "Allow",
2066
- "Principal": Object {
2067
- "Service": "iot.amazonaws.com",
2068
- },
2069
- },
2070
- ],
2071
- "Version": "2012-10-17",
2072
- },
2073
- },
2074
- "Type": "AWS::IAM::Role",
2075
- },
2076
- "testiotsqsiotactionsroleDefaultPolicyEE46FAE6": Object {
2077
- "Properties": Object {
2078
- "PolicyDocument": Object {
2079
- "Statement": Array [
2080
- Object {
2081
- "Action": Array [
2082
- "sqs:SendMessage",
2083
- "sqs:GetQueueAttributes",
2084
- "sqs:GetQueueUrl",
2085
- ],
2086
- "Effect": "Allow",
2087
- "Resource": Object {
2088
- "Fn::GetAtt": Array [
2089
- "testiotsqsqueue630B4C1F",
2090
- "Arn",
2091
- ],
2092
- },
2093
- },
2094
- Object {
2095
- "Action": Array [
2096
- "kms:Decrypt",
2097
- "kms:Encrypt",
2098
- "kms:ReEncrypt*",
2099
- "kms:GenerateDataKey*",
2100
- ],
2101
- "Effect": "Allow",
2102
- "Resource": Object {
2103
- "Fn::GetAtt": Array [
2104
- "testiotsqsEncryptionKey64EE64B1",
2105
- "Arn",
2106
- ],
2107
- },
2108
- },
2109
- Object {
2110
- "Action": Array [
2111
- "kms:Encrypt",
2112
- "kms:ReEncrypt*",
2113
- "kms:GenerateDataKey*",
2114
- ],
2115
- "Effect": "Allow",
2116
- "Resource": Object {
2117
- "Fn::GetAtt": Array [
2118
- "testiotsqsEncryptionKey64EE64B1",
2119
- "Arn",
2120
- ],
2121
- },
2122
- },
2123
- ],
2124
- "Version": "2012-10-17",
2125
- },
2126
- "PolicyName": "testiotsqsiotactionsroleDefaultPolicyEE46FAE6",
2127
- "Roles": Array [
2128
- Object {
2129
- "Ref": "testiotsqsiotactionsrole93B1D327",
2130
- },
2131
- ],
2132
- },
2133
- "Type": "AWS::IAM::Policy",
2134
- },
2135
- "testiotsqsqueue630B4C1F": Object {
2136
- "DeletionPolicy": "Delete",
2137
- "Properties": Object {
2138
- "KmsMasterKeyId": Object {
2139
- "Fn::GetAtt": Array [
2140
- "testiotsqsEncryptionKey64EE64B1",
2141
- "Arn",
2142
- ],
2143
- },
2144
- "QueueName": "queue-name",
2145
- "RedrivePolicy": Object {
2146
- "deadLetterTargetArn": Object {
2147
- "Fn::GetAtt": Array [
2148
- "testiotsqsdeadLetterQueue66A04E81",
2149
- "Arn",
2150
- ],
2151
- },
2152
- "maxReceiveCount": 15,
2153
- },
2154
- },
2155
- "Type": "AWS::SQS::Queue",
2156
- "UpdateReplacePolicy": "Delete",
2157
- },
2158
- "testiotsqsqueuePolicyD1FF6491": Object {
2159
- "Properties": Object {
2160
- "PolicyDocument": Object {
2161
- "Statement": Array [
2162
- Object {
2163
- "Action": Array [
2164
- "sqs:DeleteMessage",
2165
- "sqs:ReceiveMessage",
2166
- "sqs:SendMessage",
2167
- "sqs:GetQueueAttributes",
2168
- "sqs:RemovePermission",
2169
- "sqs:AddPermission",
2170
- "sqs:SetQueueAttributes",
2171
- ],
2172
- "Effect": "Allow",
2173
- "Principal": Object {
2174
- "AWS": Object {
2175
- "Fn::Join": Array [
2176
- "",
2177
- Array [
2178
- "arn:",
2179
- Object {
2180
- "Ref": "AWS::Partition",
2181
- },
2182
- ":iam::",
2183
- Object {
2184
- "Ref": "AWS::AccountId",
2185
- },
2186
- ":root",
2187
- ],
2188
- ],
2189
- },
2190
- },
2191
- "Resource": Object {
2192
- "Fn::GetAtt": Array [
2193
- "testiotsqsqueue630B4C1F",
2194
- "Arn",
2195
- ],
2196
- },
2197
- "Sid": "QueueOwnerOnlyAccess",
2198
- },
2199
- Object {
2200
- "Action": "SQS:*",
2201
- "Condition": Object {
2202
- "Bool": Object {
2203
- "aws:SecureTransport": "false",
2204
- },
2205
- },
2206
- "Effect": "Deny",
2207
- "Principal": Object {
2208
- "AWS": "*",
2209
- },
2210
- "Resource": Object {
2211
- "Fn::GetAtt": Array [
2212
- "testiotsqsqueue630B4C1F",
2213
- "Arn",
2214
- ],
2215
- },
2216
- "Sid": "HttpsOnly",
2217
- },
2218
- ],
2219
- "Version": "2012-10-17",
2220
- },
2221
- "Queues": Array [
2222
- Object {
2223
- "Ref": "testiotsqsqueue630B4C1F",
2224
- },
2225
- ],
2226
- },
2227
- "Type": "AWS::SQS::QueuePolicy",
2228
- },
2229
- },
2230
- }
2231
- `;
2232
-
2233
- exports[`Pattern deployment without creating a KMS key 1`] = `
2234
- Object {
2235
- "Resources": Object {
2236
- "testiotsqsIotTopicRule3ABB9E1A": Object {
2237
- "Properties": Object {
2238
- "TopicRulePayload": Object {
2239
- "Actions": Array [
2240
- Object {
2241
- "Sqs": Object {
2242
- "QueueUrl": Object {
2243
- "Ref": "testiotsqsqueue630B4C1F",
2244
- },
2245
- "RoleArn": Object {
2246
- "Fn::GetAtt": Array [
2247
- "testiotsqsiotactionsrole93B1D327",
2248
- "Arn",
2249
- ],
2250
- },
2251
- },
2252
- },
2253
- ],
2254
- "Description": "Processing messages from IoT devices or factory machines",
2255
- "RuleDisabled": false,
2256
- "Sql": "SELECT * FROM 'test/topic/#'",
2257
- },
2258
- },
2259
- "Type": "AWS::IoT::TopicRule",
2260
- },
2261
- "testiotsqsdeadLetterQueue66A04E81": Object {
2262
- "DeletionPolicy": "Delete",
2263
- "Properties": Object {
2264
- "KmsMasterKeyId": "alias/aws/sqs",
2265
- },
2266
- "Type": "AWS::SQS::Queue",
2267
- "UpdateReplacePolicy": "Delete",
2268
- },
2269
- "testiotsqsdeadLetterQueuePolicyE13575BF": Object {
2270
- "Properties": Object {
2271
- "PolicyDocument": Object {
2272
- "Statement": Array [
2273
- Object {
2274
- "Action": Array [
2275
- "sqs:DeleteMessage",
2276
- "sqs:ReceiveMessage",
2277
- "sqs:SendMessage",
2278
- "sqs:GetQueueAttributes",
2279
- "sqs:RemovePermission",
2280
- "sqs:AddPermission",
2281
- "sqs:SetQueueAttributes",
2282
- ],
2283
- "Effect": "Allow",
2284
- "Principal": Object {
2285
- "AWS": Object {
2286
- "Fn::Join": Array [
2287
- "",
2288
- Array [
2289
- "arn:",
2290
- Object {
2291
- "Ref": "AWS::Partition",
2292
- },
2293
- ":iam::",
2294
- Object {
2295
- "Ref": "AWS::AccountId",
2296
- },
2297
- ":root",
2298
- ],
2299
- ],
2300
- },
2301
- },
2302
- "Resource": Object {
2303
- "Fn::GetAtt": Array [
2304
- "testiotsqsdeadLetterQueue66A04E81",
2305
- "Arn",
2306
- ],
2307
- },
2308
- "Sid": "QueueOwnerOnlyAccess",
2309
- },
2310
- Object {
2311
- "Action": "SQS:*",
2312
- "Condition": Object {
2313
- "Bool": Object {
2314
- "aws:SecureTransport": "false",
2315
- },
2316
- },
2317
- "Effect": "Deny",
2318
- "Principal": Object {
2319
- "AWS": "*",
2320
- },
2321
- "Resource": Object {
2322
- "Fn::GetAtt": Array [
2323
- "testiotsqsdeadLetterQueue66A04E81",
2324
- "Arn",
2325
- ],
2326
- },
2327
- "Sid": "HttpsOnly",
2328
- },
2329
- ],
2330
- "Version": "2012-10-17",
2331
- },
2332
- "Queues": Array [
2333
- Object {
2334
- "Ref": "testiotsqsdeadLetterQueue66A04E81",
2335
- },
2336
- ],
2337
- },
2338
- "Type": "AWS::SQS::QueuePolicy",
2339
- },
2340
- "testiotsqsiotactionsrole93B1D327": Object {
2341
- "Properties": Object {
2342
- "AssumeRolePolicyDocument": Object {
2343
- "Statement": Array [
2344
- Object {
2345
- "Action": "sts:AssumeRole",
2346
- "Effect": "Allow",
2347
- "Principal": Object {
2348
- "Service": "iot.amazonaws.com",
2349
- },
2350
- },
2351
- ],
2352
- "Version": "2012-10-17",
2353
- },
2354
- },
2355
- "Type": "AWS::IAM::Role",
2356
- },
2357
- "testiotsqsiotactionsroleDefaultPolicyEE46FAE6": Object {
2358
- "Properties": Object {
2359
- "PolicyDocument": Object {
2360
- "Statement": Array [
2361
- Object {
2362
- "Action": Array [
2363
- "sqs:SendMessage",
2364
- "sqs:GetQueueAttributes",
2365
- "sqs:GetQueueUrl",
2366
- ],
2367
- "Effect": "Allow",
2368
- "Resource": Object {
2369
- "Fn::GetAtt": Array [
2370
- "testiotsqsqueue630B4C1F",
2371
- "Arn",
2372
- ],
2373
- },
2374
- },
2375
- ],
2376
- "Version": "2012-10-17",
2377
- },
2378
- "PolicyName": "testiotsqsiotactionsroleDefaultPolicyEE46FAE6",
2379
- "Roles": Array [
2380
- Object {
2381
- "Ref": "testiotsqsiotactionsrole93B1D327",
2382
- },
2383
- ],
2384
- },
2385
- "Type": "AWS::IAM::Policy",
2386
- },
2387
- "testiotsqsqueue630B4C1F": Object {
2388
- "DeletionPolicy": "Delete",
2389
- "Properties": Object {
2390
- "KmsMasterKeyId": "alias/aws/sqs",
2391
- "RedrivePolicy": Object {
2392
- "deadLetterTargetArn": Object {
2393
- "Fn::GetAtt": Array [
2394
- "testiotsqsdeadLetterQueue66A04E81",
2395
- "Arn",
2396
- ],
2397
- },
2398
- "maxReceiveCount": 15,
2399
- },
2400
- },
2401
- "Type": "AWS::SQS::Queue",
2402
- "UpdateReplacePolicy": "Delete",
2403
- },
2404
- "testiotsqsqueuePolicyD1FF6491": Object {
2405
- "Properties": Object {
2406
- "PolicyDocument": Object {
2407
- "Statement": Array [
2408
- Object {
2409
- "Action": Array [
2410
- "sqs:DeleteMessage",
2411
- "sqs:ReceiveMessage",
2412
- "sqs:SendMessage",
2413
- "sqs:GetQueueAttributes",
2414
- "sqs:RemovePermission",
2415
- "sqs:AddPermission",
2416
- "sqs:SetQueueAttributes",
2417
- ],
2418
- "Effect": "Allow",
2419
- "Principal": Object {
2420
- "AWS": Object {
2421
- "Fn::Join": Array [
2422
- "",
2423
- Array [
2424
- "arn:",
2425
- Object {
2426
- "Ref": "AWS::Partition",
2427
- },
2428
- ":iam::",
2429
- Object {
2430
- "Ref": "AWS::AccountId",
2431
- },
2432
- ":root",
2433
- ],
2434
- ],
2435
- },
2436
- },
2437
- "Resource": Object {
2438
- "Fn::GetAtt": Array [
2439
- "testiotsqsqueue630B4C1F",
2440
- "Arn",
2441
- ],
2442
- },
2443
- "Sid": "QueueOwnerOnlyAccess",
2444
- },
2445
- Object {
2446
- "Action": "SQS:*",
2447
- "Condition": Object {
2448
- "Bool": Object {
2449
- "aws:SecureTransport": "false",
2450
- },
2451
- },
2452
- "Effect": "Deny",
2453
- "Principal": Object {
2454
- "AWS": "*",
2455
- },
2456
- "Resource": Object {
2457
- "Fn::GetAtt": Array [
2458
- "testiotsqsqueue630B4C1F",
2459
- "Arn",
2460
- ],
2461
- },
2462
- "Sid": "HttpsOnly",
2463
- },
2464
- ],
2465
- "Version": "2012-10-17",
2466
- },
2467
- "Queues": Array [
2468
- Object {
2469
- "Ref": "testiotsqsqueue630B4C1F",
2470
- },
2471
- ],
2472
- },
2473
- "Type": "AWS::SQS::QueuePolicy",
2474
- },
2475
- },
2476
- }
2477
- `;