Contents

require "yaml"

module Cody
  class Role < Dsl::Base
    include Cody::Dsl::Role
    include Evaluate
    include Variables

    def initialize(options={})
      super
      @role_path = options[:role_path] || get_role_path
      @iam_policy = {}
    end

    def run
      load_variables
      evaluate(@role_path) if File.exist?(@role_path)
      @properties[:Policies] = [{
        PolicyName: "CodeBuildAccess",
        PolicyDocument: {
          Version: "2012-10-17",
          Statement: derived_iam_statements
        }
      }]

      @properties[:ManagedPolicyArns] ||= @managed_policy_arns || default_managed_policy_arns

      resource = {
        IamRole: {
          Type: "AWS::IAM::Role",
          Properties: @properties
        }
      }
      auto_camelize(resource)
    end

  private
    def get_role_path
      lookup_cody_file("role.rb")
    end

    def default_properties
      {
        AssumeRolePolicyDocument: {
          Statement: [{
            Action: ["sts:AssumeRole"],
            Effect: "Allow",
            Principal: {
              Service: ["codebuild.amazonaws.com"]
            }
          }],
          Version: "2012-10-17"
        },
        Path: "/"
      }
    end

    def derived_iam_statements
      @iam_statements || default_iam_statements
    end

    def default_iam_statements
      [{
        Action: [
          "logs:CreateLogGroup",
          "logs:CreateLogStream",
          "logs:PutLogEvents",
          "ssm:DescribeDocumentParameters",
          "ssm:DescribeParameters",
          "ssm:GetParameter*",
        ],
        Effect: "Allow",
        Resource: "*"
      }]
    end

    def default_managed_policy_arns
      # Useful when using with CodePipeline
      ["arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess"]
    end
  end
end

Version data entries

7 entries across 7 versions & 1 rubygems

Version	Path
cody-1.0.6	lib/cody/role.rb
cody-1.0.5	lib/cody/role.rb
cody-1.0.4	lib/cody/role.rb
cody-1.0.3	lib/cody/role.rb
cody-1.0.2	lib/cody/role.rb
cody-1.0.1	lib/cody/role.rb
cody-1.0.0	lib/cody/role.rb