Contents

# frozen_string_literal: true

module Awspec::Generator
  module Spec
    class IamRole
      include Awspec::Helper::Finder
      def generate_all
        roles = select_all_iam_roles
        raise 'Not Found IAM Role' if roles.empty?

        specs = roles.map do |role|
          inline_policies = select_inline_policy_by_role_name(role.role_name).map do |policy_name|
            res = iam_client.get_role_policy({
                                               role_name: role.role_name,
                                               policy_name: policy_name
                                             })
            document = JSON.generate(JSON.parse(URI.decode_www_form_component(res.policy_document)))
            "it { should have_inline_policy('#{policy_name}').policy_document('#{document}') }"
          end
          content = ERB.new(iam_role_spec_template, nil, '-').result(binding).gsub(/^\n/, '')
        end
        specs.join("\n")
      end

      def iam_role_spec_template
        <<-'EOF'
describe iam_role('<%= role.role_name %>') do
  it { should exist }
  its(:arn) { should eq '<%= role.arn %>' }
  its(:create_date) { should eq Time.parse('<%= role.create_date.utc %>') }
<% select_iam_policy_by_role_name(role.role_name).each do |policy| %>  it { should have_iam_policy('<%= policy.policy_name %>') }
<% end %>
<%- inline_policies.each do |line| -%>
  <%= line %>
<%- end -%>
end
EOF
      end
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
awspec-1.32.0	lib/awspec/generator/spec/iam_role.rb
awspec-1.31.0	lib/awspec/generator/spec/iam_role.rb