Sha256: e205e1d7d4e4a795889af091b6cde5afb099843d000ddae72cec53d65558d02e
Contents?: true
Size: 1.25 KB
Versions: 5
Compression:
Stored size: 1.25 KB
Contents
module Jets::Resource::Iam
class PolicyDocument
extend Memoist
attr_reader :definitions
def initialize(*definitions)
@definitions = definitions.flatten
# empty starting policy that will be altered
@policy = {
version: "2012-10-17",
statement: []
}
# https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html
@sid = 0 # counter
end
def policy_document
definitions.map { |definition| standardize(definition) }
Jets::Camelizer.transform(@policy)
end
memoize :policy_document # only process policy_document once
def standardize(definition)
@sid += 1
case definition
when String
# Expands simple string from: logs => logs:*
definition = "#{definition}:*" unless definition.include?(':')
@policy[:statement] << {
sid: "Stmt#{@sid}",
action: [definition],
effect: "Allow",
resource: "*",
}
when Hash
definition = definition.stringify_keys
if definition.key?("Version") # special case where we replace the policy entirely
@policy = definition
else
@policy[:statement] << definition
end
end
end
end
end
Version data entries
5 entries across 5 versions & 1 rubygems