IAM: add tags for users to get-account-authorization-details response (#5803)

This commit is contained in:
Daniel Fangl 2022-12-22 20:03:33 +01:00 committed by GitHub
parent 446930fcc0
commit 555928af5d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 18 additions and 0 deletions

View File

@ -849,6 +849,7 @@ class IamResponse(BaseResponse):
groups=account_details["groups"],
roles=account_details["roles"],
get_groups_for_user=self.backend.get_groups_for_user,
list_tags_for_user=self.backend.list_user_tags,
)
def create_saml_provider(self):
@ -2279,6 +2280,14 @@ GET_ACCOUNT_AUTHORIZATION_DETAILS_TEMPLATE = """<GetAccountAuthorizationDetailsR
{% endfor %}
</UserPolicyList>
{% endif %}
<Tags>
{% for tag in list_tags_for_user(user.name).get("Tags", []) %}
<member>
<Key>{{ tag['Key'] }}</Key>
<Value>{{ tag['Value'] }}</Value>
</member>
{% endfor %}
</Tags>
</member>
{% endfor %}
</UserDetailList>

View File

@ -2339,6 +2339,14 @@ def test_get_account_authorization_details():
RoleName="my-role",
PolicyArn=f"arn:aws:iam::{ACCOUNT_ID}:policy/testPolicy",
)
# add tags to the user
conn.tag_user(
UserName="testUser",
Tags=[
{"Key": "somekey", "Value": "somevalue"},
{"Key": "someotherkey", "Value": "someothervalue"},
],
)
result = conn.get_account_authorization_details(Filter=["Role"])
assert len(result["RoleDetailList"]) == 1
@ -2377,6 +2385,7 @@ def test_get_account_authorization_details():
assert len(result["UserDetailList"][0]["GroupList"]) == 1
assert len(result["UserDetailList"][0]["UserPolicyList"]) == 1
assert len(result["UserDetailList"][0]["AttachedManagedPolicies"]) == 1
assert len(result["UserDetailList"][0]["Tags"]) == 2
assert len(result["GroupDetailList"]) == 0
assert len(result["Policies"]) == 0
assert (