IAM: add tags for users to get-account-authorization-details response (#5803)
This commit is contained in:
parent
446930fcc0
commit
555928af5d
@ -849,6 +849,7 @@ class IamResponse(BaseResponse):
|
|||||||
groups=account_details["groups"],
|
groups=account_details["groups"],
|
||||||
roles=account_details["roles"],
|
roles=account_details["roles"],
|
||||||
get_groups_for_user=self.backend.get_groups_for_user,
|
get_groups_for_user=self.backend.get_groups_for_user,
|
||||||
|
list_tags_for_user=self.backend.list_user_tags,
|
||||||
)
|
)
|
||||||
|
|
||||||
def create_saml_provider(self):
|
def create_saml_provider(self):
|
||||||
@ -2279,6 +2280,14 @@ GET_ACCOUNT_AUTHORIZATION_DETAILS_TEMPLATE = """<GetAccountAuthorizationDetailsR
|
|||||||
{% endfor %}
|
{% endfor %}
|
||||||
</UserPolicyList>
|
</UserPolicyList>
|
||||||
{% endif %}
|
{% endif %}
|
||||||
|
<Tags>
|
||||||
|
{% for tag in list_tags_for_user(user.name).get("Tags", []) %}
|
||||||
|
<member>
|
||||||
|
<Key>{{ tag['Key'] }}</Key>
|
||||||
|
<Value>{{ tag['Value'] }}</Value>
|
||||||
|
</member>
|
||||||
|
{% endfor %}
|
||||||
|
</Tags>
|
||||||
</member>
|
</member>
|
||||||
{% endfor %}
|
{% endfor %}
|
||||||
</UserDetailList>
|
</UserDetailList>
|
||||||
|
@ -2339,6 +2339,14 @@ def test_get_account_authorization_details():
|
|||||||
RoleName="my-role",
|
RoleName="my-role",
|
||||||
PolicyArn=f"arn:aws:iam::{ACCOUNT_ID}:policy/testPolicy",
|
PolicyArn=f"arn:aws:iam::{ACCOUNT_ID}:policy/testPolicy",
|
||||||
)
|
)
|
||||||
|
# add tags to the user
|
||||||
|
conn.tag_user(
|
||||||
|
UserName="testUser",
|
||||||
|
Tags=[
|
||||||
|
{"Key": "somekey", "Value": "somevalue"},
|
||||||
|
{"Key": "someotherkey", "Value": "someothervalue"},
|
||||||
|
],
|
||||||
|
)
|
||||||
|
|
||||||
result = conn.get_account_authorization_details(Filter=["Role"])
|
result = conn.get_account_authorization_details(Filter=["Role"])
|
||||||
assert len(result["RoleDetailList"]) == 1
|
assert len(result["RoleDetailList"]) == 1
|
||||||
@ -2377,6 +2385,7 @@ def test_get_account_authorization_details():
|
|||||||
assert len(result["UserDetailList"][0]["GroupList"]) == 1
|
assert len(result["UserDetailList"][0]["GroupList"]) == 1
|
||||||
assert len(result["UserDetailList"][0]["UserPolicyList"]) == 1
|
assert len(result["UserDetailList"][0]["UserPolicyList"]) == 1
|
||||||
assert len(result["UserDetailList"][0]["AttachedManagedPolicies"]) == 1
|
assert len(result["UserDetailList"][0]["AttachedManagedPolicies"]) == 1
|
||||||
|
assert len(result["UserDetailList"][0]["Tags"]) == 2
|
||||||
assert len(result["GroupDetailList"]) == 0
|
assert len(result["GroupDetailList"]) == 0
|
||||||
assert len(result["Policies"]) == 0
|
assert len(result["Policies"]) == 0
|
||||||
assert (
|
assert (
|
||||||
|
Loading…
x
Reference in New Issue
Block a user