diff --git a/moto/iam/models.py b/moto/iam/models.py
index 697be7988..c8f95f3c9 100644
--- a/moto/iam/models.py
+++ b/moto/iam/models.py
@@ -72,11 +72,11 @@ class ManagedPolicy(Policy):
def attach_to(self, obj):
self.attachment_count += 1
- obj.managed_policies[self.name] = self
+ obj.managed_policies[self.arn] = self
def detach_from(self, obj):
self.attachment_count -= 1
- del obj.managed_policies[self.name]
+ del obj.managed_policies[self.arn]
@property
def arn(self):
@@ -477,11 +477,13 @@ class IAMBackend(BaseBackend):
document=policy_document,
path=path,
)
- self.managed_policies[policy.name] = policy
+ self.managed_policies[policy.arn] = policy
return policy
- def get_policy(self, policy_name):
- return self.managed_policies.get(policy_name)
+ def get_policy(self, policy_arn):
+ if policy_arn not in self.managed_policies:
+ raise IAMNotFoundException("Policy {0} not found".format(policy_arn))
+ return self.managed_policies.get(policy_arn)
def list_attached_role_policies(self, role_name, marker=None, max_items=100, path_prefix='/'):
policies = self.get_role(role_name).managed_policies.values()
@@ -575,9 +577,7 @@ class IAMBackend(BaseBackend):
return role.policies.keys()
def create_policy_version(self, policy_arn, policy_document, set_as_default):
- policy_name = policy_arn.split(':')[-1]
- policy_name = policy_name.split('/')[1]
- policy = self.get_policy(policy_name)
+ policy = self.get_policy(policy_arn)
if not policy:
raise IAMNotFoundException("Policy not found")
version = PolicyVersion(policy_arn, policy_document, set_as_default)
@@ -587,9 +587,7 @@ class IAMBackend(BaseBackend):
return version
def get_policy_version(self, policy_arn, version_id):
- policy_name = policy_arn.split(':')[-1]
- policy_name = policy_name.split('/')[1]
- policy = self.get_policy(policy_name)
+ policy = self.get_policy(policy_arn)
if not policy:
raise IAMNotFoundException("Policy not found")
for version in policy.versions:
@@ -598,17 +596,13 @@ class IAMBackend(BaseBackend):
raise IAMNotFoundException("Policy version not found")
def list_policy_versions(self, policy_arn):
- policy_name = policy_arn.split(':')[-1]
- policy_name = policy_name.split('/')[1]
- policy = self.get_policy(policy_name)
+ policy = self.get_policy(policy_arn)
if not policy:
raise IAMNotFoundException("Policy not found")
return policy.versions
def delete_policy_version(self, policy_arn, version_id):
- policy_name = policy_arn.split(':')[-1]
- policy_name = policy_name.split('/')[1]
- policy = self.get_policy(policy_name)
+ policy = self.get_policy(policy_arn)
if not policy:
raise IAMNotFoundException("Policy not found")
for i, v in enumerate(policy.versions):
diff --git a/moto/iam/responses.py b/moto/iam/responses.py
index 9c1241c36..e77cec358 100644
--- a/moto/iam/responses.py
+++ b/moto/iam/responses.py
@@ -58,6 +58,12 @@ class IamResponse(BaseResponse):
template = self.response_template(CREATE_POLICY_TEMPLATE)
return template.render(policy=policy)
+ def get_policy(self):
+ policy_arn = self._get_param('PolicyArn')
+ policy = iam_backend.get_policy(policy_arn)
+ template = self.response_template(GET_POLICY_TEMPLATE)
+ return template.render(policy=policy)
+
def list_attached_role_policies(self):
marker = self._get_param('Marker')
max_items = self._get_int_param('MaxItems', 100)
@@ -601,6 +607,25 @@ CREATE_POLICY_TEMPLATE = """
"""
+GET_POLICY_TEMPLATE = """
+
+
+ {{ policy.name }}
+ {{ policy.description }}
+ {{ policy.default_version_id }}
+ {{ policy.id }}
+ {{ policy.path }}
+ {{ policy.arn }}
+ {{ policy.attachment_count }}
+ {{ policy.create_datetime.isoformat() }}
+ {{ policy.update_datetime.isoformat() }}
+
+
+
+ 684f0917-3d22-11e4-a4a0-cffb9EXAMPLE
+
+"""
+
LIST_ATTACHED_ROLE_POLICIES_TEMPLATE = """
{% if marker is none %}
diff --git a/tests/test_iam/test_iam.py b/tests/test_iam/test_iam.py
index 2225f0644..61cd073fe 100644
--- a/tests/test_iam/test_iam.py
+++ b/tests/test_iam/test_iam.py
@@ -286,6 +286,15 @@ def test_create_policy_versions():
PolicyDocument='{"some":"policy"}')
version.get('PolicyVersion').get('Document').should.equal({'some': 'policy'})
+@mock_iam
+def test_get_policy():
+ conn = boto3.client('iam', region_name='us-east-1')
+ response = conn.create_policy(
+ PolicyName="TestGetPolicy",
+ PolicyDocument='{"some":"policy"}')
+ policy = conn.get_policy(
+ PolicyArn="arn:aws:iam::123456789012:policy/TestGetPolicy")
+ response['Policy']['Arn'].should.equal("arn:aws:iam::123456789012:policy/TestGetPolicy")
@mock_iam
def test_get_policy_version():