Add iam.get_account_summary

IMPLEMENTATION_COVERAGE.md

@@ -171,7 +171,7 @@
 - [ ] update_webhook
 
 ## apigateway
-24% implemented
+25% implemented
 - [ ] create_api_key
 - [ ] create_authorizer
 - [ ] create_base_path_mapping
@@ -204,7 +204,7 @@
 - [ ] delete_request_validator
 - [X] delete_resource
 - [X] delete_rest_api
-- [ ] delete_stage
+- [X] delete_stage
 - [X] delete_usage_plan
 - [X] delete_usage_plan_key
 - [ ] delete_vpc_link
@@ -687,12 +687,17 @@
 ## ce
 0% implemented
 - [ ] get_cost_and_usage
+- [ ] get_cost_and_usage_with_resources
 - [ ] get_cost_forecast
 - [ ] get_dimension_values
 - [ ] get_reservation_coverage
 - [ ] get_reservation_purchase_recommendation
 - [ ] get_reservation_utilization
 - [ ] get_rightsizing_recommendation
+- [ ] get_savings_plans_coverage
+- [ ] get_savings_plans_purchase_recommendation
+- [ ] get_savings_plans_utilization
+- [ ] get_savings_plans_utilization_details
 - [ ] get_tags
 - [ ] get_usage_forecast
 
@@ -701,6 +706,7 @@
 - [ ] associate_phone_number_with_user
 - [ ] associate_phone_numbers_with_voice_connector
 - [ ] associate_phone_numbers_with_voice_connector_group
+- [ ] batch_create_room_membership
 - [ ] batch_delete_phone_number
 - [ ] batch_suspend_user
 - [ ] batch_unsuspend_user
@@ -709,11 +715,15 @@
 - [ ] create_account
 - [ ] create_bot
 - [ ] create_phone_number_order
+- [ ] create_room
+- [ ] create_room_membership
 - [ ] create_voice_connector
 - [ ] create_voice_connector_group
 - [ ] delete_account
 - [ ] delete_events_configuration
 - [ ] delete_phone_number
+- [ ] delete_room
+- [ ] delete_room_membership
 - [ ] delete_voice_connector
 - [ ] delete_voice_connector_group
 - [ ] delete_voice_connector_origination
@@ -731,6 +741,7 @@
 - [ ] get_phone_number
 - [ ] get_phone_number_order
 - [ ] get_phone_number_settings
+- [ ] get_room
 - [ ] get_user
 - [ ] get_user_settings
 - [ ] get_voice_connector
@@ -745,6 +756,8 @@
 - [ ] list_bots
 - [ ] list_phone_number_orders
 - [ ] list_phone_numbers
+- [ ] list_room_memberships
+- [ ] list_rooms
 - [ ] list_users
 - [ ] list_voice_connector_groups
 - [ ] list_voice_connector_termination_credentials
@@ -766,6 +779,8 @@
 - [ ] update_global_settings
 - [ ] update_phone_number
 - [ ] update_phone_number_settings
+- [ ] update_room
+- [ ] update_room_membership
 - [ ] update_user
 - [ ] update_user_settings
 - [ ] update_voice_connector
@@ -1003,6 +1018,7 @@
 - [ ] delete_suggester
 - [ ] describe_analysis_schemes
 - [ ] describe_availability_options
+- [ ] describe_domain_endpoint_options
 - [ ] describe_domains
 - [ ] describe_expressions
 - [ ] describe_index_fields
@@ -1012,6 +1028,7 @@
 - [ ] index_documents
 - [ ] list_domain_names
 - [ ] update_availability_options
+- [ ] update_domain_endpoint_options
 - [ ] update_scaling_parameters
 - [ ] update_service_access_policies
 
@@ -1028,9 +1045,11 @@
 - [ ] delete_trail
 - [ ] describe_trails
 - [ ] get_event_selectors
+- [ ] get_trail
 - [ ] get_trail_status
 - [ ] list_public_keys
 - [ ] list_tags
+- [ ] list_trails
 - [ ] lookup_events
 - [ ] put_event_selectors
 - [ ] remove_tags
@@ -1252,6 +1271,22 @@
 - [ ] update_team_member
 - [ ] update_user_profile
 
+## codestar-notifications
+0% implemented
+- [ ] create_notification_rule
+- [ ] delete_notification_rule
+- [ ] delete_target
+- [ ] describe_notification_rule
+- [ ] list_event_types
+- [ ] list_notification_rules
+- [ ] list_tags_for_resource
+- [ ] list_targets
+- [ ] subscribe
+- [ ] tag_resource
+- [ ] unsubscribe
+- [ ] untag_resource
+- [ ] update_notification_rule
+
 ## cognito-identity
 28% implemented
 - [X] create_identity_pool
@@ -1545,10 +1580,13 @@
 - [ ] list_queues
 - [ ] list_routing_profiles
 - [ ] list_security_profiles
+- [ ] list_tags_for_resource
 - [ ] list_user_hierarchy_groups
 - [ ] list_users
 - [ ] start_outbound_voice_contact
 - [ ] stop_contact
+- [ ] tag_resource
+- [ ] untag_resource
 - [ ] update_contact_attributes
 - [ ] update_user_hierarchy
 - [ ] update_user_identity_info
@@ -1563,6 +1601,31 @@
 - [ ] modify_report_definition
 - [ ] put_report_definition
 
+## dataexchange
+0% implemented
+- [ ] cancel_job
+- [ ] create_data_set
+- [ ] create_job
+- [ ] create_revision
+- [ ] delete_asset
+- [ ] delete_data_set
+- [ ] delete_revision
+- [ ] get_asset
+- [ ] get_data_set
+- [ ] get_job
+- [ ] get_revision
+- [ ] list_data_set_revisions
+- [ ] list_data_sets
+- [ ] list_jobs
+- [ ] list_revision_assets
+- [ ] list_tags_for_resource
+- [ ] start_job
+- [ ] tag_resource
+- [ ] untag_resource
+- [ ] update_asset
+- [ ] update_data_set
+- [ ] update_revision
+
 ## datapipeline
 42% implemented
 - [X] activate_pipeline
@@ -1586,17 +1649,17 @@
 - [ ] validate_pipeline_definition
 
 ## datasync
-0% implemented
+22% implemented
-- [ ] cancel_task_execution
+- [X] cancel_task_execution
 - [ ] create_agent
 - [ ] create_location_efs
 - [ ] create_location_nfs
 - [ ] create_location_s3
 - [ ] create_location_smb
-- [ ] create_task
+- [X] create_task
 - [ ] delete_agent
-- [ ] delete_location
+- [X] delete_location
-- [ ] delete_task
+- [X] delete_task
 - [ ] describe_agent
 - [ ] describe_location_efs
 - [ ] describe_location_nfs
@@ -1609,11 +1672,11 @@
 - [ ] list_tags_for_resource
 - [ ] list_task_executions
 - [ ] list_tasks
-- [ ] start_task_execution
+- [X] start_task_execution
 - [ ] tag_resource
 - [ ] untag_resource
 - [ ] update_agent
-- [ ] update_task
+- [X] update_task
 
 ## dax
 0% implemented
@@ -1799,6 +1862,9 @@
 - [ ] delete_lifecycle_policy
 - [ ] get_lifecycle_policies
 - [ ] get_lifecycle_policy
+- [ ] list_tags_for_resource
+- [ ] tag_resource
+- [ ] untag_resource
 - [ ] update_lifecycle_policy
 
 ## dms
@@ -2461,16 +2527,22 @@
 ## eks
 0% implemented
 - [ ] create_cluster
+- [ ] create_nodegroup
 - [ ] delete_cluster
+- [ ] delete_nodegroup
 - [ ] describe_cluster
+- [ ] describe_nodegroup
 - [ ] describe_update
 - [ ] list_clusters
+- [ ] list_nodegroups
 - [ ] list_tags_for_resource
 - [ ] list_updates
 - [ ] tag_resource
 - [ ] untag_resource
 - [ ] update_cluster_config
 - [ ] update_cluster_version
+- [ ] update_nodegroup_config
+- [ ] update_nodegroup_version
 
 ## elasticache
 0% implemented
@@ -3217,6 +3289,7 @@
 - [ ] create_filter
 - [ ] create_ip_set
 - [ ] create_members
+- [ ] create_publishing_destination
 - [ ] create_sample_findings
 - [ ] create_threat_intel_set
 - [ ] decline_invitations
@@ -3225,7 +3298,9 @@
 - [ ] delete_invitations
 - [ ] delete_ip_set
 - [ ] delete_members
+- [ ] delete_publishing_destination
 - [ ] delete_threat_intel_set
+- [ ] describe_publishing_destination
 - [ ] disassociate_from_master_account
 - [ ] disassociate_members
 - [ ] get_detector
@@ -3244,6 +3319,7 @@
 - [ ] list_invitations
 - [ ] list_ip_sets
 - [ ] list_members
+- [ ] list_publishing_destinations
 - [ ] list_tags_for_resource
 - [ ] list_threat_intel_sets
 - [ ] start_monitoring_members
@@ -3255,6 +3331,7 @@
 - [ ] update_filter
 - [ ] update_findings_feedback
 - [ ] update_ip_set
+- [ ] update_publishing_destination
 - [ ] update_threat_intel_set
 
 ## health
@@ -3267,7 +3344,7 @@
 - [ ] describe_events
 
 ## iam
-62% implemented
+65% implemented
 - [ ] add_client_id_to_open_id_connect_provider
 - [X] add_role_to_instance_profile
 - [X] add_user_to_group
@@ -3293,7 +3370,7 @@
 - [X] delete_access_key
 - [X] delete_account_alias
 - [X] delete_account_password_policy
-- [ ] delete_group
+- [X] delete_group
 - [ ] delete_group_policy
 - [ ] delete_instance_profile
 - [X] delete_login_profile
@@ -3323,7 +3400,7 @@
 - [X] get_access_key_last_used
 - [X] get_account_authorization_details
 - [X] get_account_password_policy
-- [ ] get_account_summary
+- [X] get_account_summary
 - [ ] get_context_keys_for_custom_policy
 - [ ] get_context_keys_for_principal_policy
 - [X] get_credential_report
@@ -3405,7 +3482,7 @@
 - [X] update_signing_certificate
 - [ ] update_ssh_public_key
 - [X] update_user
-- [ ] upload_server_certificate
+- [X] upload_server_certificate
 - [X] upload_signing_certificate
 - [ ] upload_ssh_public_key
 
@@ -3459,7 +3536,7 @@
 - [ ] update_assessment_target
 
 ## iot
-23% implemented
+22% implemented
 - [ ] accept_certificate_transfer
 - [ ] add_thing_to_billing_group
 - [X] add_thing_to_thing_group
@@ -3544,11 +3621,13 @@
 - [X] detach_thing_principal
 - [ ] disable_topic_rule
 - [ ] enable_topic_rule
+- [ ] get_cardinality
 - [ ] get_effective_policies
 - [ ] get_indexing_configuration
 - [ ] get_job_document
 - [ ] get_logging_options
 - [ ] get_ota_update
+- [ ] get_percentiles
 - [X] get_policy
 - [ ] get_policy_version
 - [ ] get_registration_code
@@ -4295,6 +4374,15 @@
 - [ ] reject_invitation
 - [ ] vote_on_proposal
 
+## marketplace-catalog
+0% implemented
+- [ ] cancel_change_set
+- [ ] describe_change_set
+- [ ] describe_entity
+- [ ] list_change_sets
+- [ ] list_entities
+- [ ] start_change_set
+
 ## marketplace-entitlement
 0% implemented
 - [ ] get_entitlements
@@ -4773,6 +4861,7 @@
 
 ## personalize
 0% implemented
+- [ ] create_batch_inference_job
 - [ ] create_campaign
 - [ ] create_dataset
 - [ ] create_dataset_group
@@ -4788,6 +4877,7 @@
 - [ ] delete_schema
 - [ ] delete_solution
 - [ ] describe_algorithm
+- [ ] describe_batch_inference_job
 - [ ] describe_campaign
 - [ ] describe_dataset
 - [ ] describe_dataset_group
@@ -4799,6 +4889,7 @@
 - [ ] describe_solution
 - [ ] describe_solution_version
 - [ ] get_solution_metrics
+- [ ] list_batch_inference_jobs
 - [ ] list_campaigns
 - [ ] list_dataset_groups
 - [ ] list_dataset_import_jobs
@@ -4831,6 +4922,7 @@
 - [ ] create_email_template
 - [ ] create_export_job
 - [ ] create_import_job
+- [ ] create_journey
 - [ ] create_push_template
 - [ ] create_segment
 - [ ] create_sms_template
@@ -4847,6 +4939,7 @@
 - [ ] delete_endpoint
 - [ ] delete_event_stream
 - [ ] delete_gcm_channel
+- [ ] delete_journey
 - [ ] delete_push_template
 - [ ] delete_segment
 - [ ] delete_sms_channel
@@ -4879,6 +4972,10 @@
 - [ ] get_gcm_channel
 - [ ] get_import_job
 - [ ] get_import_jobs
+- [ ] get_journey
+- [ ] get_journey_date_range_kpi
+- [ ] get_journey_execution_activity_metrics
+- [ ] get_journey_execution_metrics
 - [ ] get_push_template
 - [ ] get_segment
 - [ ] get_segment_export_jobs
@@ -4890,6 +4987,7 @@
 - [ ] get_sms_template
 - [ ] get_user_endpoints
 - [ ] get_voice_channel
+- [ ] list_journeys
 - [ ] list_tags_for_resource
 - [ ] list_templates
 - [ ] phone_number_validate
@@ -4913,6 +5011,8 @@
 - [ ] update_endpoint
 - [ ] update_endpoints_batch
 - [ ] update_gcm_channel
+- [ ] update_journey
+- [ ] update_journey_state
 - [ ] update_push_template
 - [ ] update_segment
 - [ ] update_sms_channel
@@ -5661,6 +5761,17 @@
 0% implemented
 - [ ] invoke_endpoint
 
+## savingsplans
+0% implemented
+- [ ] create_savings_plan
+- [ ] describe_savings_plan_rates
+- [ ] describe_savings_plans
+- [ ] describe_savings_plans_offering_rates
+- [ ] describe_savings_plans_offerings
+- [ ] list_tags_for_resource
+- [ ] tag_resource
+- [ ] untag_resource
+
 ## sdb
 0% implemented
 - [ ] batch_delete_attributes
@@ -5954,6 +6065,51 @@
 - [X] verify_email_address
 - [X] verify_email_identity
 
+## sesv2
+0% implemented
+- [ ] create_configuration_set
+- [ ] create_configuration_set_event_destination
+- [ ] create_dedicated_ip_pool
+- [ ] create_deliverability_test_report
+- [ ] create_email_identity
+- [ ] delete_configuration_set
+- [ ] delete_configuration_set_event_destination
+- [ ] delete_dedicated_ip_pool
+- [ ] delete_email_identity
+- [ ] get_account
+- [ ] get_blacklist_reports
+- [ ] get_configuration_set
+- [ ] get_configuration_set_event_destinations
+- [ ] get_dedicated_ip
+- [ ] get_dedicated_ips
+- [ ] get_deliverability_dashboard_options
+- [ ] get_deliverability_test_report
+- [ ] get_domain_deliverability_campaign
+- [ ] get_domain_statistics_report
+- [ ] get_email_identity
+- [ ] list_configuration_sets
+- [ ] list_dedicated_ip_pools
+- [ ] list_deliverability_test_reports
+- [ ] list_domain_deliverability_campaigns
+- [ ] list_email_identities
+- [ ] list_tags_for_resource
+- [ ] put_account_dedicated_ip_warmup_attributes
+- [ ] put_account_sending_attributes
+- [ ] put_configuration_set_delivery_options
+- [ ] put_configuration_set_reputation_options
+- [ ] put_configuration_set_sending_options
+- [ ] put_configuration_set_tracking_options
+- [ ] put_dedicated_ip_in_pool
+- [ ] put_dedicated_ip_warmup_attributes
+- [ ] put_deliverability_dashboard_option
+- [ ] put_email_identity_dkim_attributes
+- [ ] put_email_identity_feedback_attributes
+- [ ] put_email_identity_mail_from_attributes
+- [ ] send_email
+- [ ] tag_resource
+- [ ] untag_resource
+- [ ] update_configuration_set_event_destination
+
 ## shield
 0% implemented
 - [ ] associate_drt_log_bucket
@@ -5984,8 +6140,11 @@
 - [ ] list_signing_jobs
 - [ ] list_signing_platforms
 - [ ] list_signing_profiles
+- [ ] list_tags_for_resource
 - [ ] put_signing_profile
 - [ ] start_signing_job
+- [ ] tag_resource
+- [ ] untag_resource
 
 ## sms
 0% implemented
@@ -6111,7 +6270,7 @@
 - [X] untag_queue
 
 ## ssm
-10% implemented
+11% implemented
 - [X] add_tags_to_resource
 - [ ] cancel_command
 - [ ] cancel_maintenance_window_execution
@@ -6184,7 +6343,7 @@
 - [ ] get_ops_item
 - [ ] get_ops_summary
 - [X] get_parameter
-- [ ] get_parameter_history
+- [X] get_parameter_history
 - [X] get_parameters
 - [X] get_parameters_by_path
 - [ ] get_patch_baseline
@@ -6233,6 +6392,19 @@
 - [ ] update_patch_baseline
 - [ ] update_service_setting
 
+## sso
+0% implemented
+- [ ] get_role_credentials
+- [ ] list_account_roles
+- [ ] list_accounts
+- [ ] logout
+
+## sso-oidc
+0% implemented
+- [ ] create_token
+- [ ] register_client
+- [ ] start_device_authorization
+
 ## stepfunctions
 36% implemented
 - [ ] create_activity
@@ -6742,6 +6914,7 @@
 - [ ] delete_ip_group
 - [ ] delete_tags
 - [ ] delete_workspace_image
+- [ ] deregister_workspace_directory
 - [ ] describe_account
 - [ ] describe_account_modifications
 - [ ] describe_client_properties
@@ -6758,10 +6931,14 @@
 - [ ] list_available_management_cidr_ranges
 - [ ] modify_account
 - [ ] modify_client_properties
+- [ ] modify_selfservice_permissions
+- [ ] modify_workspace_access_properties
+- [ ] modify_workspace_creation_properties
 - [ ] modify_workspace_properties
 - [ ] modify_workspace_state
 - [ ] reboot_workspaces
 - [ ] rebuild_workspaces
+- [ ] register_workspace_directory
 - [ ] restore_workspace
 - [ ] revoke_ip_rules
 - [ ] start_workspaces

moto/iam/models.py

@@ -736,6 +736,134 @@ class AccountPasswordPolicy(BaseModel):
             )
 
 
+class AccountSummary(BaseModel):
+    def __init__(self, iam_backend):
+        self._iam_backend = iam_backend
+
+        self._group_policy_size_quota = 5120
+        self._instance_profiles_quota = 1000
+        self._groups_per_user_quota = 10
+        self._attached_policies_per_user_quota = 10
+        self._policies_quota = 1500
+        self._account_mfa_enabled = 0  # Haven't found any information being able to activate MFA for the root account programmatically
+        self._access_keys_per_user_quota = 2
+        self._assume_role_policy_size_quota = 2048
+        self._policy_versions_in_use_quota = 10000
+        self._global_endpoint_token_version = (
+            1  # ToDo: Implement set_security_token_service_preferences()
+        )
+        self._versions_per_policy_quota = 5
+        self._attached_policies_per_group_quota = 10
+        self._policy_size_quota = 6144
+        self._account_signing_certificates_present = 0  # valid values: 0 | 1
+        self._users_quota = 5000
+        self._server_certificates_quota = 20
+        self._user_policy_size_quota = 2048
+        self._roles_quota = 1000
+        self._signing_certificates_per_user_quota = 2
+        self._role_policy_size_quota = 10240
+        self._attached_policies_per_role_quota = 10
+        self._account_access_keys_present = 0  # valid values: 0 | 1
+        self._groups_quota = 300
+
+    @property
+    def summary_map(self):
+        return {
+            "GroupPolicySizeQuota": self._group_policy_size_quota,
+            "InstanceProfilesQuota": self._instance_profiles_quota,
+            "Policies": self._policies,
+            "GroupsPerUserQuota": self._groups_per_user_quota,
+            "InstanceProfiles": self._instance_profiles,
+            "AttachedPoliciesPerUserQuota": self._attached_policies_per_user_quota,
+            "Users": self._users,
+            "PoliciesQuota": self._policies_quota,
+            "Providers": self._providers,
+            "AccountMFAEnabled": self._account_mfa_enabled,
+            "AccessKeysPerUserQuota": self._access_keys_per_user_quota,
+            "AssumeRolePolicySizeQuota": self._assume_role_policy_size_quota,
+            "PolicyVersionsInUseQuota": self._policy_versions_in_use_quota,
+            "GlobalEndpointTokenVersion": self._global_endpoint_token_version,
+            "VersionsPerPolicyQuota": self._versions_per_policy_quota,
+            "AttachedPoliciesPerGroupQuota": self._attached_policies_per_group_quota,
+            "PolicySizeQuota": self._policy_size_quota,
+            "Groups": self._groups,
+            "AccountSigningCertificatesPresent": self._account_signing_certificates_present,
+            "UsersQuota": self._users_quota,
+            "ServerCertificatesQuota": self._server_certificates_quota,
+            "MFADevices": self._mfa_devices,
+            "UserPolicySizeQuota": self._user_policy_size_quota,
+            "PolicyVersionsInUse": self._policy_versions_in_use,
+            "ServerCertificates": self._server_certificates,
+            "Roles": self._roles,
+            "RolesQuota": self._roles_quota,
+            "SigningCertificatesPerUserQuota": self._signing_certificates_per_user_quota,
+            "MFADevicesInUse": self._mfa_devices_in_use,
+            "RolePolicySizeQuota": self._role_policy_size_quota,
+            "AttachedPoliciesPerRoleQuota": self._attached_policies_per_role_quota,
+            "AccountAccessKeysPresent": self._account_access_keys_present,
+            "GroupsQuota": self._groups_quota,
+        }
+
+    @property
+    def _groups(self):
+        return len(self._iam_backend.groups)
+
+    @property
+    def _instance_profiles(self):
+        return len(self._iam_backend.instance_profiles)
+
+    @property
+    def _mfa_devices(self):
+        # Don't know, if hardware devices are also counted here
+        return len(self._iam_backend.virtual_mfa_devices)
+
+    @property
+    def _mfa_devices_in_use(self):
+        devices = 0
+
+        for user in self._iam_backend.users.values():
+            devices += len(user.mfa_devices)
+
+        return devices
+
+    @property
+    def _policies(self):
+        customer_policies = [
+            policy
+            for policy in self._iam_backend.managed_policies
+            if not policy.startswith("arn:aws:iam::aws:policy")
+        ]
+        return len(customer_policies)
+
+    @property
+    def _policy_versions_in_use(self):
+        attachments = 0
+
+        for policy in self._iam_backend.managed_policies.values():
+            attachments += policy.attachment_count
+
+        return attachments
+
+    @property
+    def _providers(self):
+        providers = len(self._iam_backend.saml_providers) + len(
+            self._iam_backend.open_id_providers
+        )
+        return providers
+
+    @property
+    def _roles(self):
+        return len(self._iam_backend.roles)
+
+    @property
+    def _server_certificates(self):
+        return len(self._iam_backend.certificates)
+
+    @property
+    def _users(self):
+        return len(self._iam_backend.users)
+
+
 class IAMBackend(BaseBackend):
     def __init__(self):
         self.instance_profiles = {}
@@ -751,6 +879,7 @@ class IAMBackend(BaseBackend):
         self.policy_arn_regex = re.compile(r"^arn:aws:iam::[0-9]*:policy/.*$")
         self.virtual_mfa_devices = {}
         self.account_password_policy = None
+        self.account_summary = AccountSummary(self)
         super(IAMBackend, self).__init__()
 
     def _init_managed_policies(self):
@@ -1158,7 +1287,7 @@ class IAMBackend(BaseBackend):
     def get_all_server_certs(self, marker=None):
         return self.certificates.values()
 
-    def upload_server_cert(
+    def upload_server_certificate(
         self, cert_name, cert_body, private_key, cert_chain=None, path=None
     ):
         certificate_id = random_resource_id()
@@ -1737,5 +1866,8 @@ class IAMBackend(BaseBackend):
 
         self.account_password_policy = None
 
+    def get_account_summary(self):
+        return self.account_summary
+
 
 iam_backend = IAMBackend()

moto/iam/responses.py

@@ -351,7 +351,7 @@ class IamResponse(BaseResponse):
         private_key = self._get_param("PrivateKey")
         cert_chain = self._get_param("CertificateName")
 
-        cert = iam_backend.upload_server_cert(
+        cert = iam_backend.upload_server_certificate(
             cert_name, cert_body, private_key, cert_chain=cert_chain, path=path
         )
         template = self.response_template(UPLOAD_CERT_TEMPLATE)
@@ -888,6 +888,12 @@ class IamResponse(BaseResponse):
         template = self.response_template(DELETE_ACCOUNT_PASSWORD_POLICY_TEMPLATE)
         return template.render()
 
+    def get_account_summary(self):
+        account_summary = iam_backend.get_account_summary()
+
+        template = self.response_template(GET_ACCOUNT_SUMMARY_TEMPLATE)
+        return template.render(summary_map=account_summary.summary_map)
+
 
 LIST_ENTITIES_FOR_POLICY_TEMPLATE = """<ListEntitiesForPolicyResponse>
  <ListEntitiesForPolicyResult>
@@ -2261,3 +2267,20 @@ DELETE_ACCOUNT_PASSWORD_POLICY_TEMPLATE = """<DeleteAccountPasswordPolicyRespons
     <RequestId>7a62c49f-347e-4fc4-9331-6e8eEXAMPLE</RequestId>
   </ResponseMetadata>
 </DeleteAccountPasswordPolicyResponse>"""
+
+
+GET_ACCOUNT_SUMMARY_TEMPLATE = """<GetAccountSummaryResponse xmlns="https://iam.amazonaws.com/doc/2010-05-08/">
+  <GetAccountSummaryResult>
+    <SummaryMap>
+      {% for key, value in summary_map.items() %}
+      <entry>
+        <key>{{ key }}</key>
+        <value>{{ value }}</value>
+      </entry>
+      {% endfor %}
+    </SummaryMap>
+  </GetAccountSummaryResult>
+  <ResponseMetadata>
+    <RequestId>85cb9b90-ac28-11e4-a88d-97964EXAMPLE</RequestId>
+  </ResponseMetadata>
+</GetAccountSummaryResponse>"""

tests/test_iam/test_iam.py

@@ -75,7 +75,7 @@ MOCK_POLICY_3 = """
 def test_get_all_server_certs():
     conn = boto.connect_iam()
 
-    conn.upload_server_cert("certname", "certbody", "privatekey")
+    conn.upload_server_certificate("certname", "certbody", "privatekey")
     certs = conn.get_all_server_certs()["list_server_certificates_response"][
         "list_server_certificates_result"
     ]["server_certificate_metadata_list"]
@@ -97,7 +97,7 @@ def test_get_server_cert_doesnt_exist():
 def test_get_server_cert():
     conn = boto.connect_iam()
 
-    conn.upload_server_cert("certname", "certbody", "privatekey")
+    conn.upload_server_certificate("certname", "certbody", "privatekey")
     cert = conn.get_server_certificate("certname")
     cert.server_certificate_name.should.equal("certname")
     cert.arn.should.equal("arn:aws:iam::123456789012:server-certificate/certname")
@@ -107,7 +107,7 @@ def test_get_server_cert():
 def test_upload_server_cert():
     conn = boto.connect_iam()
 
-    conn.upload_server_cert("certname", "certbody", "privatekey")
+    conn.upload_server_certificate("certname", "certbody", "privatekey")
     cert = conn.get_server_certificate("certname")
     cert.server_certificate_name.should.equal("certname")
     cert.arn.should.equal("arn:aws:iam::123456789012:server-certificate/certname")
@@ -117,7 +117,7 @@ def test_upload_server_cert():
 def test_delete_server_cert():
     conn = boto.connect_iam()
 
-    conn.upload_server_cert("certname", "certbody", "privatekey")
+    conn.upload_server_certificate("certname", "certbody", "privatekey")
     conn.get_server_certificate("certname")
     conn.delete_server_cert("certname")
     with assert_raises(BotoServerError):
@@ -2325,3 +2325,123 @@ def test_delete_account_password_policy_errors():
     client.delete_account_password_policy.when.called_with().should.throw(
         ClientError, "The account policy with name PasswordPolicy cannot be found."
     )
+
+
+@mock_iam
+def test_get_account_summary():
+    client = boto3.client("iam", region_name="us-east-1")
+    iam = boto3.resource("iam", region_name="us-east-1")
+
+    account_summary = iam.AccountSummary()
+
+    account_summary.summary_map.should.equal(
+        {
+            "GroupPolicySizeQuota": 5120,
+            "InstanceProfilesQuota": 1000,
+            "Policies": 0,
+            "GroupsPerUserQuota": 10,
+            "InstanceProfiles": 0,
+            "AttachedPoliciesPerUserQuota": 10,
+            "Users": 0,
+            "PoliciesQuota": 1500,
+            "Providers": 0,
+            "AccountMFAEnabled": 0,
+            "AccessKeysPerUserQuota": 2,
+            "AssumeRolePolicySizeQuota": 2048,
+            "PolicyVersionsInUseQuota": 10000,
+            "GlobalEndpointTokenVersion": 1,
+            "VersionsPerPolicyQuota": 5,
+            "AttachedPoliciesPerGroupQuota": 10,
+            "PolicySizeQuota": 6144,
+            "Groups": 0,
+            "AccountSigningCertificatesPresent": 0,
+            "UsersQuota": 5000,
+            "ServerCertificatesQuota": 20,
+            "MFADevices": 0,
+            "UserPolicySizeQuota": 2048,
+            "PolicyVersionsInUse": 0,
+            "ServerCertificates": 0,
+            "Roles": 0,
+            "RolesQuota": 1000,
+            "SigningCertificatesPerUserQuota": 2,
+            "MFADevicesInUse": 0,
+            "RolePolicySizeQuota": 10240,
+            "AttachedPoliciesPerRoleQuota": 10,
+            "AccountAccessKeysPresent": 0,
+            "GroupsQuota": 300,
+        }
+    )
+
+    client.create_group(GroupName="test-group")
+    client.attach_group_policy(
+        GroupName="test-group", PolicyArn="arn:aws:iam::aws:policy/AdministratorAccess"
+    )
+    client.create_instance_profile(InstanceProfileName="test-profile")
+    client.create_open_id_connect_provider(
+        Url="https://example.com", ThumbprintList=[],
+    )
+    response_policy = client.create_policy(
+        PolicyName="test-policy", PolicyDocument=MOCK_POLICY
+    )
+    client.create_role(RoleName="test-role", AssumeRolePolicyDocument="test policy")
+    client.attach_role_policy(
+        RoleName="test-role", PolicyArn=response_policy["Policy"]["Arn"]
+    )
+    client.create_saml_provider(
+        Name="TestSAMLProvider", SAMLMetadataDocument="a" * 1024
+    )
+    client.create_user(UserName="test-user")
+    client.attach_user_policy(
+        UserName="test-user", PolicyArn=response_policy["Policy"]["Arn"]
+    )
+    client.enable_mfa_device(
+        UserName="test-user",
+        SerialNumber="123456789",
+        AuthenticationCode1="234567",
+        AuthenticationCode2="987654",
+    )
+    client.create_virtual_mfa_device(VirtualMFADeviceName="test-device")
+    client.upload_server_certificate(
+        ServerCertificateName="test-cert",
+        CertificateBody="cert-body",
+        PrivateKey="private-key",
+    )
+    account_summary.load()
+
+    account_summary.summary_map.should.equal(
+        {
+            "GroupPolicySizeQuota": 5120,
+            "InstanceProfilesQuota": 1000,
+            "Policies": 1,
+            "GroupsPerUserQuota": 10,
+            "InstanceProfiles": 1,
+            "AttachedPoliciesPerUserQuota": 10,
+            "Users": 1,
+            "PoliciesQuota": 1500,
+            "Providers": 2,
+            "AccountMFAEnabled": 0,
+            "AccessKeysPerUserQuota": 2,
+            "AssumeRolePolicySizeQuota": 2048,
+            "PolicyVersionsInUseQuota": 10000,
+            "GlobalEndpointTokenVersion": 1,
+            "VersionsPerPolicyQuota": 5,
+            "AttachedPoliciesPerGroupQuota": 10,
+            "PolicySizeQuota": 6144,
+            "Groups": 1,
+            "AccountSigningCertificatesPresent": 0,
+            "UsersQuota": 5000,
+            "ServerCertificatesQuota": 20,
+            "MFADevices": 1,
+            "UserPolicySizeQuota": 2048,
+            "PolicyVersionsInUse": 3,
+            "ServerCertificates": 1,
+            "Roles": 1,
+            "RolesQuota": 1000,
+            "SigningCertificatesPerUserQuota": 2,
+            "MFADevicesInUse": 1,
+            "RolePolicySizeQuota": 10240,
+            "AttachedPoliciesPerRoleQuota": 10,
+            "AccountAccessKeysPresent": 0,
+            "GroupsQuota": 300,
+        }
+    )