49d92861c0
* IAM User Cloudformation Enhancements: update, delete, getatt. * AWS::IAM::Policy Support * Added unit tests for AWS:IAM:Policy for roles and groups. Fixed bug related to groups. * AWS:IAM:AccessKey CloudFormation support. * Refactor of CloudFormation parsing.py methods to simplify and standardize how they call to the models. Adjusted some models accordingly. * Further model CloudFormation support changes to align with revised CloudFormation logic. Mostly avoidance of getting resoure name from properties. * Support for Kinesis Stream RetentionPeriodHours param. * Kinesis Stream Cloudformation Tag Support. * Added omitted 'region' param to boto3.client() calls in new tests. Co-authored-by: Joseph Weitekamp <jweite@amazon.com>
146 lines
5.2 KiB
Python
146 lines
5.2 KiB
Python
import json
|
|
import boto3
|
|
|
|
import sure # noqa
|
|
|
|
from moto import mock_s3, mock_cloudformation
|
|
|
|
|
|
@mock_s3
|
|
@mock_cloudformation
|
|
def test_s3_bucket_cloudformation_basic():
|
|
s3 = boto3.client("s3", region_name="us-east-1")
|
|
cf = boto3.client("cloudformation", region_name="us-east-1")
|
|
|
|
template = {
|
|
"AWSTemplateFormatVersion": "2010-09-09",
|
|
"Resources": {"testInstance": {"Type": "AWS::S3::Bucket", "Properties": {},}},
|
|
"Outputs": {"Bucket": {"Value": {"Ref": "testInstance"}}},
|
|
}
|
|
template_json = json.dumps(template)
|
|
stack_id = cf.create_stack(StackName="test_stack", TemplateBody=template_json)[
|
|
"StackId"
|
|
]
|
|
stack_description = cf.describe_stacks(StackName="test_stack")["Stacks"][0]
|
|
|
|
s3.head_bucket(Bucket=stack_description["Outputs"][0]["OutputValue"])
|
|
|
|
|
|
@mock_s3
|
|
@mock_cloudformation
|
|
def test_s3_bucket_cloudformation_with_properties():
|
|
s3 = boto3.client("s3", region_name="us-east-1")
|
|
cf = boto3.client("cloudformation", region_name="us-east-1")
|
|
|
|
bucket_name = "MyBucket"
|
|
template = {
|
|
"AWSTemplateFormatVersion": "2010-09-09",
|
|
"Resources": {
|
|
"testInstance": {
|
|
"Type": "AWS::S3::Bucket",
|
|
"Properties": {
|
|
"BucketName": bucket_name,
|
|
"BucketEncryption": {
|
|
"ServerSideEncryptionConfiguration": [
|
|
{
|
|
"ServerSideEncryptionByDefault": {
|
|
"SSEAlgorithm": "AES256"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
},
|
|
}
|
|
},
|
|
"Outputs": {"Bucket": {"Value": {"Ref": "testInstance"}}},
|
|
}
|
|
template_json = json.dumps(template)
|
|
stack_id = cf.create_stack(StackName="test_stack", TemplateBody=template_json)[
|
|
"StackId"
|
|
]
|
|
stack_description = cf.describe_stacks(StackName="test_stack")["Stacks"][0]
|
|
s3.head_bucket(Bucket=bucket_name)
|
|
|
|
encryption = s3.get_bucket_encryption(Bucket=bucket_name)
|
|
encryption["ServerSideEncryptionConfiguration"]["Rules"][0][
|
|
"ApplyServerSideEncryptionByDefault"
|
|
]["SSEAlgorithm"].should.equal("AES256")
|
|
|
|
|
|
@mock_s3
|
|
@mock_cloudformation
|
|
def test_s3_bucket_cloudformation_update_no_interruption():
|
|
s3 = boto3.client("s3", region_name="us-east-1")
|
|
cf = boto3.client("cloudformation", region_name="us-east-1")
|
|
|
|
template = {
|
|
"AWSTemplateFormatVersion": "2010-09-09",
|
|
"Resources": {"testInstance": {"Type": "AWS::S3::Bucket"}},
|
|
"Outputs": {"Bucket": {"Value": {"Ref": "testInstance"}}},
|
|
}
|
|
template_json = json.dumps(template)
|
|
cf.create_stack(StackName="test_stack", TemplateBody=template_json)
|
|
stack_description = cf.describe_stacks(StackName="test_stack")["Stacks"][0]
|
|
s3.head_bucket(Bucket=stack_description["Outputs"][0]["OutputValue"])
|
|
|
|
template = {
|
|
"AWSTemplateFormatVersion": "2010-09-09",
|
|
"Resources": {
|
|
"testInstance": {
|
|
"Type": "AWS::S3::Bucket",
|
|
"Properties": {
|
|
"BucketEncryption": {
|
|
"ServerSideEncryptionConfiguration": [
|
|
{
|
|
"ServerSideEncryptionByDefault": {
|
|
"SSEAlgorithm": "AES256"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
}
|
|
},
|
|
"Outputs": {"Bucket": {"Value": {"Ref": "testInstance"}}},
|
|
}
|
|
template_json = json.dumps(template)
|
|
cf.update_stack(StackName="test_stack", TemplateBody=template_json)
|
|
encryption = s3.get_bucket_encryption(
|
|
Bucket=stack_description["Outputs"][0]["OutputValue"]
|
|
)
|
|
encryption["ServerSideEncryptionConfiguration"]["Rules"][0][
|
|
"ApplyServerSideEncryptionByDefault"
|
|
]["SSEAlgorithm"].should.equal("AES256")
|
|
|
|
|
|
@mock_s3
|
|
@mock_cloudformation
|
|
def test_s3_bucket_cloudformation_update_replacement():
|
|
s3 = boto3.client("s3", region_name="us-east-1")
|
|
cf = boto3.client("cloudformation", region_name="us-east-1")
|
|
|
|
template = {
|
|
"AWSTemplateFormatVersion": "2010-09-09",
|
|
"Resources": {"testInstance": {"Type": "AWS::S3::Bucket"}},
|
|
"Outputs": {"Bucket": {"Value": {"Ref": "testInstance"}}},
|
|
}
|
|
template_json = json.dumps(template)
|
|
cf.create_stack(StackName="test_stack", TemplateBody=template_json)
|
|
stack_description = cf.describe_stacks(StackName="test_stack")["Stacks"][0]
|
|
s3.head_bucket(Bucket=stack_description["Outputs"][0]["OutputValue"])
|
|
|
|
template = {
|
|
"AWSTemplateFormatVersion": "2010-09-09",
|
|
"Resources": {
|
|
"testInstance": {
|
|
"Type": "AWS::S3::Bucket",
|
|
"Properties": {"BucketName": "MyNewBucketName"},
|
|
}
|
|
},
|
|
"Outputs": {"Bucket": {"Value": {"Ref": "testInstance"}}},
|
|
}
|
|
template_json = json.dumps(template)
|
|
cf.update_stack(StackName="test_stack", TemplateBody=template_json)
|
|
stack_description = cf.describe_stacks(StackName="test_stack")["Stacks"][0]
|
|
s3.head_bucket(Bucket=stack_description["Outputs"][0]["OutputValue"])
|