72 lines
2.1 KiB
Python
72 lines
2.1 KiB
Python
import boto3
|
|
|
|
from moto import mock_kinesis
|
|
from .test_kinesis import get_stream_arn
|
|
|
|
|
|
@mock_kinesis
|
|
def test_enable_encryption():
|
|
client = boto3.client("kinesis", region_name="us-west-2")
|
|
client.create_stream(StreamName="my-stream", ShardCount=2)
|
|
|
|
resp = client.describe_stream(StreamName="my-stream")
|
|
desc = resp["StreamDescription"]
|
|
assert desc["EncryptionType"] == "NONE"
|
|
assert "KeyId" not in desc
|
|
|
|
client.start_stream_encryption(
|
|
StreamName="my-stream", EncryptionType="KMS", KeyId="n/a"
|
|
)
|
|
|
|
resp = client.describe_stream(StreamName="my-stream")
|
|
desc = resp["StreamDescription"]
|
|
assert desc["EncryptionType"] == "KMS"
|
|
assert desc["KeyId"] == "n/a"
|
|
|
|
|
|
@mock_kinesis
|
|
def test_disable_encryption():
|
|
client = boto3.client("kinesis", region_name="us-west-2")
|
|
client.create_stream(StreamName="my-stream", ShardCount=2)
|
|
|
|
resp = client.describe_stream(StreamName="my-stream")
|
|
desc = resp["StreamDescription"]
|
|
assert desc["EncryptionType"] == "NONE"
|
|
|
|
client.start_stream_encryption(
|
|
StreamName="my-stream", EncryptionType="KMS", KeyId="n/a"
|
|
)
|
|
|
|
client.stop_stream_encryption(
|
|
StreamName="my-stream", EncryptionType="KMS", KeyId="n/a"
|
|
)
|
|
|
|
resp = client.describe_stream(StreamName="my-stream")
|
|
desc = resp["StreamDescription"]
|
|
assert desc["EncryptionType"] == "NONE"
|
|
assert "KeyId" not in desc
|
|
|
|
|
|
@mock_kinesis
|
|
def test_disable_encryption__using_arns():
|
|
client = boto3.client("kinesis", region_name="us-west-2")
|
|
client.create_stream(StreamName="my-stream", ShardCount=2)
|
|
stream_arn = get_stream_arn(client, "my-stream")
|
|
|
|
resp = client.describe_stream(StreamName="my-stream")
|
|
desc = resp["StreamDescription"]
|
|
assert desc["EncryptionType"] == "NONE"
|
|
|
|
client.start_stream_encryption(
|
|
StreamARN=stream_arn, EncryptionType="KMS", KeyId="n/a"
|
|
)
|
|
|
|
client.stop_stream_encryption(
|
|
StreamARN=stream_arn, EncryptionType="KMS", KeyId="n/a"
|
|
)
|
|
|
|
resp = client.describe_stream(StreamName="my-stream")
|
|
desc = resp["StreamDescription"]
|
|
assert desc["EncryptionType"] == "NONE"
|
|
assert "KeyId" not in desc
|