97ab7fd307
* Created test for get_policy with AWS managed policy. * Created failing test for get_policy_version with AWS managed policy. * Updated AWS managed policies. * Fixed failing tests. * Fixed trying to compare datetime with string in test case. * Fixed CreateDate of AWS managed policies overwritten by their version's CreateDate. * Fixed and improved tests for managed AWS policies. * Added test for AWS managed policy with v4 default version. * Fixed not correctly returning dates for AWS managed policies.
65 lines
2.0 KiB
Python
Executable File
65 lines
2.0 KiB
Python
Executable File
#!/usr/bin/env python
|
|
# This updates our local copies of AWS' managed policies
|
|
# Invoked via `make update_managed_policies`
|
|
#
|
|
# Credit goes to
|
|
# https://gist.github.com/gene1wood/55b358748be3c314f956
|
|
|
|
from botocore.exceptions import NoCredentialsError
|
|
from datetime import datetime
|
|
import boto3
|
|
import json
|
|
import sys
|
|
|
|
output_file = "./moto/iam/aws_managed_policies.py"
|
|
|
|
|
|
def json_serial(obj):
|
|
"""JSON serializer for objects not serializable by default json code"""
|
|
|
|
if isinstance(obj, datetime):
|
|
serial = obj.isoformat()
|
|
return serial
|
|
raise TypeError("Type not serializable")
|
|
|
|
|
|
client = boto3.client('iam')
|
|
|
|
policies = {}
|
|
|
|
paginator = client.get_paginator('list_policies')
|
|
try:
|
|
response_iterator = paginator.paginate(Scope='AWS')
|
|
for response in response_iterator:
|
|
for policy in response['Policies']:
|
|
policies[policy['PolicyName']] = policy
|
|
except NoCredentialsError:
|
|
print("USAGE:")
|
|
print("Put your AWS credentials into ~/.aws/credentials and run:")
|
|
print(__file__)
|
|
print("")
|
|
print("Or specify them on the command line:")
|
|
print("AWS_ACCESS_KEY_ID=your_personal_access_key AWS_SECRET_ACCESS_KEY=your_personal_secret {}".format(__file__))
|
|
print("")
|
|
sys.exit(1)
|
|
|
|
for policy_name in policies:
|
|
response = client.get_policy_version(
|
|
PolicyArn=policies[policy_name]['Arn'],
|
|
VersionId=policies[policy_name]['DefaultVersionId'])
|
|
for key in response['PolicyVersion']:
|
|
if key != "CreateDate": # the policy's CreateDate should not be overwritten by its version's CreateDate
|
|
policies[policy_name][key] = response['PolicyVersion'][key]
|
|
|
|
with open(output_file, 'w') as f:
|
|
triple_quote = '\"\"\"'
|
|
|
|
f.write("# Imported via `make aws_managed_policies`\n")
|
|
f.write('aws_managed_policies_data = {}\n'.format(triple_quote))
|
|
f.write(json.dumps(policies,
|
|
sort_keys=True,
|
|
indent=4,
|
|
separators=(',', ': '),
|
|
default=json_serial))
|
|
f.write('{}\n'.format(triple_quote))
|