99 lines
2.7 KiB
Python
99 lines
2.7 KiB
Python
import sure # noqa # pylint: disable=unused-import
|
|
|
|
import moto.server as server
|
|
from moto import mock_wafv2
|
|
from .test_helper_functions import CREATE_WEB_ACL_BODY, LIST_WEB_ACL_BODY
|
|
from moto.core import DEFAULT_ACCOUNT_ID as ACCOUNT_ID
|
|
|
|
CREATE_WEB_ACL_HEADERS = {
|
|
"X-Amz-Target": "AWSWAF_20190729.CreateWebACL",
|
|
"Content-Type": "application/json",
|
|
}
|
|
|
|
|
|
LIST_WEB_ACL_HEADERS = {
|
|
"X-Amz-Target": "AWSWAF_20190729.ListWebACLs",
|
|
"Content-Type": "application/json",
|
|
}
|
|
|
|
|
|
@mock_wafv2
|
|
def test_create_web_acl():
|
|
backend = server.create_backend_app("wafv2")
|
|
test_client = backend.test_client()
|
|
|
|
res = test_client.post(
|
|
"/",
|
|
headers=CREATE_WEB_ACL_HEADERS,
|
|
json=CREATE_WEB_ACL_BODY("John", "REGIONAL"),
|
|
)
|
|
assert res.status_code == 200
|
|
|
|
web_acl = res.json["Summary"]
|
|
assert web_acl.get("Name") == "John"
|
|
assert web_acl.get("ARN").startswith(
|
|
f"arn:aws:wafv2:us-east-1:{ACCOUNT_ID}:regional/webacl/John/"
|
|
)
|
|
|
|
# Duplicate name - should raise error
|
|
res = test_client.post(
|
|
"/",
|
|
headers=CREATE_WEB_ACL_HEADERS,
|
|
json=CREATE_WEB_ACL_BODY("John", "REGIONAL"),
|
|
)
|
|
assert res.status_code == 400
|
|
assert (
|
|
b"AWS WAF could not perform the operation because some resource in your request is a duplicate of an existing one."
|
|
in res.data
|
|
)
|
|
assert b"WafV2DuplicateItem" in res.data
|
|
|
|
res = test_client.post(
|
|
"/",
|
|
headers=CREATE_WEB_ACL_HEADERS,
|
|
json=CREATE_WEB_ACL_BODY("Carl", "CLOUDFRONT"),
|
|
)
|
|
web_acl = res.json["Summary"]
|
|
assert web_acl.get("ARN").startswith(
|
|
f"arn:aws:wafv2:global:{ACCOUNT_ID}:global/webacl/Carl/"
|
|
)
|
|
|
|
|
|
@mock_wafv2
|
|
def test_list_web_ac_ls():
|
|
backend = server.create_backend_app("wafv2")
|
|
test_client = backend.test_client()
|
|
|
|
test_client.post(
|
|
"/",
|
|
headers=CREATE_WEB_ACL_HEADERS,
|
|
json=CREATE_WEB_ACL_BODY("John", "REGIONAL"),
|
|
)
|
|
test_client.post(
|
|
"/",
|
|
headers=CREATE_WEB_ACL_HEADERS,
|
|
json=CREATE_WEB_ACL_BODY("JohnSon", "REGIONAL"),
|
|
)
|
|
test_client.post(
|
|
"/",
|
|
headers=CREATE_WEB_ACL_HEADERS,
|
|
json=CREATE_WEB_ACL_BODY("Sarah", "CLOUDFRONT"),
|
|
)
|
|
res = test_client.post(
|
|
"/", headers=LIST_WEB_ACL_HEADERS, json=LIST_WEB_ACL_BODY("REGIONAL")
|
|
)
|
|
assert res.status_code == 200
|
|
|
|
web_acls = res.json["WebACLs"]
|
|
assert len(web_acls) == 2
|
|
assert web_acls[0]["Name"] == "John"
|
|
assert web_acls[1]["Name"] == "JohnSon"
|
|
|
|
res = test_client.post(
|
|
"/", headers=LIST_WEB_ACL_HEADERS, json=LIST_WEB_ACL_BODY("CLOUDFRONT")
|
|
)
|
|
assert res.status_code == 200
|
|
web_acls = res.json["WebACLs"]
|
|
assert len(web_acls) == 1
|
|
assert web_acls[0]["Name"] == "Sarah"
|