301 lines
9.8 KiB
Python
301 lines
9.8 KiB
Python
from uuid import uuid4
|
|
|
|
import boto3
|
|
import pytest
|
|
from botocore.exceptions import ClientError
|
|
|
|
from moto import mock_aws
|
|
from tests import EXAMPLE_AMI_ID
|
|
|
|
|
|
def quick_instance_creation():
|
|
conn_ec2 = boto3.resource("ec2", "us-east-1")
|
|
test_instance = conn_ec2.create_instances(
|
|
ImageId=EXAMPLE_AMI_ID, MinCount=1, MaxCount=1
|
|
)
|
|
# We only need instance id for this tests
|
|
return test_instance[0].id
|
|
|
|
|
|
def quick_instance_profile_creation(name):
|
|
conn_iam = boto3.resource("iam", "us-east-1")
|
|
test_instance_profile = conn_iam.create_instance_profile(
|
|
InstanceProfileName=name, Path="/"
|
|
)
|
|
return test_instance_profile.arn, test_instance_profile.name
|
|
|
|
|
|
@mock_aws
|
|
def test_associate():
|
|
client = boto3.client("ec2", region_name="us-east-1")
|
|
instance_id = quick_instance_creation()
|
|
instance_profile_arn, instance_profile_name = quick_instance_profile_creation(
|
|
str(uuid4())
|
|
)
|
|
|
|
association = client.associate_iam_instance_profile(
|
|
IamInstanceProfile={
|
|
"Arn": instance_profile_arn,
|
|
"Name": instance_profile_name,
|
|
},
|
|
InstanceId=instance_id,
|
|
)
|
|
assert association["IamInstanceProfileAssociation"]["InstanceId"] == instance_id
|
|
assert (
|
|
association["IamInstanceProfileAssociation"]["IamInstanceProfile"]["Arn"]
|
|
== instance_profile_arn
|
|
)
|
|
assert association["IamInstanceProfileAssociation"]["State"] == "associating"
|
|
|
|
|
|
@mock_aws
|
|
def test_invalid_associate():
|
|
client = boto3.client("ec2", region_name="us-east-1")
|
|
instance_id = quick_instance_creation()
|
|
instance_profile_arn, instance_profile_name = quick_instance_profile_creation(
|
|
str(uuid4())
|
|
)
|
|
|
|
client.associate_iam_instance_profile(
|
|
IamInstanceProfile={
|
|
"Arn": instance_profile_arn,
|
|
"Name": instance_profile_name,
|
|
},
|
|
InstanceId=instance_id,
|
|
)
|
|
|
|
# Duplicate
|
|
with pytest.raises(ClientError) as ex:
|
|
client.associate_iam_instance_profile(
|
|
IamInstanceProfile={
|
|
"Arn": instance_profile_arn,
|
|
"Name": instance_profile_name,
|
|
},
|
|
InstanceId=instance_id,
|
|
)
|
|
assert ex.value.response["Error"]["Code"] == "IncorrectState"
|
|
assert (
|
|
"There is an existing association for" in ex.value.response["Error"]["Message"]
|
|
)
|
|
|
|
# Wrong instance profile
|
|
with pytest.raises(ClientError) as ex:
|
|
client.associate_iam_instance_profile(
|
|
IamInstanceProfile={"Arn": "fake", "Name": "fake"}, InstanceId=instance_id
|
|
)
|
|
assert ex.value.response["Error"]["Code"] == "NoSuchEntity"
|
|
assert "not found" in ex.value.response["Error"]["Message"]
|
|
|
|
# Wrong instance id
|
|
with pytest.raises(ClientError) as ex:
|
|
client.associate_iam_instance_profile(
|
|
IamInstanceProfile={
|
|
"Arn": instance_profile_arn,
|
|
"Name": instance_profile_name,
|
|
},
|
|
InstanceId="fake",
|
|
)
|
|
assert ex.value.response["Error"]["Code"] == "InvalidInstanceID.NotFound"
|
|
assert "does not exist" in ex.value.response["Error"]["Message"]
|
|
|
|
|
|
@mock_aws
|
|
def test_describe():
|
|
client = boto3.client("ec2", region_name="us-east-1")
|
|
|
|
instance_id1 = quick_instance_creation()
|
|
instance_profile_arn1, instance_profile_name1 = quick_instance_profile_creation(
|
|
str(uuid4())
|
|
)
|
|
client.associate_iam_instance_profile(
|
|
IamInstanceProfile={
|
|
"Arn": instance_profile_arn1,
|
|
"Name": instance_profile_name1,
|
|
},
|
|
InstanceId=instance_id1,
|
|
)
|
|
associations = client.describe_iam_instance_profile_associations()
|
|
associations = associations["IamInstanceProfileAssociations"]
|
|
assert instance_profile_arn1 in [
|
|
a["IamInstanceProfile"]["Arn"] for a in associations
|
|
]
|
|
my_assoc = [
|
|
a
|
|
for a in associations
|
|
if a["IamInstanceProfile"]["Arn"] == instance_profile_arn1
|
|
][0]
|
|
assert my_assoc["InstanceId"] == instance_id1
|
|
assert my_assoc["State"] == "associated"
|
|
|
|
instance_id2 = quick_instance_creation()
|
|
instance_profile_arn2, instance_profile_name2 = quick_instance_profile_creation(
|
|
str(uuid4())
|
|
)
|
|
client.associate_iam_instance_profile(
|
|
IamInstanceProfile={
|
|
"Arn": instance_profile_arn2,
|
|
"Name": instance_profile_name2,
|
|
},
|
|
InstanceId=instance_id2,
|
|
)
|
|
|
|
associations = client.describe_iam_instance_profile_associations()
|
|
associations = associations["IamInstanceProfileAssociations"]
|
|
assert instance_profile_arn1 in [
|
|
a["IamInstanceProfile"]["Arn"] for a in associations
|
|
]
|
|
assert instance_profile_arn2 in [
|
|
a["IamInstanceProfile"]["Arn"] for a in associations
|
|
]
|
|
my_assoc = [
|
|
a
|
|
for a in associations
|
|
if a["IamInstanceProfile"]["Arn"] == instance_profile_arn1
|
|
][0]
|
|
|
|
associations = client.describe_iam_instance_profile_associations(
|
|
AssociationIds=[my_assoc["AssociationId"]]
|
|
)
|
|
assert len(associations["IamInstanceProfileAssociations"]) == 1
|
|
assert (
|
|
associations["IamInstanceProfileAssociations"][0]["IamInstanceProfile"]["Arn"]
|
|
== my_assoc["IamInstanceProfile"]["Arn"]
|
|
)
|
|
|
|
associations = client.describe_iam_instance_profile_associations(
|
|
Filters=[
|
|
{"Name": "instance-id", "Values": [my_assoc["InstanceId"]]},
|
|
{"Name": "state", "Values": ["associated"]},
|
|
]
|
|
)
|
|
assert len(associations["IamInstanceProfileAssociations"]) == 1
|
|
assert (
|
|
associations["IamInstanceProfileAssociations"][0]["IamInstanceProfile"]["Arn"]
|
|
== my_assoc["IamInstanceProfile"]["Arn"]
|
|
)
|
|
|
|
|
|
@mock_aws
|
|
def test_replace():
|
|
client = boto3.client("ec2", region_name="us-east-1")
|
|
instance_id1 = quick_instance_creation()
|
|
instance_profile_arn1, instance_profile_name1 = quick_instance_profile_creation(
|
|
str(uuid4())
|
|
)
|
|
instance_profile_arn2, instance_profile_name2 = quick_instance_profile_creation(
|
|
str(uuid4())
|
|
)
|
|
|
|
association = client.associate_iam_instance_profile(
|
|
IamInstanceProfile={
|
|
"Arn": instance_profile_arn1,
|
|
"Name": instance_profile_name1,
|
|
},
|
|
InstanceId=instance_id1,
|
|
)
|
|
|
|
association = client.replace_iam_instance_profile_association(
|
|
IamInstanceProfile={
|
|
"Arn": instance_profile_arn2,
|
|
"Name": instance_profile_name2,
|
|
},
|
|
AssociationId=association["IamInstanceProfileAssociation"]["AssociationId"],
|
|
)
|
|
|
|
assert (
|
|
association["IamInstanceProfileAssociation"]["IamInstanceProfile"]["Arn"]
|
|
== instance_profile_arn2
|
|
)
|
|
assert association["IamInstanceProfileAssociation"]["State"] == "associating"
|
|
|
|
|
|
@mock_aws
|
|
def test_invalid_replace():
|
|
client = boto3.client("ec2", region_name="us-east-1")
|
|
instance_id = quick_instance_creation()
|
|
instance_profile_arn, instance_profile_name = quick_instance_profile_creation(
|
|
str(uuid4())
|
|
)
|
|
instance_profile_arn2, instance_profile_name2 = quick_instance_profile_creation(
|
|
str(uuid4())
|
|
)
|
|
|
|
association = client.associate_iam_instance_profile(
|
|
IamInstanceProfile={
|
|
"Arn": instance_profile_arn,
|
|
"Name": instance_profile_name,
|
|
},
|
|
InstanceId=instance_id,
|
|
)
|
|
|
|
# Wrong id
|
|
with pytest.raises(ClientError) as ex:
|
|
client.replace_iam_instance_profile_association(
|
|
IamInstanceProfile={
|
|
"Arn": instance_profile_arn2,
|
|
"Name": instance_profile_name2,
|
|
},
|
|
AssociationId="fake",
|
|
)
|
|
assert ex.value.response["Error"]["Code"] == "InvalidAssociationID.NotFound"
|
|
assert "An invalid association-id of" in ex.value.response["Error"]["Message"]
|
|
|
|
# Wrong instance profile
|
|
with pytest.raises(ClientError) as ex:
|
|
client.replace_iam_instance_profile_association(
|
|
IamInstanceProfile={"Arn": "fake", "Name": "fake"},
|
|
AssociationId=association["IamInstanceProfileAssociation"]["AssociationId"],
|
|
)
|
|
assert ex.value.response["Error"]["Code"] == "NoSuchEntity"
|
|
assert "not found" in ex.value.response["Error"]["Message"]
|
|
|
|
|
|
@mock_aws
|
|
def test_disassociate():
|
|
client = boto3.client("ec2", region_name="us-east-1")
|
|
instance_id = quick_instance_creation()
|
|
instance_profile_arn, instance_profile_name = quick_instance_profile_creation(
|
|
str(uuid4())
|
|
)
|
|
|
|
association = client.associate_iam_instance_profile(
|
|
IamInstanceProfile={
|
|
"Arn": instance_profile_arn,
|
|
"Name": instance_profile_name,
|
|
},
|
|
InstanceId=instance_id,
|
|
)
|
|
|
|
associations = client.describe_iam_instance_profile_associations()
|
|
associations = associations["IamInstanceProfileAssociations"]
|
|
assert instance_profile_arn in [
|
|
a["IamInstanceProfile"]["Arn"] for a in associations
|
|
]
|
|
|
|
disassociation = client.disassociate_iam_instance_profile(
|
|
AssociationId=association["IamInstanceProfileAssociation"]["AssociationId"]
|
|
)
|
|
|
|
assert (
|
|
disassociation["IamInstanceProfileAssociation"]["IamInstanceProfile"]["Arn"]
|
|
== instance_profile_arn
|
|
)
|
|
assert disassociation["IamInstanceProfileAssociation"]["State"] == "disassociating"
|
|
|
|
associations = client.describe_iam_instance_profile_associations()
|
|
associations = associations["IamInstanceProfileAssociations"]
|
|
assert instance_profile_arn not in [
|
|
a["IamInstanceProfile"]["Arn"] for a in associations
|
|
]
|
|
|
|
|
|
@mock_aws
|
|
def test_invalid_disassociate():
|
|
client = boto3.client("ec2", region_name="us-east-1")
|
|
|
|
# Wrong id
|
|
with pytest.raises(ClientError) as ex:
|
|
client.disassociate_iam_instance_profile(AssociationId="fake")
|
|
assert ex.value.response["Error"]["Code"] == "InvalidAssociationID.NotFound"
|
|
assert "An invalid association-id of" in ex.value.response["Error"]["Message"]
|