archive-gh-me/serverless
1
0
Fork 0
mirror of https://github.com/serverless/serverless.git synced 2026-01-18 14:58:43 +00:00
Code Issues Projects Releases Wiki Activity

added test to verify that managed policies are merged along with vpc config policies

Browse Source
This commit is contained in:
CHRIS BARBOUR 2018-04-05 15:22:54 -04:00
parent f1d3aecb63
commit cc4dfca85f
1 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
lib/plugins/aws/package/lib/mergeIamTemplates.test.js
View File

@ -171,6 +171,36 @@ describe('#mergeIamTemplates()', () => {
});
});
it('should merge managed policy arns when vpc config supplied', () => {
awsPackage.serverless.service.provider.vpc = {
securityGroupIds: ['xxx'],
subnetIds: ['xxx'],
};
const iamManagedPolicies = [
'some:aws:arn:xxx:*:*',
'someOther:aws:arn:xxx:*:*',
{ 'Fn::Join': [':', ['arn:aws:iam:', { Ref: 'AWSAccountId' }, 'some/path']] },
];
awsPackage.serverless.service.provider.iamManagedPolicies = iamManagedPolicies
const expectedManagedPolicyArns = [...iamManagedPolicies,{
'Fn::Join': ['',
[
'arn:',
{ Ref: 'AWS::Partition' },
':iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole',
],
],
} ]
return awsPackage.mergeIamTemplates()
.then(() => {
expect(awsPackage.serverless.service.provider.compiledCloudFormationTemplate
.Resources[awsPackage.provider.naming.getRoleLogicalId()]
.Properties
.ManagedPolicyArns
).to.deep.equal(expectedManagedPolicyArns);
});
});
it('should throw error if custom IAM policy statements is not an array', () => {
awsPackage.serverless.service.provider.iamRoleStatements = {
policy: 'some_value',