57 lines
2.2 KiB
PowerShell
57 lines
2.2 KiB
PowerShell
|
. $PSScriptRoot\..\..\Load-PesterModules.ps1
|
||
|
|
$here = Split-Path -Parent $MyInvocation.MyCommand.Path
|
||
|
|
$sut = (Split-Path -Leaf $MyInvocation.MyCommand.Path) -replace '\.tests\.', '.'
|
||
|
|
$global:functionPath = Join-Path -Path $here -ChildPath $sut
|
||
|
|
|
||
|
|
InModuleScope -ModuleName Alkami.DevOps.SystemEngineering -ScriptBlock {
|
||
|
|
Write-Host "InModuleScope - Overriding SUT: $global:functionPath"
|
||
|
|
Import-Module $global:functionPath -Force
|
||
|
|
|
||
|
|
Describe "Get-ServerlessServiceAccountIamPolicyString" {
|
||
|
|
|
||
|
|
Context "Parameter Validation" {
|
||
|
|
|
||
|
|
It "Throws if SecretArns is Null" {
|
||
|
|
{ Get-ServerlessServiceAccountIamPolicyString -SecretArns $null } | Should -Throw
|
||
|
|
}
|
||
|
|
|
||
|
|
It "Throws if SecretArns is Empty" {
|
||
|
|
{ Get-ServerlessServiceAccountIamPolicyString -SecretArns @() } | Should -Throw
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
Context "Logic" {
|
||
|
|
|
||
|
|
It "Returns a String" {
|
||
|
|
|
||
|
|
(Get-Command Get-ServerlessServiceAccountIamPolicyString).OutputType.Type.ToString() | Should -BeExactly "System.String"
|
||
|
|
}
|
||
|
|
|
||
|
|
It "Returns a String With a Valid JSON Conversion" {
|
||
|
|
|
||
|
|
{ ConvertFrom-Json (Get-ServerlessServiceAccountIamPolicyString -SecretArns @('test')) } | Should -Not -Throw
|
||
|
|
}
|
||
|
|
|
||
|
|
It "Allows DescribeSecret Action" {
|
||
|
|
|
||
|
|
$result = ConvertFrom-Json (Get-ServerlessServiceAccountIamPolicyString -SecretArns @('test'))
|
||
|
|
$result.Statement[0].Action | Should -Contain 'secretsmanager:DescribeSecret'
|
||
|
|
}
|
||
|
|
|
||
|
|
It "Allows GetSecretValue Action" {
|
||
|
|
|
||
|
|
$result = ConvertFrom-Json (Get-ServerlessServiceAccountIamPolicyString -SecretArns @('test'))
|
||
|
|
$result.Statement[0].Action | Should -Contain 'secretsmanager:GetSecretValue'
|
||
|
|
}
|
||
|
|
|
||
|
|
It "Grants Access To Specified Resource(s)" {
|
||
|
|
|
||
|
|
$result = ConvertFrom-Json (Get-ServerlessServiceAccountIamPolicyString -SecretArns @('test1', 'test2'))
|
||
|
|
$result.Statement[0].Resource | Should -HaveCount 2
|
||
|
|
$result.Statement[0].Resource | Should -Contain 'test1'
|
||
|
|
$result.Statement[0].Resource | Should -Contain 'test2'
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|