Commit tests

Author: aug24

src/constructs/iam/policies/developer-policy.test.ts

@@ -6,13 +6,17 @@ describe("GuDeveloperPolicy", () => {
   test("if a single action is provided, the resulting Developer Policy resource's statement will have a single item", () => {
     const stack = simpleGuStackForTesting();
     new GuDeveloperPolicy(stack, "AllowS3GetObject", {
-      allow: {
-        actions: ["s3:GetObject"],
-        resources: ["*"],
-      },
+      allow: [
+        {
+          actions: ["s3:GetObject"],
+          resources: ["*"]
+        }
+      ],
+      permission: "test123"
     });
 
     Template.fromStack(stack).hasResourceProperties("AWS::IAM::ManagedPolicy", {
+      Path: "/developer-policy/test123/",
       PolicyDocument: {
         Version: "2012-10-17",
         Statement: [
@@ -25,4 +29,52 @@ describe("GuDeveloperPolicy", () => {
       },
     });
   });
+  test("if multiple actions are provided, the resulting Managed Policy resource's action will container all items", () => {
+    const stack = simpleGuStackForTesting();
+    new GuDeveloperPolicy(stack, "AllowS3GetObject", {
+      allow: [
+        {
+          actions: ["s3:GetObject"],
+          resources: ["arn:aws:s3:::mybucket/mypath"],
+        },
+        {
+          actions: ["s3:GetObject"],
+          resources: ["arn:aws:s3:::mybucket/myotherpath"],
+        },
+      ],
+      deny: [
+        {
+          actions: ["s3:GetObject"],
+          resources: ["arn:aws:s3:::mybucket/mypath/butnotthispath"],
+        },
+      ],
+      permission: "test321",
+      description: "testtesttest",
+    });
+
+    Template.fromStack(stack).hasResourceProperties("AWS::IAM::ManagedPolicy", {
+      Description: "testtesttest",
+      Path: "/developer-policy/test321/",
+      PolicyDocument: {
+        Version: "2012-10-17",
+        Statement: [
+          {
+            Action: "s3:GetObject",
+            Effect: "Allow",
+            Resource: "arn:aws:s3:::mybucket/mypath",
+          },
+          {
+            Action: "s3:GetObject",
+            Effect: "Allow",
+            Resource: "arn:aws:s3:::mybucket/myotherpath",
+          },
+          {
+            Action: "s3:GetObject",
+            Effect: "Deny",
+            Resource: "arn:aws:s3:::mybucket/mypath/butnotthispath",
+          },
+        ],
+      },
+    });
+  });
 });