feat: multiple providers for redshift federated iam role (#7)

* feat: multiple providers for redshift federated iam role

* fix: generic test name

Author: raykrishardi

redshift.cfndsl.rb

@@ -74,15 +74,15 @@
 
   redshift_federation_iam_role = external_parameters.fetch(:redshift_federation_iam_role, {})
   if !redshift_federation_iam_role.empty? && redshift_federation_iam_role["enable"]
-    samlProviderName = redshift_federation_iam_role["assume_role_policy"]["principal"]["providerName"]
+    samlProviders = redshift_federation_iam_role["assume_role_policy"]["principal"]["providers"]
     samlAud = redshift_federation_iam_role["assume_role_policy"]["condition"]["samlAud"]
     assumeRolePolicy = {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Effect": "Allow",
               "Principal": {
-                  "Federated": FnSub("arn:aws:iam::${AWS::AccountId}:saml-provider/#{samlProviderName}")
+                  "Federated": samlProviders
               },
               "Action": [
                   "sts:AssumeRoleWithSAML",

spec/redshift_federation_iam_role_spec.rb

@@ -79,8 +79,12 @@
           expect(resource["Type"]).to eq("AWS::IAM::Role")
       end
 
+      it "to have property RoleName" do
+          expect(resource["Properties"]["RoleName"]).to eq("redshift-federation-role")
+      end
+      
       it "to have property AssumeRolePolicyDocument" do
-          expect(resource["Properties"]["AssumeRolePolicyDocument"]).to eq({"Version"=>"2012-10-17", "Statement"=>[{"Effect"=>"Allow", "Principal"=>{"Federated"=>{"Fn::Sub"=>"arn:aws:iam::${AWS::AccountId}:saml-provider/redshift-federation-saml-provider"}}, "Action"=>["sts:AssumeRoleWithSAML", "sts:TagSession"], "Condition"=>{"StringEquals"=>{"SAML:aud"=>"http://localhost:7890/redshift/"}}}]})
+          expect(resource["Properties"]["AssumeRolePolicyDocument"]).to eq({"Version"=>"2012-10-17", "Statement"=>[{"Effect"=>"Allow", "Principal"=>{"Federated"=>[{"Fn::Sub"=>"arn:aws:iam::${AWS::AccountId}:saml-provider/${EnvironmentName}_example_redshift-federation-saml-provider"}, {"Fn::Sub"=>"arn:aws:iam::${AWS::AccountId}:saml-provider/${EnvironmentName}_hello_redshift-federation-saml-provider"}]}, "Action"=>["sts:AssumeRoleWithSAML", "sts:TagSession"], "Condition"=>{"StringEquals"=>{"SAML:aud"=>"http://localhost:7890/redshift/"}}}]})
       end
 
       it "to have property Policies" do

tests/redshift_federation_iam_role.test.yaml

@@ -34,6 +34,8 @@ redshift_federation_iam_role:
   enable: true
   assume_role_policy:
     principal:
-      providerName: redshift-federation-saml-provider
+      providers:
+      - Fn::Sub: 'arn:aws:iam::${AWS::AccountId}:saml-provider/${EnvironmentName}_example_redshift-federation-saml-provider'
+      - Fn::Sub: 'arn:aws:iam::${AWS::AccountId}:saml-provider/${EnvironmentName}_hello_redshift-federation-saml-provider'
     condition:
       samlAud: "http://localhost:7890/redshift/"