39 lines
917 B
Go
39 lines
917 B
Go
|
package aws
|
||
|
|
|
||
|
|
import (
|
||
|
|
"fmt"
|
||
|
|
|
||
|
|
"github.com/hashicorp/terraform/helper/resource"
|
||
|
|
"github.com/hashicorp/terraform/terraform"
|
||
|
|
"github.com/jen20/awspolicyequivalence"
|
||
|
|
)
|
||
|
|
|
||
|
|
func testAccCheckAwsPolicyMatch(resource, attr, expectedPolicy string) resource.TestCheckFunc {
|
||
|
|
return func(s *terraform.State) error {
|
||
|
|
rs, ok := s.RootModule().Resources[resource]
|
||
|
|
if !ok {
|
||
|
|
return fmt.Errorf("Not found: %s", resource)
|
||
|
|
}
|
||
|
|
|
||
|
|
if rs.Primary.ID == "" {
|
||
|
|
return fmt.Errorf("No ID is set")
|
||
|
|
}
|
||
|
|
|
||
|
|
given, ok := rs.Primary.Attributes[attr]
|
||
|
|
if !ok {
|
||
|
|
return fmt.Errorf("Attribute %q not found for %q", attr, resource)
|
||
|
|
}
|
||
|
|
|
||
|
|
areEquivalent, err := awspolicy.PoliciesAreEquivalent(given, expectedPolicy)
|
||
|
|
if err != nil {
|
||
|
|
return fmt.Errorf("Comparing AWS Policies failed: %s", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
if !areEquivalent {
|
||
|
|
return fmt.Errorf("AWS policies differ.\nGiven: %s\nExpected: %s", given, expectedPolicy)
|
||
|
|
}
|
||
|
|
|
||
|
|
return nil
|
||
|
|
}
|
||
|
|
}
|