Class: Jets::Cfn::Iam::Policy

Inherits:
Object
  • Object
show all
Defined in:
lib/jets/cfn/iam/policy.rb

Overview

Examples: config.codebuild.iam.policies = [“s3”, “ec2”] config.codebuild.iam.policies = [

"s3",
{
  PolicyName: "hello",
  PolicyDocument: {
    Version: "2012-10-17",
    Statement: [{Action: ["s3:*"], Effect: "Allow", Resource: "*"}]
  }
}

]

Instance Method Summary collapse

Constructor Details

#initialize(policy_name, definitions) ⇒ Policy

Returns a new instance of Policy.



15
16
17
 
# File 'lib/jets/cfn/iam/policy.rb', line 15

def initialize(policy_name, definitions)
  @policy_name, @definitions = policy_name, definitions.compact.flatten.uniq
end

Instance Method Details

#all_actions_colon_star(action) ⇒ Object 



65
66
67
 
# File 'lib/jets/cfn/iam/policy.rb', line 65

def all_actions_colon_star(action)
  action.include?(":") ? action : "#{action}:*"
end

#standardize ⇒ Object

Returns a standardize policy document. Example:

{
  PolicyName: "hello",
  PolicyDocument: {
    Version: "2012-10-17",
    Statement: [{Action: ["s3:*"], Effect: "Allow", Resource: "*"}]
  }
}

A definition is a String or a Hash. It’s very close to a Statement

String: "s3"
Hash: {Action: ["s3:*"], Effect: "Allow", Resource: "*"} # Action item



31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
 
# File 'lib/jets/cfn/iam/policy.rb', line 31

def standardize
  return if @definitions.nil? || @definitions.empty?

  if @definitions.is_a?(Hash)
    standardize_hash(@definitions) # final policy
  else # Array of definitions
    statement = statement_from_array(@definitions) # statement is Array
    # final policy
    # Note since we always extract the statement we ignore the PolicyDocument Version
    # and always use 2012-10-17
    {
      PolicyName: @policy_name,
      PolicyDocument: {
        Version: "2012-10-17",
        Statement: statement
      }
    }
  end
end

#standardize_hash(hash) ⇒ Object

Example return value:

- Effect: Allow
  Action: '*'
  Resource: '*'



96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
 
# File 'lib/jets/cfn/iam/policy.rb', line 96

def standardize_hash(hash)
  if hash.key?(:Action)
    {
      PolicyName: @policy_name,
      PolicyDocument: {
        Version: "2012-10-17",
        Statement: [hash]
      }
    }
  elsif hash.key?(:Statement)
    {
      PolicyName: @policy_name,
      PolicyDocument: hash
    }
  elsif hash.key?(:PolicyDocument)
    if hash.key?(:PolicyName)
      hash # full hash with both PolicyName and PolicyDocument
    else
      hash.merge(PolicyName: @policy_name) # almost full hash with PolicyDocument
    end
  else
    raise "Invalid hash format: #{hash.inspect}"
  end
end

#statement_from_all_strings(definitions) ⇒ Object 



69
70
71
72
73
74
 
# File 'lib/jets/cfn/iam/policy.rb', line 69

def statement_from_all_strings(definitions)
  action = definitions.map do |definition|
    all_actions_colon_star(definition)
  end
  [Action: action, Effect: "Allow", Resource: "*"]
end

#statement_from_array(definitions) ⇒ Object 



51
52
53
54
55
56
57
58
59
60
61
62
63
 
# File 'lib/jets/cfn/iam/policy.rb', line 51

def statement_from_array(definitions)
  if definitions.all? { |definition| definition.is_a?(String) }
    statement_from_all_strings(definitions)
  else
    definitions.map do |definition|
      if definition.is_a?(String)
        statement_from_string(definition)
      else # assume hash
        statement_from_hash(definition) # possible Array or Hash
      end
    end.flatten # due to statement_from_hash
  end
end

#statement_from_hash(definition) ⇒ Object 



81
82
83
84
85
86
87
88
89
90
 
# File 'lib/jets/cfn/iam/policy.rb', line 81

def statement_from_hash(definition)
  if definition.key?(:Statement) # full PolicyDocument. Has Version and Statement
    # Will have an Array of Statements that needs to be flattened later
    definition[:Statement] # This is an Array
  elsif definition.key?(:Action)
    definition
  else
    definition.merge(Action: [all_actions_colon_star(definition[:Action])])
  end
end

#statement_from_string(definition) ⇒ Object 



76
77
78
79
 
# File 'lib/jets/cfn/iam/policy.rb', line 76

def statement_from_string(definition)
  action = [all_actions_colon_star(definition)]
  [Action: action, Effect: "Allow", Resource: "*"]
end