Class: IAM::AssumeRolePolicyDocument

Inherits:
Object
  • Object
show all
Defined in:
lib/w-stdlib/aws.rb

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(doc) ⇒ AssumeRolePolicyDocument

Returns a new instance of AssumeRolePolicyDocument.



37
38
39
40
 
# File 'lib/w-stdlib/aws.rb', line 37

def initialize(doc)
  @doc = doc
  @statements = doc['Statement'].map { AssumeRoleStatement.new _1 }
end

Class Method Details

.from_role(role) ⇒ Object

initializes from a hash of params. it supports docs as url encoded json strings, like the aws api returns or docs that are nested hashes and arrays



45
46
47
48
49
50
51
52
53
 
# File 'lib/w-stdlib/aws.rb', line 45

def self.from_role(role)
  doc = role[:assume_role_policy_document]
  doc = role["AssumeRolePolicyDocument"] unless doc
  raise 'invalid role' unless doc

  doc = doc.url_decode.from_json if doc.is_a? String

  self.new doc
end

Instance Method Details

#can_assume?(arn) ⇒ Boolean

Returns:

  • (Boolean) 


55
56
57
58
59
 
# File 'lib/w-stdlib/aws.rb', line 55

def can_assume?(arn)
  return false if explicitly_denied? arn
  return true if explicitly_allowed? arn
  false
end