StyraInc / opa-aws-cloudformation-hook

AWS Cloudformation Hook for OPA-powered infrastructure policy enforcement
Apache License 2.0
35 stars 5 forks source link

Fix integration tests #18

Closed anderseknert closed 2 years ago

anderseknert commented 2 years ago

Signed-off-by: Anders Eknert anders@eknert.com

anderseknert commented 2 years ago
❯ ./test-templates.py
SUCCESS: templates/iam-users-have-policy/examples/iam-fail-no-user-policy.yaml UserWithNoPolicies
SUCCESS: templates/iam-users-have-policy/examples/iam-success-user-policy-attached.yaml UserWithPolicy
SUCCESS: templates/iam-users-have-policy/examples/iam-success-user-policy-attached.yaml UserWithManagedPolicy
SUCCESS: templates/eks-public-api/examples/eks-deny-cluster.yaml EksCluster
SUCCESS: templates/eks-public-api/examples/eks-success-public-api-disabled.yaml EksCluster
SUCCESS: templates/iam-no-admin-statements/examples/iam-success-action-restricted.yaml UserWithEc2InlinePolicy
SUCCESS: templates/iam-no-admin-statements/examples/iam-fail-admin-allowed.yaml UserWithAdminInlinePolicy
SUCCESS: templates/eks-cluster-logging/examples/eks-deny-cluster.yaml EksCluster
SUCCESS: templates/eks-cluster-logging/examples/eks-success-cluster-logging.yaml EksCluster
SUCCESS: templates/s3-bucket-logging-enabled/examples/s3-success-logging-enabled.yaml S3Bucket
SUCCESS: templates/s3-bucket-logging-enabled/examples/s3-fail-no-logging.yaml S3Bucket
SUCCESS: templates/s3-block-public-access/examples/s3-success-name-prefix-excluded.yaml S3Bucket
SUCCESS: templates/s3-block-public-access/examples/s3-fail-no-settings-specified.yaml S3Bucket
SUCCESS: templates/s3-block-public-access/examples/s3-success-all-access-blocked.yaml S3Bucket
SUCCESS: templates/s3-block-public-access/examples/s3-fail-not-all-4-settings-specified.yaml S3Bucket
SUCCESS: templates/s3-bucket-encryption/examples/s3-fail-wrong-encryption-type.yaml S3Bucket
SUCCESS: templates/s3-bucket-encryption/examples/s3-fail-wrong-encryption-type.yaml EncryptedS3Bucket
SUCCESS: templates/s3-bucket-encryption/examples/s3-fail-no-bucket-encryption.yaml S3Bucket
SUCCESS: templates/s3-bucket-encryption/examples/s3-success-encryption.yaml EncryptedS3Bucket
SUCCESS: templates/s3-bucket-encryption/examples/s3-success-encryption.yaml EncryptionKey
SUCCESS: templates/rds-encryption-verify/examples/rds-success-encryption-set.yaml DBEC2SecurityGroup
SUCCESS: templates/rds-encryption-verify/examples/rds-success-encryption-set.yaml DBSecurityGroup
SUCCESS: templates/rds-encryption-verify/examples/rds-success-encryption-set.yaml MasterDB
SUCCESS: templates/rds-encryption-verify/examples/rds-fail-encryption-not-set.yaml MasterDB
SUCCESS: templates/rds-encryption-verify/examples/rds-fail-encryption-not-set.yaml MasterDB
SUCCESS: templates/security-group-open-ingress/examples/sg-success-restricted-to-subnet.yaml SecurityGroup
SUCCESS: templates/security-group-open-ingress/examples/sg-fail-open-to-public.yaml SecurityGroup
SUCCESS: templates/iam-principal-boundary/examples/iam-success-permission-boundary-included.yaml IAMRoleTest
SUCCESS: templates/iam-principal-boundary/examples/iam-fail-permission-boundary-incorrect.yaml IAMRoleTest
SUCCESS: templates/iam-principal-boundary/examples/iam-fail-auto-generated-name-not-excluded.yaml IAMRoleTest
SUCCESS: templates/iam-principal-boundary/examples/iam-success-role-name-excluded.yaml IAMRoleTest
SUCCESS: templates/iam-principal-boundary/examples/iam-success-user-name-excluded.yaml IAMUserTest