Class: GeoEngineer::IAM::Statement

Inherits:
Object
  • Object
show all
Defined in:
lib/geoengineer/resources/iam/statement.rb

Overview

A Statement object is a single iam policy statement with a Sid, effect, action, and condition. Used to assist validating IAM policies.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(raw) ⇒ Statement

Returns a new instance of Statement.



9
10
11
12
13
14
 
# File 'lib/geoengineer/resources/iam/statement.rb', line 9

def initialize(raw)
  @action = raw["Action"]
  @effect = raw["Effect"]
  @raw = raw
  @sid = raw["Sid"]
end

Instance Attribute Details

#action ⇒ Object (readonly)

Returns the value of attribute action.



7
8
9
 
# File 'lib/geoengineer/resources/iam/statement.rb', line 7

def action
  @action
end

#effect ⇒ Object (readonly)

Returns the value of attribute effect.



7
8
9
 
# File 'lib/geoengineer/resources/iam/statement.rb', line 7

def effect
  @effect
end

#sid ⇒ Object (readonly)

Returns the value of attribute sid.



7
8
9
 
# File 'lib/geoengineer/resources/iam/statement.rb', line 7

def sid
  @sid
end

Instance Method Details

#ip_restriction_exists? ⇒ Boolean

Returns:

  • (Boolean) 


28
29
30
 
# File 'lib/geoengineer/resources/iam/statement.rb', line 28

def ip_restriction_exists?
  return true unless ip_restrictions.empty?
end

#ip_restrictions ⇒ Object 



21
22
23
24
25
26
 
# File 'lib/geoengineer/resources/iam/statement.rb', line 21

def ip_restrictions
  cidr_blocks = []
  cidr_blocks << @raw.dig('Condition', 'IpAddress', 'aws:SourceIP')
  cidr_blocks << @raw.dig('Condition', 'IpAddressIfExists', 'aws:SourceIP')
  cidr_blocks.flatten.compact
end

#secure_transport? ⇒ Boolean

Returns:

  • (Boolean) 


16
17
18
19
 
# File 'lib/geoengineer/resources/iam/statement.rb', line 16

def secure_transport?
  secure_transport = @raw.dig('Condition', 'Bool', 'aws:SecureTransport')
  secure_transport == "true"
end

#vpc_restriction_exists? ⇒ Boolean

Returns:

  • (Boolean) 


39
40
41
 
# File 'lib/geoengineer/resources/iam/statement.rb', line 39

def vpc_restriction_exists?
  return true unless vpc_restrictions.empty?
end

#vpc_restrictions ⇒ Object 



32
33
34
35
36
37
 
# File 'lib/geoengineer/resources/iam/statement.rb', line 32

def vpc_restrictions
  vpcs = []
  vpcs << @raw.dig('Condition', 'StringEqualsifExists', 'aws:sourceVpce')
  vpcs << @raw.dig('Condition', 'ForAnyValue:StringEquals', 'aws:sourceVpce')
  vpcs.flatten.compact
end