use of com.amazonaws.services.kms.model.Tag in project cerberus by Nike-Inc.
the class KmsServiceTest method test_provisionKmsKey.
@Test
public void test_provisionKmsKey() {
String iamRoleId = "role-id";
String awsRegion = "aws-region";
String user = "user";
OffsetDateTime dateTime = OffsetDateTime.now();
String policy = "policy";
String arn = "arn:aws:iam::12345678901234:role/some-role";
String awsIamRoleKmsKeyId = "awsIamRoleKmsKeyId";
when(uuidSupplier.get()).thenReturn(awsIamRoleKmsKeyId);
when(kmsPolicyService.generateStandardKmsPolicy(arn)).thenReturn(policy);
AWSKMSClient client = mock(AWSKMSClient.class);
when(kmsClientFactory.getClient(awsRegion)).thenReturn(client);
CreateKeyRequest request = new CreateKeyRequest();
request.setKeyUsage(KeyUsageType.ENCRYPT_DECRYPT);
request.setDescription("Key used by Cerberus fakeEnv for IAM role authentication. " + arn);
request.setPolicy(policy);
request.setTags(Lists.newArrayList(new Tag().withTagKey("created_by").withTagValue(ARTIFACT + VERSION), new Tag().withTagKey("created_for").withTagValue("cerberus_auth"), new Tag().withTagKey("auth_principal").withTagValue(arn), new Tag().withTagKey("cerberus_env").withTagValue(ENV)));
CreateKeyResult createKeyResult = mock(CreateKeyResult.class);
KeyMetadata metadata = mock(KeyMetadata.class);
when(metadata.getArn()).thenReturn(arn);
when(createKeyResult.getKeyMetadata()).thenReturn(metadata);
when(client.createKey(any())).thenReturn(createKeyResult);
// invoke method under test
String actualResult = kmsService.provisionKmsKey(iamRoleId, arn, awsRegion, user, dateTime).getAwsKmsKeyId();
assertEquals(arn, actualResult);
CreateAliasRequest aliasRequest = new CreateAliasRequest();
aliasRequest.setAliasName(kmsService.getAliasName(awsIamRoleKmsKeyId, arn));
aliasRequest.setTargetKeyId(arn);
verify(client).createAlias(aliasRequest);
AwsIamRoleKmsKeyRecord awsIamRoleKmsKeyRecord = new AwsIamRoleKmsKeyRecord();
awsIamRoleKmsKeyRecord.setId(awsIamRoleKmsKeyId);
awsIamRoleKmsKeyRecord.setAwsIamRoleId(iamRoleId);
awsIamRoleKmsKeyRecord.setAwsKmsKeyId(arn);
awsIamRoleKmsKeyRecord.setAwsRegion(awsRegion);
awsIamRoleKmsKeyRecord.setCreatedBy(user);
awsIamRoleKmsKeyRecord.setLastUpdatedBy(user);
awsIamRoleKmsKeyRecord.setCreatedTs(dateTime);
awsIamRoleKmsKeyRecord.setLastUpdatedTs(dateTime);
awsIamRoleKmsKeyRecord.setLastValidatedTs(dateTime);
verify(awsIamRoleDao).createIamRoleKmsKey(awsIamRoleKmsKeyRecord);
}
Aggregations