Update more tests for condition keys (#3781)

kddejong · web-flow · commit a6eb97ac7ecc · 2024-10-21T12:33:10.000-07:00
diff --git a/test/unit/rules/resources/iam/test_identity_policy.py b/test/unit/rules/resources/iam/test_identity_policy.py
@@ -186,7 +186,10 @@ def test_string_statements_with_condition(self):
                             "IpAddress": {"aws:SourceIp": "203.0.113.0/24"},
                             "ArnEquals": {"aws:SourceArn": "arn:aws:sns:REGION:123456789012:TOPIC-ID"},
                             "StringLikeIfExists": { "ec2:InstanceType": [ "t1.*", "t2.*" ]},
-                            "Null":{"aws:TokenIssueTime":"true"}
+                            "Null":{"aws:TokenIssueTime":"true"},
+                            "ForAllValues:StringEquals":{"aws:PrincipalTag/job-category":["iamuser-admin","iamuser-read-only"]},
+                            "ForAnyValue:StringEquals":{"aws:PrincipalTag/job-category":"iamuser-admin"},
+                            "ForAllValues:StringLike": {"aws:TagKeys": ["key1*"]}
                         }
                     }
                 ]

Original file line number	Diff line number	Diff line change
`@@ -186,7 +186,10 @@ def test_string_statements_with_condition(self):`
`186`	`186`	`"IpAddress": {"aws:SourceIp": "203.0.113.0/24"},`
`187`	`187`	`"ArnEquals": {"aws:SourceArn": "arn:aws:sns:REGION:123456789012:TOPIC-ID"},`
`188`	`188`	`"StringLikeIfExists": { "ec2:InstanceType": [ "t1.", "t2." ]},`
`189`		`- "Null":{"aws:TokenIssueTime":"true"}`
	`189`	`+ "Null":{"aws:TokenIssueTime":"true"},`
	`190`	`+ "ForAllValues:StringEquals":{"aws:PrincipalTag/job-category":["iamuser-admin","iamuser-read-only"]},`
	`191`	`+ "ForAnyValue:StringEquals":{"aws:PrincipalTag/job-category":"iamuser-admin"},`
	`192`	`+ "ForAllValues:StringLike": {"aws:TagKeys": ["key1*"]}`
`190`	`193`	`}`
`191`	`194`	`}`
`192`	`195`	`]`