inspec/test/unit/resources/aws_iam_root_user_test.rb

require "helper"
require "inspec/resource"
require "resources/aws/aws_iam_root_user"

require "resource_support/aws"

class AwsIamRootUserTest < Minitest::Test
  def setup
    @mock_conn = Minitest::Mock.new
    @mock_client = Minitest::Mock.new

    @mock_conn.expect :iam_client, @mock_client
  end

  def test_has_access_key_returns_true_from_summary_account
    test_summary_map = OpenStruct.new(
      summary_map: { "AccountAccessKeysPresent" => 1 }
    )
    @mock_client.expect :get_account_summary, test_summary_map

    assert_equal true, AwsIamRootUser.new(@mock_conn).has_access_key?
  end

  def test_has_access_key_returns_false_from_summary_account
    test_summary_map = OpenStruct.new(
      summary_map: { "AccountAccessKeysPresent" => 0 }
    )
    @mock_client.expect :get_account_summary, test_summary_map

    assert_equal false, AwsIamRootUser.new(@mock_conn).has_access_key?
  end

  def test_has_mfa_enabled_returns_true_when_account_mfa_devices_is_one
    test_summary_map = OpenStruct.new(
      summary_map: { "AccountMFAEnabled" => 1 }
    )
    @mock_client.expect :get_account_summary, test_summary_map

    assert_equal true, AwsIamRootUser.new(@mock_conn).has_mfa_enabled?
  end

  def test_has_mfa_enabled_returns_false_when_account_mfa_devices_is_zero
    test_summary_map = OpenStruct.new(
      summary_map: { "AccountMFAEnabled" => 0 }
    )
    @mock_client.expect :get_account_summary, test_summary_map

    assert_equal false, AwsIamRootUser.new(@mock_conn).has_mfa_enabled?
  end

  def test_has_virtual_mfa_enabled_returns_true_when_account_vmfa_devices_is_one
    test_list_virtual_mfa_devices = OpenStruct.new(
      virtual_mfa_devices: [Aws::IAM::Types::VirtualMFADevice.new(
        serial_number: "arn:aws:iam::123456789011:mfa/root-account-mfa-device",
        user: Aws::IAM::Types::User.new(
          user_id: "123456789011",
          arn:     "arn:aws:iam::123456789011:root"
        )
      )]
    )
    @mock_client.expect :list_virtual_mfa_devices, test_list_virtual_mfa_devices

    assert_equal true, AwsIamRootUser.new(@mock_conn).has_virtual_mfa_enabled?
  end

  def test_has_virtual_mfa_enabled_returns_false_when_account_vmfa_devices_is_zero
    test_list_virtual_mfa_devices = OpenStruct.new(
      virtual_mfa_devices: []
    )
    @mock_client.expect :list_virtual_mfa_devices, test_list_virtual_mfa_devices

    assert_equal false, AwsIamRootUser.new(@mock_conn).has_virtual_mfa_enabled?
  end

  def test_has_hardware_mfa_enabled_returns_true_when_account_hardware_devices_is_one
    test_list_virtual_mfa_devices = OpenStruct.new(
      virtual_mfa_devices: []
    )
    test_summary_map = OpenStruct.new(
      summary_map: { "AccountMFAEnabled" => 1 }
    )
    @mock_client.expect :list_virtual_mfa_devices, test_list_virtual_mfa_devices
    @mock_client.expect :get_account_summary, test_summary_map

    assert_equal true, AwsIamRootUser.new(@mock_conn).has_hardware_mfa_enabled?
  end

  def test_has_hardware_mfa_enabled_returns_false_when_account_hardware_devices_is_zero
    test_list_virtual_mfa_devices = OpenStruct.new(
      virtual_mfa_devices: []
    )
    test_summary_map = OpenStruct.new(
      summary_map: { "AccountMFAEnabled" => 0 }
    )
    @mock_client.expect :get_account_summary, test_summary_map
    @mock_client.expect :list_virtual_mfa_devices, test_list_virtual_mfa_devices

    assert_equal false, AwsIamRootUser.new(@mock_conn).has_hardware_mfa_enabled?
  end
end