stackd/testdata/lambda/resource_policy_federation_native.json at main · radkawar/stackd · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
{
  "account": "000000000000",
  "region": "us-east-1",
  "functionArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
  "cases": [
    {
      "label": "federated-google",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"Federated\": \"accounts.google.com\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "0f294ad9-8f17-49a6-8b59-6b7a6bb64510",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"accounts.google.com\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "b5dc6464-62e9-4203-9c81-31809213480d"
      }
    },
    {
      "label": "federated-facebook",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"Federated\": \"graph.facebook.com\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "7fa9ab7a-ad5a-4a33-ac24-716ba810ca5d",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"graph.facebook.com\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "734d6d6f-8656-4575-9847-09579570df2e"
      }
    },
    {
      "label": "federated-amazon",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"Federated\": \"www.amazon.com\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "16808d42-ce31-483a-a127-b052fcb2104f",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"www.amazon.com\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "0ae4033a-a2f9-42a6-a64f-6bf6578232fb"
      }
    },
    {
      "label": "federated-oidc-absent",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"Federated\": \"arn:aws:iam::000000000000:oidc-provider/stackd-nonexistent.example\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "59cd2dc5-2a0f-4a53-a7f6-b14c6c3546d4",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"arn:aws:iam::000000000000:oidc-provider/stackd-nonexistent.example\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "9ffff24c-5a19-4066-aed2-1a92fa610de0"
      }
    },
    {
      "label": "federated-oidc-other-account",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"Federated\": \"arn:aws:iam::111111111111:oidc-provider/stackd-nonexistent.example\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "edb13978-ea95-4495-b203-5e458257be0e",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"arn:aws:iam::111111111111:oidc-provider/stackd-nonexistent.example\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "94230b39-6a2b-4459-ab52-d8da505c6c55"
      }
    },
    {
      "label": "federated-saml-absent",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"Federated\": \"arn:aws:iam::000000000000:saml-provider/stackd-nonexistent\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "39630d37-2f4f-483d-8787-eb1aceb13eb9",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"arn:aws:iam::000000000000:saml-provider/stackd-nonexistent\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "7498e8e2-a5a4-4639-97ef-d6a5b217bc9e"
      }
    },
    {
      "label": "federated-saml-other-account",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"Federated\": \"arn:aws:iam::111111111111:saml-provider/stackd-nonexistent\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "506d85d9-752e-4f31-8579-cc2c596e4e6f",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"arn:aws:iam::111111111111:saml-provider/stackd-nonexistent\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "d4d83e4c-fdb7-4004-8473-cde90aef758c"
      }
    },
    {
      "label": "federated-arbitrary-domain",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"Federated\": \"issuer.stackd.invalid\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "49b9cc8f-2ab2-44d8-930a-985d0f5cff2e",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"issuer.stackd.invalid\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "bd09c98b-80cb-40fc-876e-41b82f929626"
      }
    },
    {
      "label": "federated-malformed",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"Federated\": \"not a principal\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "f97c76c2-bb71-4102-8ae0-579cf7bb9baf",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"not a principal\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "47c14109-78d4-4386-8246-e0912c2d682a"
      }
    },
    {
      "label": "federated-wildcard",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"Federated\": \"*\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "f05472f8-ed8a-4262-9194-8345bd8dcf60",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"*\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "a9846634-a9ad-476d-bd2a-253af25d5924"
      }
    },
    {
      "label": "federated-array",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"Federated\": [\"accounts.google.com\", \"graph.facebook.com\"]}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "122c134b-b7d5-45e3-a2e9-4a6adda6aed7",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"Federated\":[\"accounts.google.com\",\"graph.facebook.com\"]},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "921749d0-e5fa-4850-bb5e-81bb78079c2f"
      }
    },
    {
      "label": "federated-mixed-aws",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"AWS\": \"000000000000\", \"Federated\": \"accounts.google.com\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "a0c0c9c6-5b64-46c1-868b-00688afefd54",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"000000000000\",\"Federated\":\"accounts.google.com\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "73c3f102-eb34-492b-b201-275e40f19a29"
      }
    },
    {
      "label": "remove-federated-mixed-aws",
      "operation": "remove_permission",
      "request": {
        "FunctionName": "stackd-next-policy-d6d343c39edb",
        "StatementId": "replacement"
      },
      "requestId": "fdcc60b7-27f0-4a8f-b247-3eb56b486774",
      "output": {}
    },
    {
      "label": "federated-mixed-aws-service",
      "operation": "put_resource_policy",
      "request": {
        "ResourceArn": "arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb",
        "Policy": "{\"Version\": \"2012-10-17\", \"Statement\": [{\"Sid\": \"replacement\", \"Effect\": \"Allow\", \"Principal\": {\"AWS\": \"000000000000\", \"Service\": \"s3.amazonaws.com\", \"Federated\": \"accounts.google.com\"}, \"Action\": \"lambda:InvokeFunction\", \"Resource\": \"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}"
      },
      "requestId": "48c8d7a6-7c93-47c9-9e0f-eaf2eeaba6fe",
      "output": {
        "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"replacement\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"000000000000\",\"Federated\":\"accounts.google.com\",\"Service\":\"s3.amazonaws.com\"},\"Action\":\"lambda:InvokeFunction\",\"Resource\":\"arn:aws:lambda:us-east-1:000000000000:function:stackd-next-policy-d6d343c39edb\"}]}",
        "RevisionId": "7508a994-1910-4ad2-9be2-a4b9ca841519"
      }
    },
    {
      "label": "remove-federated-mixed-aws-service",
      "operation": "remove_permission",
      "request": {
        "FunctionName": "stackd-next-policy-d6d343c39edb",
        "StatementId": "replacement"
      },
      "requestId": "4f7a5624-86b0-4734-b3a7-3dc80eaea412",
      "output": {}
    }
  ],
  "cleanup": [
    "function-and-versions-deleted",
    "role-deleted"
  ]
}