1import * as AWS from "@/AWS";
2import { Group, GroupMembership, InstanceProfile, Role, User } from "@/AWS/IAM";
3import * as Test from "@/Test/Alchemy";
4import * as IAM from "@distilled.cloud/aws/iam";
5import { expect } from "alchemy-test";
6import * as Effect from "effect/Effect";
7
8const { test } = Test.make({ providers: AWS.providers() });
9
10test.provider(
11 "create user, group membership, and instance profile",
12 (stack) =>
13 Effect.gen(function* () {
14 yield* stack.destroy();
15
16 const resources = yield* stack.deploy(
17 Effect.gen(function* () {
18 const role = yield* Role("ProfileRole", {
19 assumeRolePolicyDocument: {
20 Version: "2012-10-17",
21 Statement: [
22 {
23 Effect: "Allow",
24 Principal: { Service: "ec2.amazonaws.com" },
25 Action: ["sts:AssumeRole"],
26 },
27 ],
28 },
29 });
30 const user = yield* User("IamUser", {
31 tags: {
32 env: "test",
33 },
34 });
35 const group = yield* Group("IamGroup", {});
36 const membership = yield* GroupMembership("IamMembership", {
37 groupName: group.groupName,
38 userNames: [user.userName],
39 });
40 const profile = yield* InstanceProfile("IamInstanceProfile", {
41 roleName: role.roleName,
42 tags: {
43 env: "test",
44 },
45 });
46
47 return { user, group, membership, profile, role };
48 }),
49 );
50
51 const group = yield* IAM.getGroup({
52 GroupName: resources.group.groupName,
53 });
54 expect(
55 group.Users.some((user) => user.UserName === resources.user.userName),
56 ).toBe(true);
57
58 const profile = yield* IAM.getInstanceProfile({
59 InstanceProfileName: resources.profile.instanceProfileName,
60 });
61 expect(profile.InstanceProfile.Roles[0]?.RoleName).toBe(
62 resources.role.roleName,
63 );
64
65 yield* stack.destroy();
66
67 // Everything the stack created is gone.
68 const deletedUser = yield* IAM.getUser({
69 UserName: resources.user.userName,
70 }).pipe(Effect.option);
71 expect(deletedUser._tag).toBe("None");
72 const deletedGroup = yield* IAM.getGroup({
73 GroupName: resources.group.groupName,
74 }).pipe(Effect.option);
75 expect(deletedGroup._tag).toBe("None");
76 const deletedProfile = yield* IAM.getInstanceProfile({
77 InstanceProfileName: resources.profile.instanceProfileName,
78 }).pipe(Effect.option);
79 expect(deletedProfile._tag).toBe("None");
80 const deletedRole = yield* IAM.getRole({
81 RoleName: resources.role.roleName,
82 }).pipe(Effect.option);
83 expect(deletedRole._tag).toBe("None");
84 }),
85 { tags: ["provider:aws", "provider:aws:iam", "live"] },
86);