Python find_asset_owners Examples

Example #1

def test_find_asset_owners_no_record():
    """
    Scenario: Validates find_asset_owners function

    Given:
    - minimized asset without owners
    - empty input

    Then:
    - Ensure that empty list is returned.
    """
    from GoogleCloudSCC import find_asset_owners

    input_asset = {
        "iamPolicy": {
            "bindings": [{
                'members': ['serviceAccount:service-12345'],
                'role': 'roles/cloudfunctions.serviceAgent'
            }, {
                'members': ['serviceAccount:firebase-dummy-account'],
                'role': 'roles/firebase.managementServiceAgent'
            }]
        }
    }
    assert [] == find_asset_owners(input_asset)
    assert [] == find_asset_owners({})

Example #2

def test_find_asset_owners():
    """
    Scenario: Validates find_asset_owners function

    Given:
    - minimized cloud asset

    Then:
    - Ensure that owners list is returned.
    """
    from GoogleCloudSCC import find_asset_owners

    input_asset = {
        "iamPolicy": {
            "bindings": [{
                'members': ['serviceAccount:service-12345'],
                'role': 'roles/cloudfunctions.serviceAgent'
            }, {
                'members': [
                    'cloudservices.gserviceaccount.com',
                    'serviceAccount.gserviceaccount.com'
                ],
                'role':
                'roles/owner'
            }, {
                'members': ['serviceAccount:firebase-dummy-account'],
                'role': 'roles/firebase.managementServiceAgent'
            }]
        }
    }
    expected_owners = [
        'cloudservices.gserviceaccount.com',
        'serviceAccount.gserviceaccount.com'
    ]
    assert expected_owners == find_asset_owners(input_asset)