def test_failure_on_missing_property(self):
resource_conf = {
"require_numbers": True,
"require_symbols": True,
"allow_users_to_change_password": True,
}
scan_result = check.scan_resource_conf(conf=resource_conf)
self.assertEqual(CheckResult.FAILED, scan_result)
def test_success(self):
resource_conf = {
"minimum_password_length": 14,
"require_lowercase_characters": True,
"require_numbers": True,
"require_uppercase_characters": True,
"require_symbols": True,
"allow_users_to_change_password": True,
"password_reuse_prevention": 24
}
scan_result = check.scan_resource_conf(conf=resource_conf)
self.assertEqual(CheckResult.PASSED, scan_result)
def test_failure(self):
resource_conf = {
"minimum_password_length": [15],
"require_lowercase_characters": [True],
"require_numbers": [True],
"require_uppercase_characters": [True],
"require_symbols": [True],
"allow_users_to_change_password": [True],
"max_password_age": [89],
"password_reuse_prevention": [4]
}
scan_result = check.scan_resource_conf(conf=resource_conf)
self.assertEqual(CheckResult.FAILED, scan_result)
def test_another_test(self):
conf = {
'count': ['True ? 1 : 0}'],
'max_password_age': [0],
'minimum_password_length': [8],
'allow_users_to_change_password': [True],
'hard_expiry': [False],
'password_reuse_prevention': ['${var.password_reuse_prevention}'],
'require_lowercase_characters': [True],
'require_uppercase_characters': [True],
'require_numbers': [True],
'require_symbols': [True]
}
scan_result = check.scan_resource_conf(conf=conf)
self.assertEqual(CheckResult.PASSED, scan_result)
