def pre_test_setup(self):
RDSSnapshotAuditor(accounts=['TEST_ACCOUNT']).OBJECT_STORE.clear()
account_type_result = AccountType(name='AWS')
db.session.add(account_type_result)
db.session.commit()
# main
account = Account(identifier="123456789123",
name="TEST_ACCOUNT",
account_type_id=account_type_result.id,
notes="TEST_ACCOUNT",
third_party=False,
active=True)
# friendly
account2 = Account(identifier="222222222222",
name="TEST_ACCOUNT_TWO",
account_type_id=account_type_result.id,
notes="TEST_ACCOUNT_TWO",
third_party=False,
active=True)
# third party
account3 = Account(identifier="333333333333",
name="TEST_ACCOUNT_THREE",
account_type_id=account_type_result.id,
notes="TEST_ACCOUNT_THREE",
third_party=True,
active=True)
db.session.add(account)
db.session.add(account2)
db.session.add(account3)
db.session.commit()
def test_check_unknown(self):
config0 = {'Attributes': {'restore': ["444444444444"]}}
rsa = RDSSnapshotAuditor(accounts=['TEST_ACCOUNT'])
rsa.prep_for_audit()
item = RDSSnapshotItem(config=config0)
rsa.check_unknown_cross_account(item)
self.assertEqual(len(item.audit_issues), 1)
self.assertEqual(item.audit_issues[0].score, 10)
self.assertEqual(item.audit_issues[0].issue, 'Unknown Access')
self.assertEqual(
item.audit_issues[0].notes,
'Entity: [account:444444444444] Actions: ["restore"]')
def test_check_friendly(self):
config0 = {'Attributes': {'restore': ["222222222222"]}}
rsa = RDSSnapshotAuditor(accounts=['TEST_ACCOUNT'])
rsa.prep_for_audit()
item = RDSSnapshotItem(config=config0)
rsa.check_friendly_cross_account(item)
self.assertEqual(len(item.audit_issues), 1)
self.assertEqual(item.audit_issues[0].score, 0)
self.assertEqual(item.audit_issues[0].issue, 'Friendly Cross Account')
self.assertEqual(
item.audit_issues[0].notes,
'Account: [222222222222/TEST_ACCOUNT_TWO] Entity: [account:222222222222] Actions: ["restore"]'
)
def test_check_thirdparty(self):
config0 = {'Attributes': {'restore': ["333333333333"]}}
rsa = RDSSnapshotAuditor(accounts=['TEST_ACCOUNT'])
rsa.prep_for_audit()
item = RDSSnapshotItem(config=config0)
rsa.check_thirdparty_cross_account(item)
self.assertEqual(len(item.audit_issues), 1)
self.assertEqual(item.audit_issues[0].score, 0)
self.assertEqual(item.audit_issues[0].issue,
'Thirdparty Cross Account')
self.assertEqual(
item.audit_issues[0].notes,
'Account: [333333333333/TEST_ACCOUNT_THREE] Entity: [account:333333333333] Actions: ["restore"]'
)
def test_check_internet_accessible(self):
config0 = {'Attributes': {'restore': ['all']}}
config1 = {'Attributes': {'restore': []}}
rsa = RDSSnapshotAuditor(accounts=['TEST_ACCOUNT'])
rsa.prep_for_audit()
item = RDSSnapshotItem(config=config0)
rsa.check_internet_accessible(item)
self.assertEqual(len(item.audit_issues), 1)
self.assertEqual(item.audit_issues[0].score, 10)
self.assertEqual(item.audit_issues[0].issue, 'Internet Accessible')
self.assertEqual(item.audit_issues[0].notes,
'Entity: [account:all] Actions: ["restore"]')
item = RDSSnapshotItem(config=config1)
rsa.check_internet_accessible(item)
self.assertEqual(len(item.audit_issues), 0)