KaneAI - World’s First E2E Software Testing Agent.Book a Demo 
How to use get_caller_identity method in localstack
Best Python code snippet using localstack_python
test_iam.py
Source:test_iam.py 
1#2# (c) 2020 Red Hat Inc.3#4# This file is part of Ansible5# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)6from __future__ import (absolute_import, division, print_function)7__metaclass__ = type8import pytest9import botocore10from ansible_collections.amazon.aws.tests.unit.compat.mock import MagicMock11from ansible_collections.amazon.aws.tests.unit.compat import unittest12import ansible_collections.amazon.aws.plugins.module_utils.iam as utils_iam13from ansible_collections.amazon.aws.plugins.module_utils.ec2 import HAS_BOTO314if not HAS_BOTO3:15 pytestmark = pytest.mark.skip("test_iam.py requires the python modules 'boto3' and 'botocore'")16class IamUtilsTestSuite(unittest.TestCase):17 def _make_denied_exception(self, partition):18 return botocore.exceptions.ClientError(19 {20 "Error": {21 "Code": "AccessDenied",22 "Message": "User: arn:" + partition + ":iam::123456789012:user/ExampleUser "23 + "is not authorized to perform: iam:GetUser on resource: user ExampleUser"24 },25 "ResponseMetadata": {26 "RequestId": "01234567-89ab-cdef-0123-456789abcdef"27 }28 }, 'getUser')29 def _make_unexpected_exception(self):30 return botocore.exceptions.ClientError(31 {32 "Error": {33 "Code": "SomeThingWentWrong",34 "Message": "Boom!"35 },36 "ResponseMetadata": {37 "RequestId": "01234567-89ab-cdef-0123-456789abcdef"38 }39 }, 'someCall')40 def _make_encoded_exception(self):41 return botocore.exceptions.ClientError(42 {43 "Error": {44 "Code": "AccessDenied",45 "Message": "You are not authorized to perform this operation. Encoded authorization failure message: " +46 "fEwXX6llx3cClm9J4pURgz1XPnJPrYexEbrJcLhFkwygMdOgx_-aEsj0LqRM6Kxt2HVI6prUhDwbJqBo9U2V7iRKZ" +47 "T6ZdJvHH02cXmD0Jwl5vrTsf0PhBcWYlH5wl2qME7xTfdolEUr4CzumCiti7ETiO-RDdHqWlasBOW5bWsZ4GSpPdU" +48 "06YAX0TfwVBs48uU5RpCHfz1uhSzez-3elbtp9CmTOHLt5pzJodiovccO55BQKYLPtmJcs6S9YLEEogmpI4Cb1D26" +49 "fYahDh51jEmaohPnW5pb1nQe2yPEtuIhtRzNjhFCOOMwY5DBzNsymK-Gj6eJLm7FSGHee4AHLU_XmZMe_6bcLAiOx" +50 "6Zdl65Kdd0hLcpwVxyZMi27HnYjAdqRlV3wuCW2PkhAW14qZQLfiuHZDEwnPe2PBGSlFcCmkQvJvX-YLoA7Uyc2wf" +51 "NX5RJm38STwfiJSkQaNDhHKTWKiLOsgY4Gze6uZoG7zOcFXFRyaA4cbMmI76uyBO7j-9uQUCtBYqYto8x_9CUJcxI" +52 "VC5SPG_C1mk-WoDMew01f0qy-bNaCgmJ9TOQGd08FyuT1SaMpCC0gX6mHuOnEgkFw3veBIowMpp9XcM-yc42fmIOp" +53 "FOdvQO6uE9p55Qc-uXvsDTTvT3A7EeFU8a_YoAIt9UgNYM6VTvoprLz7dBI_P6C-bdPPZCY2amm-dJNVZelT6TbJB" +54 "H_Vxh0fzeiSUBersy_QzB0moc-vPWgnB-IkgnYLV-4L3K0L2"55 },56 "ResponseMetadata": {57 "RequestId": "01234567-89ab-cdef-0123-456789abcdef"58 }59 }, 'someCall')60 def _make_botocore_exception(self):61 return botocore.exceptions.EndpointConnectionError(endpoint_url='junk.endpoint')62 def setUp(self):63 self.sts_client = MagicMock()64 self.iam_client = MagicMock()65 self.module = MagicMock()66 clients = {'sts': self.sts_client, 'iam': self.iam_client}67 def get_client(*args, **kwargs):68 return clients[args[0]]69 self.module.client.side_effect = get_client70 self.module.fail_json_aws.side_effect = SystemExit(1)71 self.module.fail_json.side_effect = SystemExit(2)72 # ========== get_aws_account_id ============73 # This is just a minimal (compatability) wrapper around get_aws_account_info74 # Perform some basic testing and call it a day.75 # Test the simplest case - We're permitted to call GetCallerIdentity76 def test_get_aws_account_id__caller_success(self):77 # Prepare78 self.sts_client.get_caller_identity.side_effect = [{'UserId': 'AIDA1234567890ABCDEFG',79 'Account': '123456789012',80 'Arn': 'arn:aws:iam::123456789012:user/ExampleUser'}]81 # Run module82 return_value = utils_iam.get_aws_account_id(self.module)83 # Check we only saw the calls we mocked out84 self.module.client.assert_called_once()85 self.sts_client.get_caller_identity.assert_called_once()86 # Check we got the values back we expected.87 self.assertEqual(return_value, '123456789012')88 # Test the simplest case - We're permitted to call GetCallerIdentity89 # (China partition)90 def test_get_aws_account_id__caller_success_cn(self):91 # Prepare92 self.sts_client.get_caller_identity.side_effect = [{'UserId': 'AIDA1234567890ABCDEFG',93 'Account': '123456789012',94 'Arn': 'arn:aws-cn:iam::123456789012:user/ExampleUser'}]95 # Run module96 return_value = utils_iam.get_aws_account_id(self.module)97 # Check we only saw the calls we mocked out98 self.module.client.assert_called_once()99 self.sts_client.get_caller_identity.assert_called_once()100 # Check we got the values back we expected.101 self.assertEqual(return_value, '123456789012')102 # ========== get_aws_account_info ============103 # Test the simplest case - We're permitted to call GetCallerIdentity104 def test_get_aws_account_info__caller_success(self):105 # Prepare106 self.sts_client.get_caller_identity.side_effect = [{'UserId': 'AIDA1234567890ABCDEFG',107 'Account': '123456789012',108 'Arn': 'arn:aws:iam::123456789012:user/ExampleUser'}]109 # Run module110 return_value = utils_iam.get_aws_account_info(self.module)111 # Check we only saw the calls we mocked out112 self.module.client.assert_called_once()113 self.sts_client.get_caller_identity.assert_called_once()114 # Check we got the values back we expected.115 self.assertEqual(return_value, ('123456789012', 'aws',))116 # (China partition)117 def test_get_aws_account_info__caller_success_cn(self):118 # Prepare119 self.sts_client.get_caller_identity.side_effect = [{'UserId': 'AIDA1234567890ABCDEFG',120 'Account': '123456789012',121 'Arn': 'arn:aws-cn:iam::123456789012:user/ExampleUser'}]122 # Run module123 return_value = utils_iam.get_aws_account_info(self.module)124 # Check we only saw the calls we mocked out125 self.module.client.assert_called_once()126 self.sts_client.get_caller_identity.assert_called_once()127 # Check we got the values back we expected.128 self.assertEqual(return_value, ('123456789012', 'aws-cn',))129 # (US-Gov partition)130 def test_get_aws_account_info__caller_success_gov(self):131 # Prepare132 self.sts_client.get_caller_identity.side_effect = [{'UserId': 'AIDA1234567890ABCDEFG',133 'Account': '123456789012',134 'Arn': 'arn:aws-us-gov:iam::123456789012:user/ExampleUser'}]135 # Run module136 return_value = utils_iam.get_aws_account_info(self.module)137 # Check we only saw the calls we mocked out138 self.module.client.assert_called_once()139 self.sts_client.get_caller_identity.assert_called_once()140 # Check we got the values back we expected.141 self.assertEqual(return_value, ('123456789012', 'aws-us-gov',))142 # If sts:get_caller_identity fails (most likely something wierd on the143 # client side), then try a few extra options.144 # Test response if STS fails and we need to fall back to GetUser145 def test_get_aws_account_info__user_success(self):146 # Prepare147 self.sts_client.get_caller_identity.side_effect = [self._make_botocore_exception()]148 self.iam_client.get_user.side_effect = [{"User": {"Path": "/", "UserName": "ExampleUser", "UserId": "AIDA1234567890ABCDEFG",149 "Arn": "arn:aws:iam::123456789012:user/ExampleUser", "CreateDate": "2020-09-08T14:04:32Z"}}]150 # Run module151 return_value = utils_iam.get_aws_account_info(self.module)152 # Check we only saw the calls we mocked out153 self.assertEqual(self.module.client.call_count, 2)154 self.sts_client.get_caller_identity.assert_called_once()155 self.iam_client.get_user.assert_called_once()156 # Check we got the values back we expected.157 self.assertEqual(return_value, ('123456789012', 'aws',))158 # (China partition)159 def test_get_aws_account_info__user_success_cn(self):160 # Prepare161 self.sts_client.get_caller_identity.side_effect = [self._make_botocore_exception()]162 self.iam_client.get_user.side_effect = [{"User": {"Path": "/", "UserName": "ExampleUser", "UserId": "AIDA1234567890ABCDEFG",163 "Arn": "arn:aws-cn:iam::123456789012:user/ExampleUser", "CreateDate": "2020-09-08T14:04:32Z"}}]164 # Run module165 return_value = utils_iam.get_aws_account_info(self.module)166 # Check we only saw the calls we mocked out167 self.assertEqual(self.module.client.call_count, 2)168 self.sts_client.get_caller_identity.assert_called_once()169 self.iam_client.get_user.assert_called_once()170 # Check we got the values back we expected.171 self.assertEqual(return_value, ('123456789012', 'aws-cn',))172 # (US-Gov partition)173 def test_get_aws_account_info__user_success_gov(self):174 # Prepare175 self.sts_client.get_caller_identity.side_effect = [self._make_botocore_exception()]176 self.iam_client.get_user.side_effect = [{"User": {"Path": "/", "UserName": "ExampleUser", "UserId": "AIDA1234567890ABCDEFG",177 "Arn": "arn:aws-us-gov:iam::123456789012:user/ExampleUser", "CreateDate": "2020-09-08T14:04:32Z"}}]178 # Run module179 return_value = utils_iam.get_aws_account_info(self.module)180 # Check we only saw the calls we mocked out181 self.assertEqual(self.module.client.call_count, 2)182 self.sts_client.get_caller_identity.assert_called_once()183 self.iam_client.get_user.assert_called_once()184 # Check we got the values back we expected.185 self.assertEqual(return_value, ('123456789012', 'aws-us-gov',))186 # Test response if STS and IAM fails and we need to fall back to the denial message187 def test_get_aws_account_info__user_denied(self):188 # Prepare189 self.sts_client.get_caller_identity.side_effect = [self._make_botocore_exception()]190 self.iam_client.get_user.side_effect = [self._make_denied_exception('aws')]191 # Run module192 return_value = utils_iam.get_aws_account_info(self.module)193 # Check we only saw the calls we mocked out194 self.assertEqual(self.module.client.call_count, 2)195 self.sts_client.get_caller_identity.assert_called_once()196 self.iam_client.get_user.assert_called_once()197 # Check we got the values back we expected.198 self.assertEqual(return_value, ('123456789012', 'aws',))199 # (China partition)200 def test_get_aws_account_info__user_denied_cn(self):201 # Prepare202 self.sts_client.get_caller_identity.side_effect = [self._make_botocore_exception()]203 self.iam_client.get_user.side_effect = [self._make_denied_exception('aws-cn')]204 # Run module205 return_value = utils_iam.get_aws_account_info(self.module)206 # Check we only saw the calls we mocked out207 self.assertEqual(self.module.client.call_count, 2)208 self.sts_client.get_caller_identity.assert_called_once()209 self.iam_client.get_user.assert_called_once()210 # Check we got the values back we expected.211 self.assertEqual(return_value, ('123456789012', 'aws-cn',))212 # (US-Gov partition)213 def test_get_aws_account_info__user_denied_gov(self):214 # Prepare215 self.sts_client.get_caller_identity.side_effect = [self._make_botocore_exception()]216 self.iam_client.get_user.side_effect = [self._make_denied_exception('aws-us-gov')]217 # Run module218 return_value = utils_iam.get_aws_account_info(self.module)219 # Check we only saw the calls we mocked out220 self.assertEqual(self.module.client.call_count, 2)221 self.sts_client.get_caller_identity.assert_called_once()222 self.iam_client.get_user.assert_called_once()223 # Check we got the values back we expected.224 self.assertEqual(return_value, ('123456789012', 'aws-us-gov',))225 # Test that we fail gracefully if Boto throws exceptions at us...226 def test_get_aws_account_info__boto_failures(self):227 # Prepare228 self.sts_client.get_caller_identity.side_effect = [self._make_botocore_exception()]229 self.iam_client.get_user.side_effect = [self._make_botocore_exception()]230 # Run module231 with pytest.raises(SystemExit) as e:232 utils_iam.get_aws_account_info(self.module)233 # Check we only saw the calls we mocked out234 self.assertEqual(self.module.client.call_count, 2)235 self.sts_client.get_caller_identity.assert_called_once()236 self.iam_client.get_user.assert_called_once()237 # Check we got the values back we expected.238 assert e.type == SystemExit239 assert e.value.code == 1 # 1 == fail_json_aws240 def test_get_aws_account_info__client_failures(self):241 # Prepare242 self.sts_client.get_caller_identity.side_effect = [self._make_unexpected_exception()]243 self.iam_client.get_user.side_effect = [self._make_unexpected_exception()]244 # Run module245 with pytest.raises(SystemExit) as e:246 utils_iam.get_aws_account_info(self.module)247 # Check we only saw the calls we mocked out248 self.assertEqual(self.module.client.call_count, 2)249 self.sts_client.get_caller_identity.assert_called_once()250 self.iam_client.get_user.assert_called_once()251 # Check we got the values back we expected.252 assert e.type == SystemExit253 assert e.value.code == 1 # 1 == fail_json_aws254 def test_get_aws_account_info__encoded_failures(self):255 # Prepare256 self.sts_client.get_caller_identity.side_effect = [self._make_encoded_exception()]257 self.iam_client.get_user.side_effect = [self._make_encoded_exception()]258 # Run module259 with pytest.raises(SystemExit) as e:260 utils_iam.get_aws_account_info(self.module)261 # Check we only saw the calls we mocked out262 self.assertEqual(self.module.client.call_count, 2)263 self.sts_client.get_caller_identity.assert_called_once()264 self.iam_client.get_user.assert_called_once()265 # Check we got the values back we expected.266 assert e.type == SystemExit...
test_sts.py
Source:test_sts.py
1from moto import mock_sts2from hamcrest import assert_that, is_, has_entries, ends_with3from aws_easy_use import sts4def test_sts_get_caller_identity(aws_account):5 with mock_sts():6 result = sts.get_caller_identity()7 assert_that(result, is_(dict))8 assert_that(result, has_entries(UserId=aws_account["user_id"], Account=aws_account["account_id"], Arn=aws_account["arn"]))9def test_sts_get_caller_identity_when_assuming_role(aws_account, sts_assumed_role_simple):10 result = sts.get_caller_identity()11 assert_that(result, is_(dict))12 assert_that(result, 13 has_entries(14 UserId=sts_assumed_role_simple["role_id"], 15 Account=aws_account["account_id"], 16 Arn=sts_assumed_role_simple["arn"]17 )18 )19def test_sts_assume_role(aws_account, iam_role_simple):20 role_session_name = "sts-assume-role-1"21 region = "ap-northeast-1"22 @sts.assume_role(23 assume_role_arn=iam_role_simple["arn"], 24 assume_role_session_name=role_session_name,25 assume_role_region=region,26 external_id="4be10b85-4b3c-4b59-a71a-d0c1808ad5ac"27 )28 def _test_func():29 result = sts.get_caller_identity()30 assert_that(result, is_(dict))31 assert_that(result, 32 has_entries(33 UserId=ends_with(f":{role_session_name}"), 34 Account=aws_account["account_id"], 35 Arn=f"arn:aws:sts::{aws_account['account_id']}:assumed-role{iam_role_simple['path']}{iam_role_simple['name']}/{role_session_name}"36 )37 )38 with mock_sts():39 _test_func()40 result = sts.get_caller_identity()41 assert_that(result, is_(dict))...
sts.py
Source:sts.py
...3 def _decorator(func):4 @functools.wraps(func)5 def _wrapper(*args, **kw):6 print(f"Assume role `{assume_role_arn}`")7 print(f"Before assuming role, the identity is `{get_caller_identity()}`")8 assumed_role = boto3.client('sts').assume_role(9 RoleArn = assume_role_arn,10 RoleSessionName = assume_role_session_name,11 ExternalId=external_id12 )13 boto3.setup_default_session(14 aws_access_key_id = assumed_role['Credentials']['AccessKeyId'],15 aws_secret_access_key = assumed_role['Credentials']['SecretAccessKey'],16 aws_session_token = assumed_role['Credentials']['SessionToken'],17 region_name = assume_role_region18 )19 print(f"After assuming role, the identity is `{get_caller_identity()}`")20 result = func(*args, **kw)21 boto3.setup_default_session()22 return result23 return _wrapper24 return _decorator25def get_caller_identity() -> dict:26 """27 Get caller identity28 :param str reference_arn: reference ARN29 :return: is reference existed?30 :rtype: bool31 """...
Automation Testing Tutorials
Learn to execute automation testing from scratch with LambdaTest Learning Hub. Right from setting up the prerequisites to run your first automation test, to following best practices and diving deeper into advanced test scenarios. LambdaTest Learning Hubs compile a list of step-by-step guides to help you be proficient with different test automation frameworks i.e. Selenium, Cypress, TestNG etc.
LambdaTest Learning Hubs:
- JUnit Tutorial
- TestNG Tutorial
- Webdriver Tutorial
- WebDriverIO Tutorial
- Protractor Tutorial
- Selenium 4 Tutorial
- Jenkins Tutorial
- NUnit Tutorial
- Jest Tutorial
- Playwright Tutorial
- Cypress Tutorial
- PyTest Tutorial
YouTube
You could also refer to video tutorials over LambdaTest YouTube channel to get step by step demonstration from industry experts.
Run localstack automation tests on LambdaTest cloud grid
Perform automation testing on 3000+ real desktop and mobile devices online.
Try LambdaTest Now !!
Get 100 minutes of automation test minutes FREE!!
Was this article helpful?
