[go: nahoru, domu]

Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor(ASFF): create class #4368

Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
chore(asff): fix SH tests
  • Loading branch information
pedrooot committed Jul 4, 2024
commit ae134d74b0defabbc52f8ebf0fe6f37093ce19af
91 changes: 64 additions & 27 deletions tests/providers/aws/lib/security_hub/security_hub_test.py
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
import json
from logging import ERROR, WARNING

import botocore
Expand Down Expand Up @@ -188,16 +189,24 @@ def test_filter_security_hub_findings_per_region_enabled_region_all_statuses(sel
findings = [generate_finding_output(status="PASS", region=AWS_REGION_EU_WEST_1)]
asff = ASFF(findings=findings)
asff_finding = asff.data[0]

assert filter_security_hub_findings_per_region(
asff.data,
False,
[],
enabled_regions,
) == {
AWS_REGION_EU_WEST_1: [asff_finding],
# Convert to JSON to compare
asff_finding_json = str(asff_finding.json(exclude_none=True))
asff_finding_json = {AWS_REGION_EU_WEST_1: [asff_finding_json]}
converted_data = {
region: [json.loads(item.replace("'", '"')) for item in items]
for region, items in asff_finding_json.items()
}

assert (
filter_security_hub_findings_per_region(
asff.data,
False,
[],
enabled_regions,
)
== converted_data
)

def test_filter_security_hub_findings_per_region_all_statuses_MANUAL_finding(self):
enabled_regions = [AWS_REGION_EU_WEST_1]
findings = [
Expand Down Expand Up @@ -241,12 +250,22 @@ def test_filter_security_hub_findings_per_region_FAIL_and_FAIL_statuses(self):
findings = [generate_finding_output(status="FAIL", region=AWS_REGION_EU_WEST_1)]
asff = ASFF(findings=findings)

assert filter_security_hub_findings_per_region(
asff.data,
False,
["FAIL"],
enabled_regions,
) == {AWS_REGION_EU_WEST_1: [asff.data[0]]}
# Convert to JSON to compare
asff_finding_json = str(asff.data[0].json(exclude_none=True))
asff_finding_json = {AWS_REGION_EU_WEST_1: [asff_finding_json]}
converted_data = {
region: [json.loads(item.replace("'", '"')) for item in items]
for region, items in asff_finding_json.items()
}
assert (
filter_security_hub_findings_per_region(
asff.data,
False,
["FAIL"],
enabled_regions,
)
== converted_data
)

def test_filter_security_hub_findings_per_region_send_sh_only_fails_PASS(self):
enabled_regions = [AWS_REGION_EU_WEST_1]
Expand All @@ -265,26 +284,44 @@ def test_filter_security_hub_findings_per_region_send_sh_only_fails_FAIL(self):
findings = [generate_finding_output(status="FAIL", region=AWS_REGION_EU_WEST_1)]
asff = ASFF(findings=findings)

assert filter_security_hub_findings_per_region(
asff.data,
True,
[],
enabled_regions,
) == {AWS_REGION_EU_WEST_1: [asff.data[0]]}
# Convert to JSON to compare
asff_finding_json = str(asff.data[0].json(exclude_none=True))
asff_finding_json = {AWS_REGION_EU_WEST_1: [asff_finding_json]}
converted_data = {
region: [json.loads(item.replace("'", '"')) for item in items]
for region, items in asff_finding_json.items()
}
assert (
filter_security_hub_findings_per_region(
asff.data,
True,
[],
enabled_regions,
)
== converted_data
)

def test_filter_security_hub_findings_per_region_no_audited_regions(self):
enabled_regions = [AWS_REGION_EU_WEST_1]
findings = [generate_finding_output(status="PASS", region=AWS_REGION_EU_WEST_1)]
asff = ASFF(findings=findings)

assert filter_security_hub_findings_per_region(
asff.data,
False,
[],
enabled_regions,
) == {
AWS_REGION_EU_WEST_1: [asff.data[0]],
# Convert to JSON to compare
asff_finding_json = str(asff.data[0].json(exclude_none=True))
asff_finding_json = {AWS_REGION_EU_WEST_1: [asff_finding_json]}
converted_data = {
region: [json.loads(item.replace("'", '"')) for item in items]
for region, items in asff_finding_json.items()
}
assert (
filter_security_hub_findings_per_region(
asff.data,
False,
[],
enabled_regions,
)
== converted_data
)

def test_filter_security_hub_findings_per_region_muted_fail_with_send_sh_only_fails(
self,
Expand Down