package software.amazon.sns.topicpolicy; import org.junit.jupiter.api.BeforeEach; import org.junit.jupiter.api.Test; import org.junit.jupiter.api.extension.ExtendWith; import org.mockito.Mock; import org.mockito.junit.jupiter.MockitoExtension; import software.amazon.awssdk.services.sns.SnsClient; import software.amazon.awssdk.services.sns.model.SetTopicAttributesRequest; import software.amazon.cloudformation.proxy.HandlerErrorCode; import software.amazon.cloudformation.proxy.AmazonWebServicesClientProxy; import software.amazon.cloudformation.proxy.ProxyClient; import software.amazon.cloudformation.proxy.ResourceHandlerRequest; import software.amazon.cloudformation.proxy.ProgressEvent; import software.amazon.cloudformation.proxy.OperationStatus; import software.amazon.awssdk.services.sns.model.NotFoundException; import software.amazon.awssdk.services.sns.model.InvalidParameterException; import software.amazon.awssdk.services.sns.model.InternalErrorException; import software.amazon.awssdk.services.sns.model.AuthorizationErrorException; import software.amazon.awssdk.services.sns.model.InvalidSecurityException; import software.amazon.awssdk.services.sns.model.ThrottledException; import software.amazon.awssdk.services.sns.model.ConcurrentAccessException; import java.time.Duration; import java.util.ArrayList; import java.util.HashMap; import java.util.List; import java.util.Map; import static org.assertj.core.api.Assertions.assertThat; import static org.mockito.ArgumentMatchers.any; import static org.mockito.Mockito.mock; import static org.mockito.Mockito.when; @ExtendWith(MockitoExtension.class) public class DeleteHandlerTest extends AbstractTestBase { @Mock private AmazonWebServicesClientProxy proxy; @Mock private ProxyClient proxyClient; @Mock SnsClient snsClient; DeleteHandler handler; @BeforeEach public void setup() { handler = new DeleteHandler(); proxy = new AmazonWebServicesClientProxy(logger, MOCK_CREDENTIALS, () -> Duration.ofSeconds(600).toMillis()); snsClient = mock(SnsClient.class); proxyClient = MOCK_PROXY(proxy, snsClient); } @Test public void handleRequest_SimpleSuccess() { final List topics = new ArrayList<>(); topics.add("arn:aws:sns:us-east-1:123456789:my-topic1"); topics.add("arn:aws:sns:us-east-1:123456789:my-topic2"); final ResourceModel model = ResourceModel.builder() .id("TempPrimaryIdentifier") .policyDocument(new HashMap<>()) .topics(topics) .build(); final ResourceHandlerRequest request = ResourceHandlerRequest. builder() .desiredResourceState(model) .build(); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxyClient, logger); assertThat(response).isNotNull(); assertThat(response.getStatus()).isEqualTo(OperationStatus.SUCCESS); assertThat(response.getCallbackDelaySeconds()).isEqualTo(0); assertThat(response.getResourceModel()).isNull(); assertThat(response.getResourceModels()).isNull(); assertThat(response.getMessage()).isNull(); assertThat(response.getErrorCode()).isNull(); } @Test public void handleRequest_Failure_NotFoundException() { final List topics = new ArrayList<>(); topics.add("arn:aws:sns:us-east-1:123456789:my-topic110"); topics.add("arn:aws:sns:us-east-1:123456789:my-topic220"); final ResourceModel model = ResourceModel.builder() .id("aws-sns-topic-policy-id-cfnnotfound") .topics(topics) .policyDocument(new HashMap<>()) .build(); final ResourceHandlerRequest request = ResourceHandlerRequest. builder() .desiredResourceState(model) .build(); when(proxyClient.client().setTopicAttributes(any(SetTopicAttributesRequest.class))) .thenThrow(NotFoundException.class); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxyClient, logger); assertThat(response.getStatus()).isEqualTo(OperationStatus.SUCCESS); } @Test public void handleRequest_Failure_InvalidParameterException() { final List topics = new ArrayList<>(); topics.add("arn:aws:sns:us-east-1:123456789:my-topic110"); topics.add("arn:aws:sns:us-east-1:123456789:my-topic220"); final ResourceModel model = ResourceModel.builder() .id("aws-sns-topic-policy-id-CfnInvalidRequestException") .topics(topics) .policyDocument(new HashMap<>()) .build(); final ResourceHandlerRequest request = ResourceHandlerRequest. builder() .desiredResourceState(model) .build(); when(proxyClient.client().setTopicAttributes(any(SetTopicAttributesRequest.class))) .thenThrow(InvalidParameterException.class); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxyClient, logger); assertThat(response.getStatus()).isEqualTo(OperationStatus.FAILED); assertThat(response.getErrorCode()).isEqualTo(HandlerErrorCode.InternalFailure); } @Test public void handleRequest_Failure_Null_Empty_Topics() { final List topics = new ArrayList<>(); Map policyDocument = getSNSPolicy(); final ResourceModel model = ResourceModel.builder() .id("aws-sns-topic-policy-id-CfnInvalidRequestException") .topics(topics) .policyDocument(policyDocument) .build(); final ResourceHandlerRequest request = ResourceHandlerRequest. builder() .desiredResourceState(model) .build(); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxyClient, logger); assertThat(response).isNotNull(); assertThat(response.getErrorCode()).isNull(); assertThat(response.getMessage()).isEqualTo("Value of property Topics must be of type List of String"); assertThat(response.getStatus()).isEqualTo(OperationStatus.FAILED); } @Test public void handleRequest_Failure_InternalErrorException() { final List topics = new ArrayList<>(); topics.add("arn:aws:sns:us-east-1:123456789:my-topic110"); topics.add("arn:aws:sns:us-east-1:123456789:my-topic220"); final ResourceModel model = ResourceModel.builder() .id("aws-sns-topic-policy-id-InternalErrorException") .topics(topics) .policyDocument(new HashMap<>()) .build(); final ResourceHandlerRequest request = ResourceHandlerRequest. builder() .desiredResourceState(model) .build(); when(proxyClient.client().setTopicAttributes(any(SetTopicAttributesRequest.class))) .thenThrow(InternalErrorException.class); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxyClient, logger); assertThat(response.getStatus()).isEqualTo(OperationStatus.FAILED); assertThat(response.getErrorCode()).isEqualTo(HandlerErrorCode.ServiceInternalError); } @Test public void handleRequest_Failure_AuthorizationErrorException() { final List topics = new ArrayList<>(); topics.add("arn:aws:sns:us-east-1:123456789:my-topic110"); topics.add("arn:aws:sns:us-east-1:123456789:my-topic220"); final ResourceModel model = ResourceModel.builder() .id("aws-sns-topic-policy-id-CfnAccessDeniedException") .topics(topics) .policyDocument(new HashMap<>()) .build(); final ResourceHandlerRequest request = ResourceHandlerRequest. builder() .desiredResourceState(model) .build(); when(proxyClient.client().setTopicAttributes(any(SetTopicAttributesRequest.class))) .thenThrow(AuthorizationErrorException.class); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxyClient, logger); assertThat(response.getStatus()).isEqualTo(OperationStatus.FAILED); assertThat(response.getErrorCode()).isEqualTo(HandlerErrorCode.AccessDenied); } @Test public void handleRequest_Failure_InvalidSecurityException() { final List topics = new ArrayList<>(); topics.add("arn:aws:sns:us-east-1:123456789:my-topic110"); topics.add("arn:aws:sns:us-east-1:123456789:my-topic220"); final ResourceModel model = ResourceModel.builder() .id("aws-sns-topic-policy-id-CfnInvalidCredentialsException") .topics(topics) .policyDocument(new HashMap<>()) .build(); final ResourceHandlerRequest request = ResourceHandlerRequest. builder() .desiredResourceState(model) .build(); when(proxyClient.client().setTopicAttributes(any(SetTopicAttributesRequest.class))) .thenThrow(InvalidSecurityException.class); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxyClient, logger); assertThat(response.getStatus()).isEqualTo(OperationStatus.FAILED); assertThat(response.getErrorCode()).isEqualTo(HandlerErrorCode.InvalidCredentials); } @Test public void handleRequest_Failure_ThrottledException() { final List topics = new ArrayList<>(); topics.add("ARN"); Map policyDocument = getSNSPolicy(); final ResourceModel model = ResourceModel.builder() .id("aws-sns-topic-policy-id-CfnThrottlingException") .topics(topics) .policyDocument(policyDocument) .build(); final ResourceHandlerRequest request = ResourceHandlerRequest. builder() .desiredResourceState(model) .build(); when(proxyClient.client().setTopicAttributes(any(SetTopicAttributesRequest.class))) .thenThrow(ThrottledException.class); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxyClient, logger); assertThat(response.getStatus()).isEqualTo(OperationStatus.FAILED); assertThat(response.getErrorCode()).isEqualTo(HandlerErrorCode.Throttling); } @Test public void handleRequest_Failure_Null_ResourceModel() { final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .desiredResourceState(null) .build(); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxyClient, logger); assertThat(response).isNotNull(); assertThat(response.getErrorCode()).isEqualTo(HandlerErrorCode.InvalidRequest); assertThat(response.getMessage()).isEqualTo("Invalid request"); assertThat(response.getStatus()).isEqualTo(OperationStatus.FAILED); } @Test public void handleRequest_Failure_GeneralException() { final List topics = new ArrayList<>(); topics.add("ARN"); Map policyDocument = getSNSPolicy(); final ResourceModel model = ResourceModel.builder() .id("aws-sns-topic-policy-id-CfnGeneralServiceException") .topics(topics) .policyDocument(new HashMap<>()) .policyDocument(policyDocument) .build(); final ResourceHandlerRequest request = ResourceHandlerRequest. builder() .desiredResourceState(model) .build(); when(proxyClient.client().setTopicAttributes(any(SetTopicAttributesRequest.class))) .thenThrow(ConcurrentAccessException.class); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxyClient, logger); assertThat(response.getStatus()).isEqualTo(OperationStatus.FAILED); assertThat(response.getErrorCode()).isEqualTo(HandlerErrorCode.GeneralServiceException); } }