package com.amazonaws.ssm.parameter; import com.amazonaws.AmazonServiceException; import software.amazon.awssdk.services.ssm.SsmClient; import software.amazon.awssdk.services.ssm.model.AddTagsToResourceRequest; import software.amazon.awssdk.services.ssm.model.AddTagsToResourceResponse; import software.amazon.awssdk.services.ssm.model.GetParametersResponse; import software.amazon.awssdk.services.ssm.model.GetParametersRequest; import software.amazon.awssdk.services.ssm.model.Parameter; import software.amazon.awssdk.services.ssm.model.ParameterInlinePolicy; import software.amazon.awssdk.services.ssm.model.ParameterMetadata; import software.amazon.awssdk.services.ssm.model.ParameterTier; import software.amazon.awssdk.services.ssm.model.InternalServerErrorException; import software.amazon.awssdk.services.ssm.model.ParameterAlreadyExistsException; import software.amazon.awssdk.services.ssm.model.PutParameterResponse; import software.amazon.awssdk.services.ssm.model.PutParameterRequest; import software.amazon.awssdk.services.ssm.model.ParameterTier; import software.amazon.awssdk.services.ssm.model.RemoveTagsFromResourceRequest; import software.amazon.awssdk.services.ssm.model.RemoveTagsFromResourceResponse; import software.amazon.cloudformation.exceptions.CfnAlreadyExistsException; import software.amazon.cloudformation.exceptions.CfnGeneralServiceException; import software.amazon.cloudformation.exceptions.CfnInvalidRequestException; import software.amazon.cloudformation.exceptions.CfnServiceInternalErrorException; import software.amazon.cloudformation.exceptions.CfnThrottlingException; import software.amazon.cloudformation.proxy.AmazonWebServicesClientProxy; import software.amazon.cloudformation.proxy.HandlerErrorCode; import software.amazon.cloudformation.proxy.ProxyClient; import software.amazon.cloudformation.proxy.ProgressEvent; import software.amazon.cloudformation.proxy.ResourceHandlerRequest; import software.amazon.cloudformation.proxy.OperationStatus; import org.junit.jupiter.api.BeforeEach; import org.junit.jupiter.api.Test; import org.junit.jupiter.api.extension.ExtendWith; import org.mockito.Mock; import org.mockito.junit.jupiter.MockitoExtension; import java.time.Duration; import java.util.Collections; import java.util.HashMap; import java.util.Map; import static org.assertj.core.api.Assertions.assertThat; import static org.mockito.ArgumentMatchers.any; import static org.mockito.Mockito.atLeastOnce; import static org.mockito.Mockito.mock; import static org.mockito.Mockito.never; import static org.mockito.Mockito.times; import static org.mockito.Mockito.verify; import static org.mockito.Mockito.when; import static org.mockito.Mockito.verifyNoMoreInteractions; @ExtendWith(MockitoExtension.class) public class UpdateHandlerTest extends AbstractTestBase { @Mock private AmazonWebServicesClientProxy proxy; @Mock private ProxyClient proxySsmClient; @Mock SsmClient ssmClient; private UpdateHandler handler; private ResourceModel RESOURCE_MODEL; private Map PREVIOUS_TAG_SET_NO_CHANGE; private Map TAG_SET_WITH_CHANGE; @BeforeEach public void setup() { handler = new UpdateHandler(); ssmClient = mock(SsmClient.class); proxy = new AmazonWebServicesClientProxy(logger, MOCK_CREDENTIALS, () -> Duration.ofSeconds(600).toMillis()); proxySsmClient = MOCK_PROXY(proxy, ssmClient); RESOURCE_MODEL = ResourceModel.builder() .description(DESCRIPTION) .name(NAME) .value(VALUE) .type(TYPE_STRING) .tags(TAG_SET) .build(); PREVIOUS_TAG_SET_NO_CHANGE = new HashMap(); TAG_SET_WITH_CHANGE = new HashMap(); } @Test public void handleRequest_SimpleSuccess() { final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); final PutParameterResponse putParameterResponse = PutParameterResponse.builder() .version(VERSION) .tier(ParameterTier.STANDARD) .build(); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))).thenReturn(putParameterResponse); final RemoveTagsFromResourceResponse removeTagsFromResourceResponse = RemoveTagsFromResourceResponse.builder().build(); when(proxySsmClient.client().removeTagsFromResource(any(RemoveTagsFromResourceRequest.class))).thenReturn(removeTagsFromResourceResponse); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousSystemTags(PREVIOUS_TAG_SET) .logicalResourceIdentifier("logicalId").build(); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); assertThat(response).isNotNull(); assertThat(response.getStatus()).isEqualTo(OperationStatus.SUCCESS); assertThat(response.getCallbackContext()).isNull(); assertThat(response.getCallbackDelaySeconds()).isEqualTo(0); assertThat(response.getResourceModels()).isNull(); assertThat(response.getMessage()).isNull(); assertThat(response.getErrorCode()).isNull(); verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_SimpleSuccess_WithSameResourceModel() { final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); final RemoveTagsFromResourceResponse removeTagsFromResourceResponse = RemoveTagsFromResourceResponse.builder().build(); when(proxySsmClient.client().removeTagsFromResource(any(RemoveTagsFromResourceRequest.class))).thenReturn(removeTagsFromResourceResponse); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET) .logicalResourceIdentifier("logicalId").build(); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); assertThat(response).isNotNull(); assertThat(response.getStatus()).isEqualTo(OperationStatus.SUCCESS); assertThat(response.getCallbackContext()).isNull(); assertThat(response.getCallbackDelaySeconds()).isEqualTo(0); assertThat(response.getResourceModels()).isNull(); assertThat(response.getMessage()).isNull(); assertThat(response.getErrorCode()).isNull(); verify(proxySsmClient.client(), times(0)).putParameter(any(PutParameterRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_SimpleSuccess_WithoutTagsChange() { PREVIOUS_TAG_SET_NO_CHANGE.putAll(TAG_SET); PREVIOUS_TAG_SET_NO_CHANGE.putAll(SYSTEM_TAGS_SET); final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); final PutParameterResponse putParameterResponse = PutParameterResponse.builder() .version(VERSION) .tier(ParameterTier.STANDARD) .build(); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))).thenReturn(putParameterResponse); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET_NO_CHANGE) .logicalResourceIdentifier("logicalId").build(); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); assertThat(response).isNotNull(); assertThat(response.getStatus()).isEqualTo(OperationStatus.SUCCESS); assertThat(response.getCallbackContext()).isNull(); assertThat(response.getCallbackDelaySeconds()).isEqualTo(0); assertThat(response.getResourceModels()).isNull(); assertThat(response.getMessage()).isNull(); assertThat(response.getErrorCode()).isNull(); verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_SimpleSuccess_WithTagsAdd() { TAG_SET_WITH_CHANGE.put("AddTagKey", "AddTagValue"); PREVIOUS_TAG_SET_NO_CHANGE.putAll(TAG_SET); PREVIOUS_TAG_SET_NO_CHANGE.putAll(SYSTEM_TAGS_SET); final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); final PutParameterResponse putParameterResponse = PutParameterResponse.builder() .version(VERSION) .tier(ParameterTier.STANDARD) .build(); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))).thenReturn(putParameterResponse); final AddTagsToResourceResponse addTagsToResourceResponse = AddTagsToResourceResponse.builder().build(); when(proxySsmClient.client().addTagsToResource(any(AddTagsToResourceRequest.class))).thenReturn(addTagsToResourceResponse); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET_WITH_CHANGE) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET_NO_CHANGE) .logicalResourceIdentifier("logicalId").build(); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); assertThat(response).isNotNull(); assertThat(response.getStatus()).isEqualTo(OperationStatus.SUCCESS); assertThat(response.getCallbackContext()).isNull(); assertThat(response.getCallbackDelaySeconds()).isEqualTo(0); assertThat(response.getResourceModels()).isNull(); assertThat(response.getMessage()).isNull(); assertThat(response.getErrorCode()).isNull(); verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(proxySsmClient.client(), times(1)).addTagsToResource(any(AddTagsToResourceRequest.class)); verify(proxySsmClient.client(), times(0)).removeTagsFromResource(any(RemoveTagsFromResourceRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_SimpleSuccess_WithTagsChange() { TAG_SET_WITH_CHANGE.put("AddTagKey", "AddTagValue"); PREVIOUS_TAG_SET_NO_CHANGE.putAll(TAG_SET); PREVIOUS_TAG_SET_NO_CHANGE.putAll(SYSTEM_TAGS_SET); PREVIOUS_TAG_SET_NO_CHANGE.put("AddTagKey2", "AddTagValue2"); final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); final PutParameterResponse putParameterResponse = PutParameterResponse.builder() .version(VERSION) .tier(ParameterTier.STANDARD) .build(); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))).thenReturn(putParameterResponse); final RemoveTagsFromResourceResponse removeTagsFromResourceResponse = RemoveTagsFromResourceResponse.builder().build(); when(proxySsmClient.client().removeTagsFromResource(any(RemoveTagsFromResourceRequest.class))).thenReturn(removeTagsFromResourceResponse); final AddTagsToResourceResponse addTagsToResourceResponse = AddTagsToResourceResponse.builder().build(); when(proxySsmClient.client().addTagsToResource(any(AddTagsToResourceRequest.class))).thenReturn(addTagsToResourceResponse); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET_WITH_CHANGE) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET_NO_CHANGE) .logicalResourceIdentifier("logicalId").build(); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); assertThat(response).isNotNull(); assertThat(response.getStatus()).isEqualTo(OperationStatus.SUCCESS); assertThat(response.getCallbackContext()).isNull(); assertThat(response.getCallbackDelaySeconds()).isEqualTo(0); assertThat(response.getResourceModels()).isNull(); assertThat(response.getMessage()).isNull(); assertThat(response.getErrorCode()).isNull(); verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(proxySsmClient.client(), times(1)).addTagsToResource(any(AddTagsToResourceRequest.class)); verify(proxySsmClient.client(), times(1)).removeTagsFromResource(any(RemoveTagsFromResourceRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_SimpleSuccess_WithTagsRemove() { PREVIOUS_TAG_SET_NO_CHANGE.putAll(TAG_SET); PREVIOUS_TAG_SET_NO_CHANGE.putAll(SYSTEM_TAGS_SET); PREVIOUS_TAG_SET_NO_CHANGE.put("AddTagKey", "AddTagValue"); final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); final PutParameterResponse putParameterResponse = PutParameterResponse.builder() .version(VERSION) .tier(ParameterTier.STANDARD) .build(); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))).thenReturn(putParameterResponse); final RemoveTagsFromResourceResponse removeTagsFromResourceResponse = RemoveTagsFromResourceResponse.builder().build(); when(proxySsmClient.client().removeTagsFromResource(any(RemoveTagsFromResourceRequest.class))).thenReturn(removeTagsFromResourceResponse); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET_WITH_CHANGE) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET_NO_CHANGE) .logicalResourceIdentifier("logicalId").build(); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); assertThat(response).isNotNull(); assertThat(response.getStatus()).isEqualTo(OperationStatus.SUCCESS); assertThat(response.getCallbackContext()).isNull(); assertThat(response.getCallbackDelaySeconds()).isEqualTo(0); assertThat(response.getResourceModels()).isNull(); assertThat(response.getMessage()).isNull(); assertThat(response.getErrorCode()).isNull(); verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(proxySsmClient.client(), times(0)).addTagsToResource(any(AddTagsToResourceRequest.class)); verify(proxySsmClient.client(), times(1)).removeTagsFromResource(any(RemoveTagsFromResourceRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_AddTagFailWithInternalServerErrorException() { TAG_SET_WITH_CHANGE.put("AddTagKey", "AddTagValue"); PREVIOUS_TAG_SET_NO_CHANGE.putAll(TAG_SET); PREVIOUS_TAG_SET_NO_CHANGE.putAll(SYSTEM_TAGS_SET); final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); when(proxySsmClient.client().addTagsToResource(any(AddTagsToResourceRequest.class))).thenThrow(InternalServerErrorException.builder().build()); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET_WITH_CHANGE) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET_NO_CHANGE) .logicalResourceIdentifier("logicalId").build(); try { final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); } catch (CfnServiceInternalErrorException ex) { assertThat(ex).isInstanceOf(CfnServiceInternalErrorException.class); } verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_AddTagFailWithAmazonServiceException() { TAG_SET_WITH_CHANGE.put("AddTagKey", "AddTagValue"); PREVIOUS_TAG_SET_NO_CHANGE.putAll(TAG_SET); PREVIOUS_TAG_SET_NO_CHANGE.putAll(SYSTEM_TAGS_SET); final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); AmazonServiceException amazonServiceException = new AmazonServiceException("Client error"); when(proxySsmClient.client().addTagsToResource(any(AddTagsToResourceRequest.class))).thenThrow(amazonServiceException); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET_WITH_CHANGE) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET_NO_CHANGE) .logicalResourceIdentifier("logicalId").build(); try { final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); } catch (CfnGeneralServiceException ex) { assertThat(ex).isInstanceOf(CfnGeneralServiceException.class); } verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_RemoveTagFailWithInternalServerErrorException() { PREVIOUS_TAG_SET_NO_CHANGE.putAll(TAG_SET); PREVIOUS_TAG_SET_NO_CHANGE.putAll(SYSTEM_TAGS_SET); PREVIOUS_TAG_SET_NO_CHANGE.put("AddTagKey", "AddTagValue"); final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); when(proxySsmClient.client().removeTagsFromResource(any(RemoveTagsFromResourceRequest.class))).thenThrow(InternalServerErrorException.builder().build()); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET_WITH_CHANGE) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET_NO_CHANGE) .logicalResourceIdentifier("logicalId").build(); try { final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); } catch (CfnServiceInternalErrorException ex) { assertThat(ex).isInstanceOf(CfnServiceInternalErrorException.class); } verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_RemoveTagFailWithAmazonServiceException() { PREVIOUS_TAG_SET_NO_CHANGE.putAll(TAG_SET); PREVIOUS_TAG_SET_NO_CHANGE.putAll(SYSTEM_TAGS_SET); PREVIOUS_TAG_SET_NO_CHANGE.put("AddTagKey", "AddTagValue"); final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); AmazonServiceException amazonServiceException = new AmazonServiceException("Client error"); when(proxySsmClient.client().removeTagsFromResource(any(RemoveTagsFromResourceRequest.class))).thenThrow(amazonServiceException); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET_WITH_CHANGE) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET_NO_CHANGE) .logicalResourceIdentifier("logicalId").build(); try { final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); } catch (CfnGeneralServiceException ex) { assertThat(ex).isInstanceOf(CfnGeneralServiceException.class); } verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_SecureStringFailure() { RESOURCE_MODEL = ResourceModel.builder() .description(DESCRIPTION) .value(VALUE) .type(TYPE_SECURE_STRING) .tags(TAG_SET) .build(); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET) .logicalResourceIdentifier("logicalId").build(); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); assertThat(response).isNotNull(); assertThat(response.getStatus()).isEqualTo(OperationStatus.FAILED); assertThat(response.getCallbackContext()).isNull(); assertThat(response.getCallbackDelaySeconds()).isEqualTo(0); assertThat(response.getResourceModels()).isNull(); assertThat(response.getMessage()).isEqualTo("SSM Parameters of type SecureString cannot be updated using CloudFormation"); assertThat(response.getErrorCode()).isEqualTo(HandlerErrorCode.InvalidRequest); verify(ssmClient, never()).serviceName(); verifyNoMoreInteractions(proxySsmClient.client()); } @Test public void handleRequest_SimpleSuccess_WithImageDataType() { final PutParameterResponse putParameterResponse = PutParameterResponse.builder() .version(VERSION) .tier(ParameterTier.STANDARD) .build(); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))).thenReturn(putParameterResponse); RESOURCE_MODEL = ResourceModel.builder() .description(DESCRIPTION) .name(NAME) .value(VALUE) .type(TYPE_STRING) .tags(TAG_SET) .dataType("aws:ec2:image") .build(); final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); final RemoveTagsFromResourceResponse removeTagsFromResourceResponse = RemoveTagsFromResourceResponse.builder().build(); when(proxySsmClient.client().removeTagsFromResource(any(RemoveTagsFromResourceRequest.class))).thenReturn(removeTagsFromResourceResponse); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET) .logicalResourceIdentifier("logicalId").build(); final ProgressEvent response = handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); assertThat(response).isNotNull(); assertThat(response.getStatus()).isEqualTo(OperationStatus.SUCCESS); assertThat(response.getCallbackContext()).isNull(); assertThat(response.getCallbackDelaySeconds()).isEqualTo(0); assertThat(response.getResourceModels()).isNull(); assertThat(response.getMessage()).isNull(); assertThat(response.getErrorCode()).isNull(); verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_AmazonServiceException400ThrottlingException() { AmazonServiceException amazonServiceException = new AmazonServiceException("Client error"); amazonServiceException.setStatusCode(429); amazonServiceException.setErrorCode("ThrottlingException"); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))) .thenThrow(amazonServiceException); final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET) .logicalResourceIdentifier("logical_id").build(); try { handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); } catch (CfnThrottlingException ex) { assertThat(ex).isInstanceOf(CfnThrottlingException.class); } verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_ParameterAlreadyExistsException() { final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))) .thenThrow(ParameterAlreadyExistsException.builder().build()); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET) .logicalResourceIdentifier("logical_id").build(); try { handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); } catch (CfnAlreadyExistsException ex) { assertThat(ex).isInstanceOf(CfnAlreadyExistsException.class); } verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_IllegalArgumentException() { final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))) .thenThrow(new IllegalArgumentException("Invalid request")); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET) .logicalResourceIdentifier("logical_id").build(); try { handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); } catch (CfnInvalidRequestException ex) { assertThat(ex).isInstanceOf(CfnInvalidRequestException.class); } verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_AmazonServiceException500Exception() { final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); AmazonServiceException amazonServiceException = new AmazonServiceException("Client error"); amazonServiceException.setStatusCode(500); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))) .thenThrow(amazonServiceException); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET) .logicalResourceIdentifier("logical_id").build(); try { handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); } catch (CfnGeneralServiceException ex) { assertThat(ex).isInstanceOf(CfnGeneralServiceException.class); } verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_AmazonServiceException400NonThrottlingException() { AmazonServiceException amazonServiceException = new AmazonServiceException("Client error"); amazonServiceException.setStatusCode(400); amazonServiceException.setErrorCode("Invalid Input"); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))) .thenThrow(amazonServiceException); final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET) .logicalResourceIdentifier("logical_id").build(); try { handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); } catch (CfnGeneralServiceException ex) { assertThat(ex).isInstanceOf(CfnGeneralServiceException.class); } verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } @Test public void handleRequest_AmazonServiceExceptionInternalServerError() { final GetParametersResponse getParametersResponse = GetParametersResponse.builder() .parameters(Parameter.builder() .name(NAME) .type(TYPE_STRING) .value(VALUE) .version(VERSION).build()) .build(); when(proxySsmClient.client().getParameters(any(GetParametersRequest.class))).thenReturn(getParametersResponse); when(proxySsmClient.client().putParameter(any(PutParameterRequest.class))) .thenThrow(InternalServerErrorException.builder().build()); final ResourceHandlerRequest request = ResourceHandlerRequest.builder() .clientRequestToken("token") .desiredResourceTags(TAG_SET) .systemTags(SYSTEM_TAGS_SET) .desiredResourceState(RESOURCE_MODEL) .previousResourceTags(PREVIOUS_TAG_SET) .logicalResourceIdentifier("logical_id").build(); try { handler.handleRequest(proxy, request, new CallbackContext(), proxySsmClient, logger); } catch (CfnServiceInternalErrorException ex) { assertThat(ex).isInstanceOf(CfnServiceInternalErrorException.class); } verify(proxySsmClient.client()).putParameter(any(PutParameterRequest.class)); verify(ssmClient, atLeastOnce()).serviceName(); } }