Add test to check if terraform builtin rules can be except

stelligent · Jun 23, 2020 · 3d283e3 · 3d283e3
1 parent fc5f787
commit 3d283e3
Show file tree

Hide file tree

Showing 3 changed files with 36 additions and 1 deletion.
diff --git a/Makefile b/Makefile
@@ -69,4 +69,4 @@ cover-cli:
 smoke-test:
 	@$(BUILD_DIR)/config-lint -terraform cli/testdata/smoketest_tf12.tf
 	@$(BUILD_DIR)/config-lint -tfparser tf11 -terraform cli/testdata/smoketest_tf11.tf
-
+	@$(BUILD_DIR)/config-lint -tfparser tf11 -terraform -profile cli/testdata/profile-exceptions.yml cli/testdata/smoketest_exceptions.tf
diff --git a/cli/testdata/profile-exceptions.yml b/cli/testdata/profile-exceptions.yml
@@ -0,0 +1,16 @@
+---
+
+terraform: true
+
+files:
+  - "*.tf"
+
+exceptions:
+  - RuleID: IAM_ROLE_WILDCARD_ACTION
+    ResourceCategory: resource
+    ResourceType: aws_iam_role
+    ResourceID: role2
+    Comments: Just because
+
+tags:
+  - iam
diff --git a/cli/testdata/smoketest_exceptions.tf b/cli/testdata/smoketest_exceptions.tf
@@ -0,0 +1,19 @@
+resource "aws_iam_role" "role2" {
+  name = "role2"
+
+  assume_role_policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": "*",
+      "Principal": {
+        "Service": "ec2.amazonaws.com"
+      },
+      "Effect": "Allow",
+      "Sid": ""
+    }
+  ]
+}
+EOF
+}