@@ -31,81 +31,16 @@ run "verify_session_logging" {
31
31
}
32
32
}
33
33
34
- run "verify_launch_template " {
34
+ run "verify_session_logging_bucket_logic " {
35
35
command = plan
36
36
37
37
variables {
38
- instance_type = " c6g.nano"
39
- monitoring_enabled = true
40
- associate_public_ip_address = false
41
- metadata_imdsv2_enabled = true
42
- namespace = " mp"
43
- stage = " test"
44
- name = " ssm-agent"
38
+ session_logging_enabled = true
39
+ session_logging_bucket_name = " " # Empty name should trigger bucket creation
45
40
}
46
41
47
42
assert {
48
- condition = aws_launch_template. default . instance_type == " c6g.nano"
49
- error_message = " Launch template instance type does not match"
50
- }
51
-
52
- assert {
53
- condition = aws_launch_template. default . monitoring [0 ]. enabled == true
54
- error_message = " Instance monitoring not enabled"
55
- }
56
-
57
- assert {
58
- condition = aws_launch_template. default . metadata_options [0 ]. http_tokens == " required"
59
- error_message = " IMDSv2 not enforced in launch template"
60
- }
61
-
62
- assert {
63
- condition = aws_launch_template. default . iam_instance_profile [0 ]. name == " mp-test-ssm-agent-role"
64
- error_message = " IAM instance profile name does not match expected value"
65
- }
66
-
67
- assert {
68
- condition = aws_launch_template. default . iam_instance_profile [0 ]. name == aws_iam_instance_profile. default . name
69
- error_message = " Launch template IAM instance profile name does not match the created instance profile"
70
- }
71
- }
72
-
73
- run "verify_autoscaling_group" {
74
- command = plan
75
-
76
- variables {
77
- max_size = 2
78
- min_size = 1
79
- desired_capacity = 1
80
- subnet_ids = [" subnet-12345678" ]
81
- }
82
-
83
- assert {
84
- condition = aws_autoscaling_group. default . max_size == 2
85
- error_message = " ASG max size not set correctly"
86
- }
87
-
88
- assert {
89
- condition = aws_autoscaling_group. default . min_size == 1
90
- error_message = " ASG min size not set correctly"
91
- }
92
-
93
- assert {
94
- condition = aws_autoscaling_group. default . desired_capacity == 1
95
- error_message = " ASG desired capacity not set correctly"
96
- }
97
- }
98
-
99
-
100
- run "verify_s3_bucket_configuration" {
101
- command = plan
102
-
103
- variables {
104
- session_logging_enabled = true
105
- }
106
-
107
- assert {
108
- condition = module. logs_bucket . enabled == true
109
- error_message = " S3 bucket session logging bucket isn't enabled when set to enabled."
43
+ condition = local. logs_bucket_enabled == true
44
+ error_message = " Logs bucket should be enabled when session logging is enabled and no bucket name is provided"
110
45
}
111
46
}
0 commit comments