ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-04 19:21:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(s3): add s3_bucket_cross_region_replication check (#4761)

Browse Source 
Co-authored-by: Sergio <sergio@prowler.com>
This commit is contained in:
Hugo Pereira Brito
2024-08-19 18:42:42 +02:00
committed by GitHub
parent 38b73fb0c0
commit 5d42ae6e6f
6 changed files with 773 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/providers/aws/services/s3/s3_service_test.py
+43
View File
@@ -386,6 +386,49 @@ class Test_S3_Service:
assert s3.buckets[bucket_arn].region == AWS_REGION_US_EAST_1
assert s3.buckets[bucket_arn].object_lock
# Test S3 Get Bucket Replication
@mock_aws
def test_get_bucket_replication(self):
# Generate S3 Client
s3_client = client("s3")
# Create S3 Bucket
bucket_name = "test-bucket"
bucket_arn = f"arn:aws:s3:::{bucket_name}"
s3_client.create_bucket(
Bucket=bucket_name,
ObjectOwnership="BucketOwnerEnforced",
)
s3_client.put_bucket_versioning(
Bucket=bucket_name,
VersioningConfiguration={"Status": "Enabled"},
)
s3_client.put_bucket_replication(
Bucket=bucket_name,
ReplicationConfiguration={
"Role": "arn:aws:iam::123456789012:role/replication-role",
"Rules": [
{
"ID": "rule1",
"Status": "Enabled",
"Prefix": "",
"Destination": {
"Bucket": bucket_arn,
"StorageClass": "STANDARD",
},
}
],
},
)
# S3 client for this test class
aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
s3 = S3(aws_provider)
assert len(s3.buckets) == 1
assert s3.buckets[bucket_arn].name == bucket_name
assert s3.buckets[bucket_arn].region == AWS_REGION_US_EAST_1
assert s3.buckets[bucket_arn].replication_rules[0].status == "Enabled"
assert s3.buckets[bucket_arn].replication_rules[0].destination == bucket_arn
# Test S3 List Access Points
@patch("botocore.client.BaseClient._make_api_call", new=mock_make_api_call)
@mock_aws