stackd/testdata/lambda/resource_policy_executable.json at main · radkawar/stackd · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
{
  "account": "000000000000",
  "region": "us-east-1",
  "consumer": "scripts/lambda_resource_policy_sdk_smoke/main.go",
  "sdk": "aws-sdk-go-v2",
  "runtime": "python3.12",
  "failedBefore": {
    "binary": "stackd-lambda-finish-snapshot-20260928-3",
    "operation": "PutResourcePolicy",
    "principal": {"Federated": "cognito-identity.amazonaws.com"},
    "httpStatus": 400,
    "requestId": "eaec54cf5ffc7d103400c44a56ab8eb8",
    "code": "InvalidParameterValueException",
    "message": "invalid resource policy principal: federated principals require an IAM trust-policy provider validator",
    "cleanup": {"functions": [], "roles": [], "users": [], "log_groups": []}
  },
  "passedAfter": {
    "binary": "stackd-lambda-finish-snapshot-20260928-6",
    "binarySHA256": "332f1ebba7fe86c863954ad3911f233af6317044cb9e61c708d513563223bc7e",
    "exitStatus": 0,
    "contextRepresentation": "Single Context map: absent key or nil slice means missing; nonnil empty slice means present empty set.",
    "observations": {
      "array_policy_legacy_add_remove": true,
      "federated_literals_not_wildcard_grants": true,
      "idempotent_delete": true,
      "latest_and_version_runtime": true,
      "public_and_source_bound_authorization": true,
      "replacement_and_revision_cas": true,
      "scoped_principal_iam_denial_recovery": true
    },
    "cleanup": {"functions": [], "roles": [], "users": [], "log_groups": []}
  },
  "nativeAdmissionFixtures": [
    "resource_policy_native.json",
    "resource_policy_extended_native.json",
    "resource_policy_validation_native.json",
    "resource_policy_federation_native.json",
    "resource_policy_federation_shapes_native.json"
  ],
  "nativePrincipalContextFixtures": [
    "resource_policy_principal_context_extended_native.json",
    "resource_policy_principal_shape_native.json",
    "resource_policy_principal_empty_native.json",
    "resource_policy_principal_mixed_native.json",
    "resource_policy_principal_sets_native.json",
    "resource_policy_principal_presence_native.json",
    "resource_policy_federated_remove_native.json"
  ],
  "representationNote": "Native mixed-kind Null/ForAnyValue/ForAllValues decisions are observed. CLI6 preserves those decisions using only the authoritative Context map: absent/nil values are missing, nonnil empty values are present empty sets. This is a local representation inferred from the observed decisions, not a claim about AWS internal data structures."
}