t3-code-android-nightly/.repos/alchemy-effect/packages/alchemy/test/AWS/IAM/Identity.test.ts

import * as AWS from "@/AWS";
import { Group, GroupMembership, InstanceProfile, Role, User } from "@/AWS/IAM";
import * as Test from "@/Test/Alchemy";
import * as IAM from "@distilled.cloud/aws/iam";
import { expect } from "alchemy-test";
import * as Effect from "effect/Effect";

const { test } = Test.make({ providers: AWS.providers() });

test.provider(
  "create user, group membership, and instance profile",
  (stack) =>
    Effect.gen(function* () {
      yield* stack.destroy();

      const resources = yield* stack.deploy(
        Effect.gen(function* () {
          const role = yield* Role("ProfileRole", {
            assumeRolePolicyDocument: {
              Version: "2012-10-17",
              Statement: [
                {
                  Effect: "Allow",
                  Principal: { Service: "ec2.amazonaws.com" },
                  Action: ["sts:AssumeRole"],
                },
              ],
            },
          });
          const user = yield* User("IamUser", {
            tags: {
              env: "test",
            },
          });
          const group = yield* Group("IamGroup", {});
          const membership = yield* GroupMembership("IamMembership", {
            groupName: group.groupName,
            userNames: [user.userName],
          });
          const profile = yield* InstanceProfile("IamInstanceProfile", {
            roleName: role.roleName,
            tags: {
              env: "test",
            },
          });

          return { user, group, membership, profile, role };
        }),
      );

      const group = yield* IAM.getGroup({
        GroupName: resources.group.groupName,
      });
      expect(
        group.Users.some((user) => user.UserName === resources.user.userName),
      ).toBe(true);

      const profile = yield* IAM.getInstanceProfile({
        InstanceProfileName: resources.profile.instanceProfileName,
      });
      expect(profile.InstanceProfile.Roles[0]?.RoleName).toBe(
        resources.role.roleName,
      );

      yield* stack.destroy();

      // Everything the stack created is gone.
      const deletedUser = yield* IAM.getUser({
        UserName: resources.user.userName,
      }).pipe(Effect.option);
      expect(deletedUser._tag).toBe("None");
      const deletedGroup = yield* IAM.getGroup({
        GroupName: resources.group.groupName,
      }).pipe(Effect.option);
      expect(deletedGroup._tag).toBe("None");
      const deletedProfile = yield* IAM.getInstanceProfile({
        InstanceProfileName: resources.profile.instanceProfileName,
      }).pipe(Effect.option);
      expect(deletedProfile._tag).toBe("None");
      const deletedRole = yield* IAM.getRole({
        RoleName: resources.role.roleName,
      }).pipe(Effect.option);
      expect(deletedRole._tag).toBe("None");
    }),
  { tags: ["provider:aws", "provider:aws:iam", "live"] },
);