pk/atst
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Handle case where baseline policy already exists

Browse Source
This commit is contained in:
richard-dds 2019-09-25 15:56:04 -04:00
parent 4f648d7885
commit 73f69650df
1 changed files with 14 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
atst/domain/csp/cloud.py
View File

@ -7,6 +7,8 @@ from atst.models.user import User
from atst.models.environment import Environment
from atst.models.environment_role import EnvironmentRole
from botocore.exceptions import ClientError
class GeneralCSPException(Exception):
pass
@ -628,13 +630,18 @@ class AWSCloudProvider(CloudProviderInterface):
created_policies = []
for policy in self.BASELINE_POLICIES:
created_policy = client.create_policy(
PolicyName=policy["name"],
Path=policy["path"],
PolicyDocument=json.loads(policy["document"]),
Description=policy["description"],
)
created_policies.append(created_policy)
try:
response = client.create_policy(
PolicyName=policy["name"],
Path=policy["path"],
PolicyDocument=json.dumps(policy["document"]),
Description=policy["description"],
)
created_policies.append({policy["name"]: response["Policy"]["Arn"]})
except client.exceptions.EntityAlreadyExistsException:
# Policy already exists. We can determine its ARN based on the account id and policy path / name.
policy_arn = f"arn:aws:iam:{csp_environment_id}:policy{policy['path']}{policy['name']}"
created_policies.append({policy["name"]: policy_arn})
return {"policies": created_policies}