@@ -31,81 +31,16 @@ run "verify_session_logging" {
3131 }
3232}
3333
34- run "verify_launch_template " {
34+ run "verify_session_logging_bucket_logic " {
3535 command = plan
3636
3737 variables {
38- instance_type = " c6g.nano"
39- monitoring_enabled = true
40- associate_public_ip_address = false
41- metadata_imdsv2_enabled = true
42- namespace = " mp"
43- stage = " test"
44- name = " ssm-agent"
38+ session_logging_enabled = true
39+ session_logging_bucket_name = " " # Empty name should trigger bucket creation
4540 }
4641
4742 assert {
48- condition = aws_launch_template. default . instance_type == " c6g.nano"
49- error_message = " Launch template instance type does not match"
50- }
51-
52- assert {
53- condition = aws_launch_template. default . monitoring [0 ]. enabled == true
54- error_message = " Instance monitoring not enabled"
55- }
56-
57- assert {
58- condition = aws_launch_template. default . metadata_options [0 ]. http_tokens == " required"
59- error_message = " IMDSv2 not enforced in launch template"
60- }
61-
62- assert {
63- condition = aws_launch_template. default . iam_instance_profile [0 ]. name == " mp-test-ssm-agent-role"
64- error_message = " IAM instance profile name does not match expected value"
65- }
66-
67- assert {
68- condition = aws_launch_template. default . iam_instance_profile [0 ]. name == aws_iam_instance_profile. default . name
69- error_message = " Launch template IAM instance profile name does not match the created instance profile"
70- }
71- }
72-
73- run "verify_autoscaling_group" {
74- command = plan
75-
76- variables {
77- max_size = 2
78- min_size = 1
79- desired_capacity = 1
80- subnet_ids = [" subnet-12345678" ]
81- }
82-
83- assert {
84- condition = aws_autoscaling_group. default . max_size == 2
85- error_message = " ASG max size not set correctly"
86- }
87-
88- assert {
89- condition = aws_autoscaling_group. default . min_size == 1
90- error_message = " ASG min size not set correctly"
91- }
92-
93- assert {
94- condition = aws_autoscaling_group. default . desired_capacity == 1
95- error_message = " ASG desired capacity not set correctly"
96- }
97- }
98-
99-
100- run "verify_s3_bucket_configuration" {
101- command = plan
102-
103- variables {
104- session_logging_enabled = true
105- }
106-
107- assert {
108- condition = module. logs_bucket . enabled == true
109- error_message = " S3 bucket session logging bucket isn't enabled when set to enabled."
43+ condition = local. logs_bucket_enabled == true
44+ error_message = " Logs bucket should be enabled when session logging is enabled and no bucket name is provided"
11045 }
11146}
0 commit comments