46 lines
1.9 KiB
Python
46 lines
1.9 KiB
Python
# Copyright 2015 Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"). You
|
|
# may not use this file except in compliance with the License. A copy of
|
|
# the License is located at
|
|
#
|
|
# http://aws.amazon.com/apache2.0/
|
|
#
|
|
# or in the "license" file accompanying this file. This file is
|
|
# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
|
|
# ANY KIND, either express or implied. See the License for the specific
|
|
# language governing permissions and limitations under the License.
|
|
import botocore.session
|
|
from botocore.exceptions import ClientError
|
|
from tests import unittest
|
|
|
|
|
|
class TestSTS(unittest.TestCase):
|
|
def setUp(self):
|
|
self.session = botocore.session.get_session()
|
|
credentials = self.session.get_credentials()
|
|
if credentials.token is not None:
|
|
self.skipTest('STS tests require long-term credentials')
|
|
|
|
def test_regionalized_endpoints(self):
|
|
sts = self.session.create_client('sts', region_name='ap-southeast-1')
|
|
response = sts.get_session_token()
|
|
# Do not want to be revealing any temporary keys if the assertion fails
|
|
self.assertIn('Credentials', response.keys())
|
|
|
|
# Since we have to activate STS regionalization, we will test
|
|
# that you can send an STS request to a regionalized endpoint
|
|
# by making a call with the explicitly wrong region name
|
|
sts = self.session.create_client(
|
|
'sts',
|
|
region_name='ap-southeast-1',
|
|
endpoint_url='https://sts.us-west-2.amazonaws.com',
|
|
)
|
|
self.assertEqual(sts.meta.region_name, 'ap-southeast-1')
|
|
self.assertEqual(
|
|
sts.meta.endpoint_url, 'https://sts.us-west-2.amazonaws.com'
|
|
)
|
|
# Signing error will be thrown with the incorrect region name included.
|
|
with self.assertRaisesRegex(ClientError, 'ap-southeast-1'):
|
|
sts.get_session_token()
|