pulumi/pkg/operations/operations_aws_test.go
Matthew Riley f9b7468bfd Don't cache AWS sessions with different credentials
We might create an AWS session with one set of credentials, cache it, then
return it when a later caller asked for a session with *different* creds.

Instead, just cache one default session and Copy other sessions from it.

Less important in the CLI, but critical when the engine is used as a library
in a long-running process.
2018-04-09 16:57:27 -07:00

38 lines
1.1 KiB
Go

// Copyright 2016-2018, Pulumi Corporation. All rights reserved.
package operations
import (
"testing"
"github.com/stretchr/testify/assert"
)
func TestSessionCache(t *testing.T) {
// Create a default session in us-west-2.
sess1, err := getAWSSession("us-west-2", "", "", "")
assert.NoError(t, err)
assert.NotNil(t, sess1)
assert.Equal(t, "us-west-2", *sess1.Config.Region)
// Create a session with explicit credentials and ensure they're set.
sess2, err := getAWSSession("us-west-2", "AKIA123", "456", "xyz")
assert.NoError(t, err)
creds, err := sess2.Config.Credentials.Get()
assert.NoError(t, err)
assert.Equal(t, "AKIA123", creds.AccessKeyID)
assert.Equal(t, "456", creds.SecretAccessKey)
assert.Equal(t, "xyz", creds.SessionToken)
// Create a session with different creds and make sure they're different.
sess3, err := getAWSSession("us-west-2", "AKIA123", "456", "hij")
assert.NoError(t, err)
creds, err = sess3.Config.Credentials.Get()
assert.NoError(t, err)
assert.Equal(t, "AKIA123", creds.AccessKeyID)
assert.Equal(t, "456", creds.SecretAccessKey)
assert.Equal(t, "hij", creds.SessionToken)
}