Update more tests for condition keys (#3781)

aws-cloudformation · Oct 21, 2024 · a6eb97a · a6eb97a
1 parent ebea805
commit a6eb97a
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/test/unit/rules/resources/iam/test_identity_policy.py b/test/unit/rules/resources/iam/test_identity_policy.py
@@ -186,7 +186,10 @@ def test_string_statements_with_condition(self):
                             "IpAddress": {"aws:SourceIp": "203.0.113.0/24"},
                             "ArnEquals": {"aws:SourceArn": "arn:aws:sns:REGION:123456789012:TOPIC-ID"},
                             "StringLikeIfExists": { "ec2:InstanceType": [ "t1.*", "t2.*" ]},
-                            "Null":{"aws:TokenIssueTime":"true"}
+                            "Null":{"aws:TokenIssueTime":"true"},
+                            "ForAllValues:StringEquals":{"aws:PrincipalTag/job-category":["iamuser-admin","iamuser-read-only"]},
+                            "ForAnyValue:StringEquals":{"aws:PrincipalTag/job-category":"iamuser-admin"},
+                            "ForAllValues:StringLike": {"aws:TagKeys": ["key1*"]}
                         }
                     }
                 ]