[Policy Insights] Added cmdlets for policy attestations

src/PolicyInsights/PolicyInsights.Test/EnvSetup/AttestationMetadata.json

@@ -0,0 +1 @@
+{"TestKey": "TestValue"}

src/PolicyInsights/PolicyInsights.Test/EnvSetup/EnvironmentSetup.ps1

@@ -91,3 +91,74 @@ Start-TestSleep -Seconds 60
 foreach ($resourceGroupName in @($resourceGroup1, $resourceGroup2)) {
    New-AzResourceGroupDeployment -ResourceGroupName $resourceGroupName -TemplateFile "$PSScriptRoot/CreateNSGsTemplate.json" -resourceCount 510 -resourceNamePrefix $(Get-TestResourceNamePrefix)
 }
+
+#region Attestation Tests Setup
+$resourceGroup3 = $(Get-PSAttestationTestRGName)
+
+# Create the required RG(s) for attestations.
+foreach ($resourceGroupName in @($resourceGroup3)) {
+   Get-AzResourceGroup -Name $resourceGroupName -ErrorVariable rgNotPresent -ErrorAction SilentlyContinue
+   if ($rgNotPresent) {
+      New-AzResourceGroup -Name $resourceGroupName -Location "northcentralus"
+   }
+}
+
+# Create Subscription targetting manual policy
+$manualPolicySubcriptionDefinition = New-AzPolicyDefinition -Name $(Get-TestManualPolicyDefinitonNameSub) -Policy "$PSScriptRoot/ManualPolicySubDefinition.json" -DisplayName "PS cmdlet tests: Subscription Manual Policy" -Mode All
+
+# Create RG targetting manual policy
+$manualPolicyRGDefinition = New-AzPolicyDefinition -Name $(Get-TestManualPolicyDefinitonNameRG) -Policy "$PSScriptRoot/ManualPolicyRGDefinition.json" -DisplayName "PS cmdlet tests: RG Manual Policy" -Mode All
+
+# Create Resource targetting manual policy
+$manualPolicyResourceDefinition = New-AzPolicyDefinition -Name $(Get-TestManualPolicyDefinitonNameResource) -Policy "$PSScriptRoot/ManualPolicyResourceDefinition.json" -DisplayName "PS cmdlet tests: Resource Manual Policy" -Mode All
+
+# Create a network security group for testing resource level attestations.
+New-AzResourceGroupDeployment -ResourceGroupName $resourceGroup3 -TemplateFile "$PSScriptRoot/CreateNSGsTemplate.json" -resourceCount 1 -resourceNamePrefix $(Get-TestResourceNamePrefix)
+
+# Assign the manual policies targetting each of Subscription, Resource Groups and Resource Types to the subscription
+$manualPolicySubAssignment = New-AzPolicyAssignment -Name $(Get-TestAttestationSubscriptionPolicyAssignmentName) -Scope "/subscriptions/$subscriptionId" -DisplayName "PS cmdlet tests: Subscription Manual Policy" -PolicyDefinition $manualPolicySubcriptionDefinition
+
+$manualPolicyRGAssignment = New-AzPolicyAssignment -Name $(Get-TestAttestationRGPolicyAssignmentName) -Scope "/subscriptions/$subscriptionId" -DisplayName "PS cmdlet tests: RG Manual Policy" -PolicyDefinition $manualPolicyRGDefinition
+
+$manualPolicyResourceAssignment = New-AzPolicyAssignment -Name $(Get-TestAttestationResourcePolicyAssignmentName) -Scope "/subscriptions/$subscriptionId" -DisplayName "PS cmdlet tests: Resource Manual Policy" -PolicyDefinition $manualPolicyResourceDefinition
+
+# Define Policy Initiatives
+$manualpolicyDefinitionsSubscription = @"
+[
+   {
+      "policyDefinitionId":"$($manualPolicySubcriptionDefinition.ResourceId)",
+      "policyDefinitionReferenceId": "$(Get-TestManualPolicyDefinitonNameSub)_1"
+   }
+]
+"@
+
+$manualpolicyDefinitionsRG = @"
+[
+   {
+      "policyDefinitionId":"$($manualPolicyRGDefinition.ResourceId)",
+      "policyDefinitionReferenceId": "$(Get-TestManualPolicyDefinitonNameRG)_1"
+   }
+]
+"@
+
+$manualpolicyDefinitionsResource = @"
+[
+   {
+        "policyDefinitionId":"$($manualPolicyResourceDefinition.ResourceId)",
+      "policyDefinitionReferenceId": "$(Get-TestManualPolicyDefinitonNameResource)_1"
+   }
+]
+"@
+
+$policySetDefinitionSub = New-AzPolicySetDefinition -Name $(Get-TestManualPolicyInitiativeNameSub) -DisplayName "PS cmdlet tests: Attestation initiative SUB" -PolicyDefinition $manualpolicyDefinitionsSubscription -SubscriptionId $subscriptionId
+$policySetDefinitionRG = New-AzPolicySetDefinition -Name $(Get-TestManualPolicyInitiativeNameRG) -DisplayName "PS cmdlet tests: Attestation initiative RG" -PolicyDefinition $manualpolicyDefinitionsRG -SubscriptionId $subscriptionId
+$policySetDefinitionResource = New-AzPolicySetDefinition -Name $(Get-TestManualPolicyInitiativeNameResource) -DisplayName "PS cmdlet tests: Attestation initiative Resource" -PolicyDefinition $manualpolicyDefinitionsResource -SubscriptionId $subscriptionId
+
+# Assign the initiatives to the subscription
+New-AzPolicyAssignment -Name $(Get-TestInitiativeAttestationSubPolicyAssignmentName) -Scope "/subscriptions/$subscriptionId" -DisplayName "PS cmdlet tests: Attestation initiative SUB" -PolicySetDefinition $policySetDefinitionSub
+
+New-AzPolicyAssignment -Name $(Get-TestInitiativeAttestationRGPolicyAssignmentName) -Scope "/subscriptions/$subscriptionId" -DisplayName "PS cmdlet tests: Attestation initiative RG" -PolicySetDefinition $policySetDefinitionRG
+
+New-AzPolicyAssignment -Name $(Get-TestAttestationInitiativeResourcePolicyAssignmentName) -Scope "/subscriptions/$subscriptionId" -DisplayName "PS cmdlet tests: Attestation initiative Resource" -PolicySetDefinition $policySetDefinitionResource
+
+#endregion

src/PolicyInsights/PolicyInsights.Test/EnvSetup/ManualPolicyRGDefinition.json

@@ -0,0 +1,9 @@
+{
+    "if": {
+        "field": "type",
+        "equals": "microsoft.resources/subscriptions/resourcegroups"
+    },
+    "then": {
+        "effect": "manual"
+    }
+}

src/PolicyInsights/PolicyInsights.Test/EnvSetup/ManualPolicyResourceDefinition.json

@@ -0,0 +1,9 @@
+{
+    "if": {
+        "field": "type",
+        "equals": "Microsoft.Network/networkSecurityGroups"
+    },
+    "then": {
+        "effect": "manual"
+    }
+}

src/PolicyInsights/PolicyInsights.Test/EnvSetup/ManualPolicySubDefinition.json

@@ -0,0 +1,9 @@
+{
+    "if": {
+        "field": "type",
+        "equals": "microsoft.resources/subscriptions"
+    },
+    "then": {
+        "effect": "manual"
+    }
+}

src/PolicyInsights/PolicyInsights.Test/PolicyInsights.Test.csproj

@@ -11,7 +11,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Azure.Management.PolicyInsights" Version="5.0.0" />
+    <PackageReference Include="Microsoft.Azure.Management.PolicyInsights" Version="5.1.0" />
   </ItemGroup>
 
 </Project>

src/PolicyInsights/PolicyInsights.Test/ScenarioTests/AttestationTests.cs

@@ -0,0 +1,68 @@
+// ----------------------------------------------------------------------------------
+//
+// Copyright Microsoft Corporation
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+// http://www.apache.org/licenses/LICENSE-2.0
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+// ----------------------------------------------------------------------------------
+
+using Microsoft.WindowsAzure.Commands.ScenarioTest;
+using System;
+using System.Collections.Generic;
+using System.Text;
+using Xunit;
+using Xunit.Abstractions;
+
+namespace Microsoft.Azure.Commands.PolicyInsights.Test.ScenarioTests
+{
+    public class AttestationTests : PolicyInsightsTestRunner
+
+    {
+        public AttestationTests(Xunit.Abstractions.ITestOutputHelper output) : base(output)
+        {
+        }
+
+        [Fact]
+        [Trait(Category.AcceptanceType, Category.CheckIn)]
+        public void SubscriptionScopeCrud()
+        {
+            TestRunner.RunTestScript("Attestation-SubscriptionScope-Crud");
+        }
+
+        [Fact]
+        [Trait(Category.AcceptanceType, Category.CheckIn)]
+        public void ResourceGroupScopeCrud()
+        {
+            TestRunner.RunTestScript("Attestation-ResourceGroupScope-Crud");
+        }
+
+
+        [Fact]
+        [Trait(Category.AcceptanceType, Category.CheckIn)]
+        public void ResourceScopeCrud()
+        {
+            TestRunner.RunTestScript("Attestation-ResourceScope-Crud");
+        }
+
+        [Fact]
+        [Trait(Category.AcceptanceType, Category.CheckIn)]
+        public void AttestationGetCollection()
+        {
+            TestRunner.RunTestScript("Attestation-GetCollection");
+        }
+
+        [Fact]
+        [Trait(Category.AcceptanceType, Category.CheckIn)]
+        public void AttestationErrorHandling()
+        {
+            TestRunner.RunTestScript("Attestation-Error-Handling");
+        }
+
+    }
+}