google_kms_key_ring_iam_bindings.rb

# frozen_string_literal: true

require 'gcp_backend'

module Inspec::Resources
  class GoogleKMSKeyRingIAMBindings < GcpResourceBase
    name 'google_kms_key_ring_iam_bindings'
    desc 'Verifies settings for GCP KMS key ring IAM bindings in bulk'

    example "
      describe google_kms_key_ring_iam_bindings(key_ring_url: 'projects/project/locations/europe-west2/keyRings/key-ring') do
        it { should exist }
      end
    "

    def initialize(opts = {})
      # Call the parent class constructor
      super(opts)
      @key_ring_url = opts[:key_ring_url]
    end

    # FilterTable setup
    filter_table_config = FilterTable.create
    filter_table_config.add(:iam_binding_roles, field: :iam_binding_role)
    filter_table_config.connect(self, :fetch_data)

    def fetch_data
      iam_binding_rows = []
      catch_gcp_errors do
        @iam_bindings = @gcp.gcp_client(Google::Apis::CloudkmsV1::CloudKMSService).get_project_location_key_ring_iam_policy(@key_ring_url)
      end
      return [] if !@iam_bindings || !@iam_bindings.bindings
      @iam_bindings.bindings.map do |iam_binding|
        iam_binding_rows+=[{ iam_binding_role: iam_binding.role }]
      end
      @table = iam_binding_rows
    end
  end
end