summaryrefslogtreecommitdiff
path: root/hacking
diff options
context:
space:
mode:
authorWill Thames <will@thames.id.au>2017-08-28 11:52:22 -0500
committerRyan Brown <sb@ryansb.com>2017-08-28 12:52:22 -0400
commit63df0adc17fe8f9a8852881e6e5e99f2c9b5492a (patch)
tree007b85fb1523cb12c026c3fbf1e94e0713726dec /hacking
parentf08c29924ec58edb415cb69eec9a55ac59656b3d (diff)
downloadansible-63df0adc17fe8f9a8852881e6e5e99f2c9b5492a.tar.gz
[cloud] Update RDS parameter group for boto3 (#25345)
* Update RDS parameter group for boto3 * Update to boto3 * Update to latest ansible standards * Remove choices list for valid engines (See #19221 for context) * Allow tagging * Return some useful information, and document that information * Add tests for rds_param_group * Improve testing of rds_param_group * Add purge_tags option for rds_param_group * Fix remaining broken rds_param_group tests * Ensure the group name is lowercased. Fixes integration tests when run on OSX
Diffstat (limited to 'hacking')
-rw-r--r--hacking/aws_config/testing_policies/rds-policy.json17
1 files changed, 17 insertions, 0 deletions
diff --git a/hacking/aws_config/testing_policies/rds-policy.json b/hacking/aws_config/testing_policies/rds-policy.json
index 6284bd56e2..e74f857b65 100644
--- a/hacking/aws_config/testing_policies/rds-policy.json
+++ b/hacking/aws_config/testing_policies/rds-policy.json
@@ -46,6 +46,23 @@
"arn:aws:rds:{{aws_region}}:{{aws_account}}:snapshot:rds-*",
"arn:aws:rds:{{aws_region}}:{{aws_account}}:db:rds-*"
]
+ },
+ {
+ "Sid": "AllowRDSParameterGroupManagement",
+ "Effect": "Allow",
+ "Action": [
+ "rds:DescribeDBParameterGroups",
+ "rds:DescribeDBParameters",
+ "rds:CreateDBParameterGroup",
+ "rds:DeleteDBParameterGroup",
+ "rds:ModifyDBParameterGroup",
+ "rds:ListTagsForResource",
+ "rds:AddTagsToResource",
+ "rds:RemoveTagsFromResource"
+ ],
+ "Resource": [
+ "arn:aws:rds:{{aws_region}}:{{aws_account}}:pg:*"
+ ]
}
]
}