alicloud_ims_user resource

Use the alicloud_ims_user InSpec audit resource to test properties of a single Alibaba Cloud IAM User information.

Syntax

Ensure an user exists**

describe alicloud_ims_user("USER_PRINCIPAL_NAME") do
  it { should exist }
end

You may also use hash syntax to pass the user principal name**

describe alicloud_ims_user(user_principal_name: "USER_PRINCIPAL_NAME") do
  it { should exist }
end

This resource accepts a single parameter, user_principal_name.

status: The status of the IAM user.
update_date: The update date of the IAM user.
password_reset_required: The password reset required of the IAM user. It accepts boolean value.
user_principal_name: The user name of the IAM user.
mfa_bind_required: The mfa bind required of the IAM user. It accepts boolean value.

Test that an user does not exist:

describe alicloud_ims_user("USER_PRINCIPAL_NAME") do
  it { should_not exist }
end

Test that an user is MFA bind:

describe alicloud_ims_user("USER_PRINCIPAL_NAME") do
  its('mfa_bind_required') { should eq true }
end

Test that an user has an ACTIVE status:

describe alicloud_ims_user("USER_PRINCIPAL_NAME") do
  its('status') { should eq 'Active' }
end

For a full list of available matchers, see our Universal Matchers page.

The control will pass if the describe returns at least one result.

Use should to test the entity should not exist.

describe alicloud_ims_user("USER_PRINCIPAL_NAME") do
  it { should exist }
end

Use should_not to test the entity should not exist.

describe alicloud_ims_user("USER_PRINCIPAL_NAME") do
  it { should_not exist }
end

Your Principal will need the ims:GetLoginProfile action with Effect set to Allow.