{"action":"created","issue":{"url":"https://api.github.com/repos/k1LoW/awspec/issues/189","repository_url":"https://api.github.com/repos/k1LoW/awspec","labels_url":"https://api.github.com/repos/k1LoW/awspec/issues/189/labels{/name}","comments_url":"https://api.github.com/repos/k1LoW/awspec/issues/189/comments","events_url":"https://api.github.com/repos/k1LoW/awspec/issues/189/events","html_url":"https://github.com/k1LoW/awspec/pull/189","id":181755811,"number":189,"title":"add should not be allowed action","user":{"login":"mdolian","id":8725,"avatar_url":"https://avatars.githubusercontent.com/u/8725?v=3","gravatar_id":"","url":"https://api.github.com/users/mdolian","html_url":"https://github.com/mdolian","followers_url":"https://api.github.com/users/mdolian/followers","following_url":"https://api.github.com/users/mdolian/following{/other_user}","gists_url":"https://api.github.com/users/mdolian/gists{/gist_id}","starred_url":"https://api.github.com/users/mdolian/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mdolian/subscriptions","organizations_url":"https://api.github.com/users/mdolian/orgs","repos_url":"https://api.github.com/users/mdolian/repos","events_url":"https://api.github.com/users/mdolian/events{/privacy}","received_events_url":"https://api.github.com/users/mdolian/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2016-10-07T20:01:56Z","updated_at":"2016-10-11T02:59:45Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/k1LoW/awspec/pulls/189","html_url":"https://github.com/k1LoW/awspec/pull/189","diff_url":"https://github.com/k1LoW/awspec/pull/189.diff","patch_url":"https://github.com/k1LoW/awspec/pull/189.patch"},"body":"Instead of checking for actions that a role is allowed, I needed to check to ensure certain actions were denied for a role.  So I added a not_be_allowed_action matcher.  It's a very simple change, I used the code from the be_allowed_action and just changed the eval_decision to look for explicitDeny or implicitDeny.\r\n\r\nI can write a test for this if you give me an action that should be denied in your AWS setup.\r\n\r\nThanks!\r\n"},"comment":{"url":"https://api.github.com/repos/k1LoW/awspec/issues/comments/252798946","html_url":"https://github.com/k1LoW/awspec/pull/189#issuecomment-252798946","issue_url":"https://api.github.com/repos/k1LoW/awspec/issues/189","id":252798946,"user":{"login":"k1LoW","id":57114,"avatar_url":"https://avatars.githubusercontent.com/u/57114?v=3","gravatar_id":"","url":"https://api.github.com/users/k1LoW","html_url":"https://github.com/k1LoW","followers_url":"https://api.github.com/users/k1LoW/followers","following_url":"https://api.github.com/users/k1LoW/following{/other_user}","gists_url":"https://api.github.com/users/k1LoW/gists{/gist_id}","starred_url":"https://api.github.com/users/k1LoW/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/k1LoW/subscriptions","organizations_url":"https://api.github.com/users/k1LoW/orgs","repos_url":"https://api.github.com/users/k1LoW/repos","events_url":"https://api.github.com/users/k1LoW/events{/privacy}","received_events_url":"https://api.github.com/users/k1LoW/received_events","type":"User","site_admin":false},"created_at":"2016-10-11T02:59:45Z","updated_at":"2016-10-11T02:59:45Z","body":"Hi @mdolian \r\n\r\n## Why fail\r\n\r\nBecause, awspec's test use stub. (see https://github.com/k1LoW/awspec/blob/master/lib/awspec/stub/iam_group.rb#L76 )\r\n\r\nRegards."}}
{"actor":{"display_login":"k1LoW"}}