chore: add regex for ACM ARNs

guardian · Feb 12, 2021 · aef795f · aef795f
1 parent 390a734
commit aef795f
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/src/constants/regex-pattern.test.ts b/src/constants/regex-pattern.test.ts
@@ -25,4 +25,10 @@ describe("the regex patterns", () => {
     expect(regex.test("[email protected]")).toBeFalsy();
     expect(regex.test("[email protected]")).toBeFalsy();
   });
+
+  it("should successfully regex against ACM ARNs", () => {
+    const regex = new RegExp(RegexPattern.ACM_ARN);
+    expect(regex.test("arn:aws:acm:eu-west-1:000000000000:certificate/123abc-0000-0000-0000-123abc")).toBeTruthy();
+    expect(regex.test("arn:aws:acm:eu-west-1:000000000000:tls/123abc-0000-0000-0000-123abc")).toBeFalsy();
+  });
 });
diff --git a/src/constants/regex-pattern.ts b/src/constants/regex-pattern.ts
@@ -5,8 +5,12 @@ const s3ArnRegex = `arn:aws:s3:::${s3BucketRegex}*`;
 
 const emailRegex = "^[a-zA-Z]+(\\.[a-zA-Z]+)*@theguardian.com$";
 
+// TODO be more strict on region?
+const acmRegex = "arn:aws:acm:[0-9a-z\\-]+:[0-9]{12}:certificate/[0-9a-z\\-]+";
+
 export const RegexPattern = {
   ARN: arnRegex,
   S3ARN: s3ArnRegex,
   GUARDIAN_EMAIL: emailRegex,
+  ACM_ARN: acmRegex,
 };