configure for codebuild pr builds

Author: jesterhazy

buildspec.yml

@@ -0,0 +1,24 @@
+version: 0.2
+
+phases:
+  pre_build:
+    commands:
+      - start-dockerd
+
+  build:
+    commands:
+      # run linters
+      - tox -e flake8,pylint
+
+      # run package and docbuild checks
+      - tox -e twine
+      - tox -e sphinx
+
+      # run unit tests
+      - AWS_ACCESS_KEY_ID= AWS_SECRET_ACCESS_KEY= AWS_SESSION_TOKEN=
+        AWS_CONTAINER_CREDENTIALS_RELATIVE_URI= AWS_DEFAULT_REGION=
+        tox -e py27,py36 -- tests/unit
+
+      # run integration tests
+      # TODO add missing 'do we need integ tests' check
+      - IGNORE_COVERAGE=- tox -e py27,py36 -- -n 24 --boxed tests/integ

tests/integ/kms_utils.py

@@ -22,7 +22,7 @@
       "Sid": "Enable IAM User Permissions",
       "Effect": "Allow",
       "Principal": {{
-        "AWS": "arn:aws:iam::{account_id}:root"
+        "AWS": "{account_id}"
       }},
       "Action": "kms:*",
       "Resource": "*"
@@ -31,7 +31,7 @@
       "Sid": "Allow use of the key",
       "Effect": "Allow",
       "Principal": {{
-        "AWS": "arn:aws:iam::{account_id}:role/SageMakerRole"
+        "AWS": "{account_id}"
       }},
       "Action": [
         "kms:Encrypt",
@@ -46,7 +46,7 @@
       "Sid": "Allow attachment of persistent resources",
       "Effect": "Allow",
       "Principal": {{
-        "AWS": "arn:aws:iam::{account_id}:role/SageMakerRole"
+        "AWS": "{account_id}"
       }},
       "Action": [
         "kms:CreateGrant",

tox.ini

@@ -4,13 +4,10 @@
 # and then run "tox" from this directory.
 
 [tox]
-envlist = py27,py35,flake8,pylint,twine,sphinx
+envlist = flake8,pylint,twine,sphinx,py27,py36
 
 skip_missing_interpreters = False
 
-[travis]
-python =
-  3.5: py35, flake8, pylint
 
 [flake8]
 max-line-length = 120
@@ -24,7 +21,9 @@ exclude =
     tests/data/
     venv/
     *service_pb2_grpc.py
+
 max-complexity = 10
+
 ignore =
     FI10,
     FI12,
@@ -46,13 +45,13 @@ ignore =
 require-code = True
 
 [testenv]
-# TEAMCITY_VERSION environment variable exists during build on Teamcity. teamcity-messages uses it in order to enable
-# reporting to TeamCity.
 passenv =
-    TEAMCITY_VERSION
     AWS_ACCESS_KEY_ID
     AWS_SECRET_ACCESS_KEY
     AWS_SESSION_TOKEN
+    AWS_CONTAINER_CREDENTIALS_RELATIVE_URI
+    AWS_DEFAULT_REGION
+
 # {posargs} can be passed in by additional arguments specified when invoking tox.
 # Can be used to specify which tests to run, e.g.: tox -- -s
 commands =