chore: Add dynamodb restriction

[carlyjiang]

close #

Could you share the solution in high level?

• Reject new dynamoDB policy which is against iks-compute account. (existing inline policy doesn't have access to the same IKS account dynamodb)
• For backward compatible, if there's existing policy having access to the same IKS account dynamodb, the new policy still can have access to the same account dynamodb policy.
• For all dynamodb policies, which targets to other accounts should be respected.
• Update gomock to uber.org/mock, add mocks to git repo

Could you share the test results?

• If existing policy has access to the same account dynamodb table, new policy allows to access the same account dynamodb table.
• If existing policy has access to the other account dynamodb table, new policy doesn't allow to access the same account dynamodb table.
• if existing policy doesn't have access to the dynamodb, new policy doesn't allow to access the same account dynamodb table.
• if existing policy doesn't have access to dynamodb, new policy doesn't have dynamodb access, will pass validation.
• Add all unit tests:
  • TestValidateAllowedDynamoDBAccessExistingPolicyNoAccessAndNewRequestHasAccess
  • TestValidateAllowedDynamoDBAccessExistingPolicyOtherAccountAndNewRequestSameAccount
  • TestValidateAllowedDynamoDBAccessExistingPolicyAndNewRequestHaveAccess
  • TestValidateAllowedDynamoDBAccessGetRolePolicyFailure
  • TestValidateAllowedDynamoDBAccessGetRoleFailure
  • TestValidateAllowedDynamoDBAccessNewPolicyHasAccess
  • TestValidateAllowedDynamoDBAccessExistingPolicyHasAccess
  • TestValidateAllowedDynamoDBAccessExistingPolicyNoAccessAndNewRequestHasAccessWithArrayFields
  • TestValidateAllowedDynamoDBAccessInvalidRoleArn

[codecov]

Codecov Report

Attention: Patch coverage is 86.79245% with 14 lines in your changes missing coverage. Please review.

Project coverage is 50.70%. Comparing base (43d3f06) to head (f5114dd).

Files with missing lines	Patch %	Lines
pkg/awsapi/iam.go	86.79%	11 Missing and 3 partials ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #251      +/-   ##
==========================================
- Coverage   58.52%   50.70%   -7.82%     
==========================================
  Files          13       17       +4     
  Lines        1408     2191     +783     
==========================================
+ Hits          824     1111     +287     
- Misses        548     1040     +492     
- Partials       36       40       +4     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[kevdowney]

v0.5.0 is the latest.
https://github.com/uber-go/mock/releases/tag/v0.5.0

[carlyjiang]

Thanks, updated the lib to v0.5.0, and bump go version to 1.22.