update

cue.mod/pkg/universe.dagger.io/aws/cli/test/sts_get_caller_identity.cue

@@ -0,0 +1,41 @@
+package test
+
+import (
+	"dagger.io/dagger"
+	"dagger.io/dagger/core"
+	"universe.dagger.io/aws"
+	"universe.dagger.io/aws/cli"
+)
+
+dagger.#Plan & {
+	client: commands: sops: {
+		name: "sops"
+		args: ["-d", "--extract", "[\"AWS\"]", "../../../secrets_sops.yaml"]
+		stdout: dagger.#Secret
+	}
+
+	actions: {
+		sopsSecrets: core.#DecodeSecret & {
+			format: "yaml"
+			input:  client.commands.sops.stdout
+		}
+
+		getCallerIdentity: cli.#Command & {
+			credentials: aws.#Credentials & {
+				accessKeyId:     sopsSecrets.output.AWS_ACCESS_KEY_ID.contents
+				secretAccessKey: sopsSecrets.output.AWS_SECRET_ACCESS_KEY.contents
+			}
+			options: region: "us-east-2"
+			service: {
+				name:    "sts"
+				command: "get-caller-identity"
+			}
+		}
+
+		verify: getCallerIdentity.result & {
+			UserId:  !~"^$"
+			Account: !~"^$"
+			Arn:     !~"^$"
+		}
+	}
+}

cue.mod/pkg/universe.dagger.io/aws/cli/test/test.bats

@@ -0,0 +1,9 @@
+setup() {
+    load '../../../bats_helpers'
+
+    common_setup
+}
+
+@test "aws/cli" {
+    dagger "do" -p ./sts_get_caller_identity.cue verify
+}