From 52540332468f03dfcc1a2b931e09181152b324f1 Mon Sep 17 00:00:00 2001
From: Anna Shcherbak <Anna_Shcherbak@epam.com>
Date: Thu, 21 Sep 2023 09:48:53 +0300
Subject: [PATCH] new: added policy ecc-aws-571-stopped_rds_instances_removed

---
 ...-aws-571-stopped_rds_instances_removed.yml |  22 +++
 .../green/provider.tf                         |  20 +++
 .../green/rds.tf                              |  20 +++
 .../green/terraform.tfvars                    |   2 +
 .../green/variables.tf                        |   9 +
 .../iam/571-policy.json                       |  12 ++
 .../red/provider.tf                           |  20 +++
 .../red/rds.tf                                |  62 +++++++
 .../red/terraform.tfvars                      |   2 +
 .../red/variables.tf                          |   9 +
 .../green_policy_test.py                      |   7 +
 .../rds.DescribeDBInstances_1.json            | 159 ++++++++++++++++
 .../rds.DescribeDBInstances_1.json            | 169 ++++++++++++++++++
 .../red_policy_test.py                        |  15 ++
 14 files changed, 528 insertions(+)
 create mode 100644 policies/ecc-aws-571-stopped_rds_instances_removed.yml
 create mode 100644 terraform/ecc-aws-571-stopped_rds_instances_removed/green/provider.tf
 create mode 100644 terraform/ecc-aws-571-stopped_rds_instances_removed/green/rds.tf
 create mode 100644 terraform/ecc-aws-571-stopped_rds_instances_removed/green/terraform.tfvars
 create mode 100644 terraform/ecc-aws-571-stopped_rds_instances_removed/green/variables.tf
 create mode 100644 terraform/ecc-aws-571-stopped_rds_instances_removed/iam/571-policy.json
 create mode 100644 terraform/ecc-aws-571-stopped_rds_instances_removed/red/provider.tf
 create mode 100644 terraform/ecc-aws-571-stopped_rds_instances_removed/red/rds.tf
 create mode 100644 terraform/ecc-aws-571-stopped_rds_instances_removed/red/terraform.tfvars
 create mode 100644 terraform/ecc-aws-571-stopped_rds_instances_removed/red/variables.tf
 create mode 100644 tests/ecc-aws-571-stopped_rds_instances_removed/green_policy_test.py
 create mode 100644 tests/ecc-aws-571-stopped_rds_instances_removed/placebo-green/rds.DescribeDBInstances_1.json
 create mode 100644 tests/ecc-aws-571-stopped_rds_instances_removed/placebo-red/rds.DescribeDBInstances_1.json
 create mode 100644 tests/ecc-aws-571-stopped_rds_instances_removed/red_policy_test.py

diff --git a/policies/ecc-aws-571-stopped_rds_instances_removed.yml b/policies/ecc-aws-571-stopped_rds_instances_removed.yml
new file mode 100644
index 000000000..dc9ed25e4
--- /dev/null
+++ b/policies/ecc-aws-571-stopped_rds_instances_removed.yml
@@ -0,0 +1,22 @@
+# Copyright (c) 2023 EPAM Systems, Inc.
+#
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+
+policies:
+  - name: ecc-aws-571-stopped_rds_instances_removed
+    comment: '010002062000'
+    description: |
+      RDS DB instances 
+    resource: aws.rds
+    filters:
+      - type: value
+        key: DBInstanceStatus
+        value: stopped
+      - type: value
+        key: AutomaticRestartTime
+        value: 4
+        value_type: expiration
+        op: lte
diff --git a/terraform/ecc-aws-571-stopped_rds_instances_removed/green/provider.tf b/terraform/ecc-aws-571-stopped_rds_instances_removed/green/provider.tf
new file mode 100644
index 000000000..fac14686d
--- /dev/null
+++ b/terraform/ecc-aws-571-stopped_rds_instances_removed/green/provider.tf
@@ -0,0 +1,20 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 4"
+    }
+  }
+}
+
+provider "aws" {
+  profile = var.profile
+  region  = var.default-region
+
+  default_tags {
+    tags = {
+      CustodianRule    = "ecc-aws-571-stopped_rds_instances_removed"
+      ComplianceStatus = "Green"
+    }
+  }
+}
diff --git a/terraform/ecc-aws-571-stopped_rds_instances_removed/green/rds.tf b/terraform/ecc-aws-571-stopped_rds_instances_removed/green/rds.tf
new file mode 100644
index 000000000..2d86be1b9
--- /dev/null
+++ b/terraform/ecc-aws-571-stopped_rds_instances_removed/green/rds.tf
@@ -0,0 +1,20 @@
+resource "random_password" "this" {
+  length           = 12
+  special          = true
+  numeric          = true
+  override_special = "!#$%*()-_=+[]{}:?"
+}
+
+resource "aws_db_instance" "this" {
+  engine                  = "mysql"
+  engine_version          = "5.7"
+  instance_class          = "db.t2.micro"
+  allocated_storage       = 10
+  storage_type            = "gp2"
+  db_name                 = "database517green"
+  username                = "root"
+  password                = random_password.this.result
+  multi_az                = false
+  skip_final_snapshot     = true
+  identifier              = "db-instance-571-green"
+}
\ No newline at end of file
diff --git a/terraform/ecc-aws-571-stopped_rds_instances_removed/green/terraform.tfvars b/terraform/ecc-aws-571-stopped_rds_instances_removed/green/terraform.tfvars
new file mode 100644
index 000000000..e1e2d2fa8
--- /dev/null
+++ b/terraform/ecc-aws-571-stopped_rds_instances_removed/green/terraform.tfvars
@@ -0,0 +1,2 @@
+profile        = "c7n"
+default-region = "us-east-1"
diff --git a/terraform/ecc-aws-571-stopped_rds_instances_removed/green/variables.tf b/terraform/ecc-aws-571-stopped_rds_instances_removed/green/variables.tf
new file mode 100644
index 000000000..c8b410c24
--- /dev/null
+++ b/terraform/ecc-aws-571-stopped_rds_instances_removed/green/variables.tf
@@ -0,0 +1,9 @@
+variable "default-region" {
+  type        = string
+  description = "Default region for resources will be created"
+}
+
+variable "profile" {
+  type        = string
+  description = "Profile name configured before running apply"
+}
diff --git a/terraform/ecc-aws-571-stopped_rds_instances_removed/iam/571-policy.json b/terraform/ecc-aws-571-stopped_rds_instances_removed/iam/571-policy.json
new file mode 100644
index 000000000..021fa87cd
--- /dev/null
+++ b/terraform/ecc-aws-571-stopped_rds_instances_removed/iam/571-policy.json
@@ -0,0 +1,12 @@
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [ 
+                "rds:DescribeDBInstances"
+            ],
+            "Resource": "*"
+        }
+    ]
+}
\ No newline at end of file
diff --git a/terraform/ecc-aws-571-stopped_rds_instances_removed/red/provider.tf b/terraform/ecc-aws-571-stopped_rds_instances_removed/red/provider.tf
new file mode 100644
index 000000000..47ff4b2f9
--- /dev/null
+++ b/terraform/ecc-aws-571-stopped_rds_instances_removed/red/provider.tf
@@ -0,0 +1,20 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 4"
+    }
+  }
+}
+
+provider "aws" {
+  profile = var.profile
+  region  = var.default-region
+
+  default_tags {
+    tags = {
+      CustodianRule    = "ecc-aws-571-stopped_rds_instances_removed"
+      ComplianceStatus = "Red"
+    }
+  }
+}
diff --git a/terraform/ecc-aws-571-stopped_rds_instances_removed/red/rds.tf b/terraform/ecc-aws-571-stopped_rds_instances_removed/red/rds.tf
new file mode 100644
index 000000000..c1b8792c2
--- /dev/null
+++ b/terraform/ecc-aws-571-stopped_rds_instances_removed/red/rds.tf
@@ -0,0 +1,62 @@
+resource "random_password" "this" {
+  length           = 12
+  special          = true
+  numeric          = true
+  override_special = "!#$%*()-_=+[]{}:?"
+}
+
+resource "aws_db_instance" "this" {
+  engine                  = "mysql"
+  engine_version          = "5.7"
+  instance_class          = "db.t2.micro"
+  allocated_storage       = 10
+  storage_type            = "gp2"
+  db_name                 = "database517red"
+  username                = "root"
+  password                = random_password.this.result
+  multi_az                = false
+  skip_final_snapshot     = true
+  identifier              = "db-instance-571-red"
+}
+
+resource "null_resource" "cleanup_rds" {
+  depends_on = [
+    aws_db_instance.this
+  ]
+  triggers = {
+    profile   = var.profile
+    region = var.default-region
+    identifier = aws_db_instance.this.identifier
+  }
+  provisioner "local-exec" {
+    interpreter = ["/bin/bash", "-c"]
+    command     = <<EOF
+aws sts get-caller-identity
+export AWS_PROFILE=${self.triggers.profile}
+export AWS_REGION=${self.triggers.region}
+aws sts get-caller-identity
+
+while true; do
+  status="$(aws rds describe-db-instances --db-instance-identifier ${self.triggers.identifier} --query DBInstances[0].DBInstanceStatus --output text)"
+  if [ "$status" = "available" ]; then
+    aws rds stop-db-instance --db-instance-identifier ${self.triggers.identifier}
+    break
+  else
+    echo "Waiting for database: $rds to be available"
+    sleep 60
+  fi
+done
+while true; do
+  status="$(aws rds describe-db-instances --db-instance-identifier ${self.triggers.identifier} --query DBInstances[0].DBInstanceStatus --output text)"
+  if [ "$status" = "stopped" ]; then
+    break
+  else
+    echo "Waiting for database: $rds to be stopped"
+    sleep 60
+  fi
+done
+
+echo "RDS instance stopped."
+EOF
+  }
+}
diff --git a/terraform/ecc-aws-571-stopped_rds_instances_removed/red/terraform.tfvars b/terraform/ecc-aws-571-stopped_rds_instances_removed/red/terraform.tfvars
new file mode 100644
index 000000000..e1e2d2fa8
--- /dev/null
+++ b/terraform/ecc-aws-571-stopped_rds_instances_removed/red/terraform.tfvars
@@ -0,0 +1,2 @@
+profile        = "c7n"
+default-region = "us-east-1"
diff --git a/terraform/ecc-aws-571-stopped_rds_instances_removed/red/variables.tf b/terraform/ecc-aws-571-stopped_rds_instances_removed/red/variables.tf
new file mode 100644
index 000000000..c8b410c24
--- /dev/null
+++ b/terraform/ecc-aws-571-stopped_rds_instances_removed/red/variables.tf
@@ -0,0 +1,9 @@
+variable "default-region" {
+  type        = string
+  description = "Default region for resources will be created"
+}
+
+variable "profile" {
+  type        = string
+  description = "Profile name configured before running apply"
+}
diff --git a/tests/ecc-aws-571-stopped_rds_instances_removed/green_policy_test.py b/tests/ecc-aws-571-stopped_rds_instances_removed/green_policy_test.py
new file mode 100644
index 000000000..612ad2bbd
--- /dev/null
+++ b/tests/ecc-aws-571-stopped_rds_instances_removed/green_policy_test.py
@@ -0,0 +1,7 @@
+class PolicyTest(object):
+
+    def test_resources(self, base_test, resources):
+        base_test.assertEqual(len(resources), 0)
+
+    def mock_time(self):
+        return 2023, 9, 20
diff --git a/tests/ecc-aws-571-stopped_rds_instances_removed/placebo-green/rds.DescribeDBInstances_1.json b/tests/ecc-aws-571-stopped_rds_instances_removed/placebo-green/rds.DescribeDBInstances_1.json
new file mode 100644
index 000000000..01a044f88
--- /dev/null
+++ b/tests/ecc-aws-571-stopped_rds_instances_removed/placebo-green/rds.DescribeDBInstances_1.json
@@ -0,0 +1,159 @@
+{
+    "status_code": 200,
+    "data": {
+        "DBInstances": [
+            {
+                "DBInstanceIdentifier": "db-instance-571-green",
+                "DBInstanceClass": "db.t2.micro",
+                "Engine": "mysql",
+                "DBInstanceStatus": "available",
+                "MasterUsername": "root",
+                "DBName": "database517green",
+                "Endpoint": {
+                    "Address": "db-instance-571-green.chhajgiktbgu.us-east-1.rds.amazonaws.com",
+                    "Port": 3306,
+                    "HostedZoneId": "Z2R2ITUGPM61AM"
+                },
+                "AllocatedStorage": 10,
+                "InstanceCreateTime": {
+                    "__class__": "datetime",
+                    "year": 2023,
+                    "month": 9,
+                    "day": 20,
+                    "hour": 11,
+                    "minute": 10,
+                    "second": 50,
+                    "microsecond": 101000
+                },
+                "PreferredBackupWindow": "06:41-07:11",
+                "BackupRetentionPeriod": 0,
+                "DBSecurityGroups": [],
+                "VpcSecurityGroups": [
+                    {
+                        "VpcSecurityGroupId": "sg-a5hni90",
+                        "Status": "active"
+                    }
+                ],
+                "DBParameterGroups": [
+                    {
+                        "DBParameterGroupName": "default.mysql5.7",
+                        "ParameterApplyStatus": "in-sync"
+                    }
+                ],
+                "AvailabilityZone": "us-east-1d",
+                "DBSubnetGroup": {
+                    "DBSubnetGroupName": "default",
+                    "DBSubnetGroupDescription": "default",
+                    "VpcId": "vpc-a525544d0",
+                    "SubnetGroupStatus": "Complete",
+                    "Subnets": [
+                        {
+                            "SubnetIdentifier": "subnet-cd736528ec",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1c"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        },
+                        {
+                            "SubnetIdentifier": "subnet-fa28887",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1d"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        },
+                        {
+                            "SubnetIdentifier": "subnet-24222252a",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1f"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        },
+                        {
+                            "SubnetIdentifier": "subnet-b043336",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1b"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        },
+                        {
+                            "SubnetIdentifier": "subnet-555563",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1e"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        },
+                        {
+                            "SubnetIdentifier": "subnet-82222de",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1a"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        }
+                    ]
+                },
+                "PreferredMaintenanceWindow": "wed:07:46-wed:08:16",
+                "PendingModifiedValues": {},
+                "MultiAZ": false,
+                "EngineVersion": "5.7.42",
+                "AutoMinorVersionUpgrade": true,
+                "ReadReplicaDBInstanceIdentifiers": [],
+                "LicenseModel": "general-public-license",
+                "OptionGroupMemberships": [
+                    {
+                        "OptionGroupName": "default:mysql-5-7",
+                        "Status": "in-sync"
+                    }
+                ],
+                "PubliclyAccessible": false,
+                "StorageType": "gp2",
+                "DbInstancePort": 0,
+                "StorageEncrypted": false,
+                "DbiResourceId": "db-6LJIUNBB42MF4W5OLEL46YRVKM",
+                "CACertificateIdentifier": "rds-ca-2019",
+                "DomainMemberships": [],
+                "CopyTagsToSnapshot": false,
+                "MonitoringInterval": 0,
+                "DBInstanceArn": "arn:aws:rds:us-east-1:111111111111:db:db-instance-571-green",
+                "IAMDatabaseAuthenticationEnabled": false,
+                "PerformanceInsightsEnabled": false,
+                "DeletionProtection": false,
+                "AssociatedRoles": [],
+                "TagList": [
+                    {
+                        "Key": "CustodianRule",
+                        "Value": "ecc-aws-571-stopped_rds_instances_removed"
+                    },
+                    {
+                        "Key": "ComplianceStatus",
+                        "Value": "Green"
+                    }
+                ],
+                "CustomerOwnedIpEnabled": false,
+                "ActivityStreamStatus": "stopped",
+                "BackupTarget": "region",
+                "NetworkType": "IPV4",
+                "StorageThroughput": 0,
+                "CertificateDetails": {
+                    "CAIdentifier": "rds-ca-2019",
+                    "ValidTill": {
+                        "__class__": "datetime",
+                        "year": 2024,
+                        "month": 8,
+                        "day": 22,
+                        "hour": 17,
+                        "minute": 8,
+                        "second": 50,
+                        "microsecond": 0
+                    }
+                }
+            }
+        ],
+        "ResponseMetadata": {}
+    }
+}
\ No newline at end of file
diff --git a/tests/ecc-aws-571-stopped_rds_instances_removed/placebo-red/rds.DescribeDBInstances_1.json b/tests/ecc-aws-571-stopped_rds_instances_removed/placebo-red/rds.DescribeDBInstances_1.json
new file mode 100644
index 000000000..1c579a9b9
--- /dev/null
+++ b/tests/ecc-aws-571-stopped_rds_instances_removed/placebo-red/rds.DescribeDBInstances_1.json
@@ -0,0 +1,169 @@
+{
+    "status_code": 200,
+    "data": {
+        "DBInstances": [
+            {
+                "DBInstanceIdentifier": "db-instance-571-red",
+                "DBInstanceClass": "db.t2.micro",
+                "Engine": "mysql",
+                "DBInstanceStatus": "stopped",
+                "AutomaticRestartTime": {
+                    "__class__": "datetime",
+                    "year": 2023,
+                    "month": 9,
+                    "day": 23,
+                    "hour": 1,
+                    "minute": 44,
+                    "second": 57,
+                    "microsecond": 393000
+                },
+                "MasterUsername": "root",
+                "DBName": "database517red",
+                "Endpoint": {
+                    "Address": "db-instance-571-red.chhajgiktbgu.us-east-1.rds.amazonaws.com",
+                    "Port": 3306,
+                    "HostedZoneId": "Z2R2ITUGPM61AM"
+                },
+                "AllocatedStorage": 10,
+                "InstanceCreateTime": {
+                    "__class__": "datetime",
+                    "year": 2023,
+                    "month": 9,
+                    "day": 20,
+                    "hour": 11,
+                    "minute": 35,
+                    "second": 33,
+                    "microsecond": 331000
+                },
+                "PreferredBackupWindow": "08:38-09:08",
+                "BackupRetentionPeriod": 0,
+                "DBSecurityGroups": [],
+                "VpcSecurityGroups": [
+                    {
+                        "VpcSecurityGroupId": "sg-a52510",
+                        "Status": "active"
+                    }
+                ],
+                "DBParameterGroups": [
+                    {
+                        "DBParameterGroupName": "default.mysql5.7",
+                        "ParameterApplyStatus": "in-sync"
+                    }
+                ],
+                "AvailabilityZone": "us-east-1f",
+                "DBSubnetGroup": {
+                    "DBSubnetGroupName": "default",
+                    "DBSubnetGroupDescription": "default",
+                    "VpcId": "vpc-a25174d0",
+                    "SubnetGroupStatus": "Complete",
+                    "Subnets": [
+                        {
+                            "SubnetIdentifier": "subnet-c2558ec",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1c"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        },
+                        {
+                            "SubnetIdentifier": "subnet-fa9514ab7",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1d"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        },
+                        {
+                            "SubnetIdentifier": "subnet-125052a",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1f"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        },
+                        {
+                            "SubnetIdentifier": "subnet-b150c2d6",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1b"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        },
+                        {
+                            "SubnetIdentifier": "subnet-581af63",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1e"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        },
+                        {
+                            "SubnetIdentifier": "subnet-17203d8de",
+                            "SubnetAvailabilityZone": {
+                                "Name": "us-east-1a"
+                            },
+                            "SubnetOutpost": {},
+                            "SubnetStatus": "Active"
+                        }
+                    ]
+                },
+                "PreferredMaintenanceWindow": "wed:04:55-wed:05:25",
+                "PendingModifiedValues": {},
+                "MultiAZ": false,
+                "EngineVersion": "5.7.42",
+                "AutoMinorVersionUpgrade": true,
+                "ReadReplicaDBInstanceIdentifiers": [],
+                "LicenseModel": "general-public-license",
+                "OptionGroupMemberships": [
+                    {
+                        "OptionGroupName": "default:mysql-5-7",
+                        "Status": "in-sync"
+                    }
+                ],
+                "PubliclyAccessible": false,
+                "StorageType": "gp2",
+                "DbInstancePort": 0,
+                "StorageEncrypted": false,
+                "DbiResourceId": "db-CXG63VUY2UBSFZCASQ5LGTAQ5E",
+                "CACertificateIdentifier": "rds-ca-2019",
+                "DomainMemberships": [],
+                "CopyTagsToSnapshot": false,
+                "MonitoringInterval": 0,
+                "DBInstanceArn": "arn:aws:rds:us-east-1:111111111111:db:db-instance-571-red",
+                "IAMDatabaseAuthenticationEnabled": false,
+                "PerformanceInsightsEnabled": false,
+                "DeletionProtection": false,
+                "AssociatedRoles": [],
+                "TagList": [
+                    {
+                        "Key": "CustodianRule",
+                        "Value": "ecc-aws-571-stopped_rds_instances_removed"
+                    },
+                    {
+                        "Key": "ComplianceStatus",
+                        "Value": "Red"
+                    }
+                ],
+                "CustomerOwnedIpEnabled": false,
+                "ActivityStreamStatus": "stopped",
+                "BackupTarget": "region",
+                "NetworkType": "IPV4",
+                "StorageThroughput": 0,
+                "CertificateDetails": {
+                    "CAIdentifier": "rds-ca-2019",
+                    "ValidTill": {
+                        "__class__": "datetime",
+                        "year": 2024,
+                        "month": 8,
+                        "day": 22,
+                        "hour": 17,
+                        "minute": 8,
+                        "second": 50,
+                        "microsecond": 0
+                    }
+                }
+            }
+        ],
+        "ResponseMetadata": {}
+    }
+}
\ No newline at end of file
diff --git a/tests/ecc-aws-571-stopped_rds_instances_removed/red_policy_test.py b/tests/ecc-aws-571-stopped_rds_instances_removed/red_policy_test.py
new file mode 100644
index 000000000..842936d44
--- /dev/null
+++ b/tests/ecc-aws-571-stopped_rds_instances_removed/red_policy_test.py
@@ -0,0 +1,15 @@
+import datetime
+from dateutil import tz as tzutil
+
+class PolicyTest(object):
+
+    def mock_time(self):
+        return 2023, 9, 20
+
+    def test_resources(self, base_test, resources):
+        base_test.assertEqual(len(resources), 1)
+        base_test.assertEqual(resources[0]["DBInstanceStatus"], "stopped")
+        restart_time = resources[0]["AutomaticRestartTime"]
+        time_now = datetime.datetime.fromisoformat(datetime.datetime.utcnow().replace(tzinfo=datetime.timezone.utc).isoformat())
+        delta = restart_time - time_now
+        base_test.assertTrue(delta.days<=4)