# frozen_string_literal: true

module Aws
  class Role < ApplicationRecord
    self.table_name = 'aws_roles'

    belongs_to :user, inverse_of: :aws_role

    validates :role_external_id, uniqueness: true, length: { in: 1..64 }
    validates :role_arn,
      length: 1..2048,
      allow_nil: true,
      format: {
        with: Gitlab::Regex.aws_arn_regex,
        message: Gitlab::Regex.aws_arn_regex_message
      }

    before_validation :ensure_role_external_id!, on: :create

    def ensure_role_external_id!
      self.role_external_id ||= SecureRandom.hex(20)
    end
  end
end