assume_role_policy_document not idempotent

[st33v]

I have exported to ruby and I've been experimenting with miam by periodically doing a dry-run to compare what I exported with what is currently in my environment.

I've found that this:

role "CloudTrail_CloudWatchLogs_Role", :path=>"/" do
  instance_profiles(
    # no instance_profile
  )

  assume_role_policy_document do
    {"Version"=>"2012-10-17",
     "Statement"=>
      [{"Sid"=>"",
        "Effect"=>"Allow",
        "Principal"=>
         {"Service"=>
           ["cloudtrail.amazonaws.com", "cloudtrail.preprod.amazonaws.com"]},
        "Action"=>"sts:AssumeRole"}]}
  end
...

seems to pop up as an 'Update' when there has been no actual change:

Update Role `CloudTrail_CloudWatchLogs_Role` > AssumeRolePolicy (dry-run)
  {"Version"=>"2012-10-17",
   "Statement"=>
    [{"Sid"=>"",
      "Effect"=>"Allow",
      "Principal"=>
       {"Service"=>
         ["cloudtrail.amazonaws.com", "cloudtrail.preprod.amazonaws.com"]},
      "Action"=>"sts:AssumeRole"}]} (dry-run)

I only see the problem on assume_role_policy_documents where there is more than one Principal=>Service. I suspect a sorting problem or array comparison problem in that var when it's an array.

[winebarrel]

Sorry for reply late.
I think that it has been fixed in the following commit:

8881173