public void Build_SetsStatement_WhenDenyAllMethodsWasCalled() { _testObject.DenyAllMethods(); var actual = _testObject.Build(_standardArn); Assert.Single(actual.PolicyDocument.Statement); var statement = actual.PolicyDocument.Statement.Single(); Assert.Equal("Deny", statement.Effect); Assert.Single(statement.Action); Assert.Contains("execute-api:Invoke", statement.Action); Assert.Single(statement.Resource); Assert.Contains($"arn:partition:service:region:awsAccountId:restApiId/stage/*/*", statement.Resource); }