chore: Add dedicated code coverage tox environment

Author: farleyb-amazon

buildspec.yml

@@ -13,3 +13,6 @@ batch:
       buildspec: codebuild/python_37.yml
     - identifier: python_38
       buildspec: codebuild/python_38.yml
+
+    - identifier: code_coverage
+      buildspec: codebuild/coverage.yml

codebuild/coverage.yml

@@ -0,0 +1,16 @@
+version: 0.2
+
+env:
+  variables:
+    TOXENV: "coverage"
+    AWS_ENCRYPTION_SDK_PYTHON_INTEGRATION_TEST_AWS_KMS_KEY_ID: >-
+      arn:aws:kms:us-west-2:658956600833:key/b3537ef1-d8dc-4780-9f5a-55776cbb2f7f
+
+phases:
+  install:
+    runtime-versions:
+      python: latest
+  build:
+    commands:
+      - pip install tox
+      - tox

setup.cfg

@@ -9,6 +9,7 @@ branch = True
 
 [coverage:report]
 show_missing = True
+fail_under = 70
 
 [mypy]
 ignore_missing_imports = True

tox.ini

@@ -29,6 +29,10 @@ envlist =
 # test-release :: Builds dist files and uploads to testpypi pypirc profile.
 # release :: Builds dist files and uploads to pypi pypirc profile.
 
+# Reporting environments:
+#
+# coverage :: Runs code coverage, failing the build if coverage is below the configured threshold
+
 [testenv]
 passenv = 
     # Identifies AWS KMS key id to use in integration tests
@@ -49,10 +53,14 @@ deps =
     pytest-cov
     pytest-mock
 commands =
-    local: pytest --cov aws_encryption_sdk_cli -m local -l test/ {posargs}
-    integ: pytest --cov aws_encryption_sdk_cli -m integ -l test/ {posargs}
+    local: pytest -m local -l test/ {posargs}
+    integ: pytest -m integ -l test/ {posargs}
     all: pytest --cov aws_encryption_sdk_cli -l test/ {posargs}
 
+# Run code coverage on the unit tests
+[testenv:coverage]
+commands = pytest --cov aws_encryption_sdk test/
+
 # mypy
 [testenv:mypy-coverage]
 commands =