validations.rb

  def validate_statement_ip_restrictions(statement)
    errors = []

    if statement.ip_restrictions.empty?
      errors << "IPAddress Condition aws:SourceIP must contain cidr blocks"
    else
      for cidr_block in statement.ip_restrictions
        if !valid_cidr?(cidr_block)
          errors << "#{cidr_block} is not included in the valid_cidr array for this environment"
        end
      end
    end

    errors
  end

  def valid_cidr?(cidr_block)
    return true if env.valid_cidr_blocks.flatten.include?(cidr_block)
  end