awful 0.0.145 → 0.0.146

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8918e2e258dfa5fd223ed731e84d12e47a0a2e53
-  data.tar.gz: 29940f711e894a9bff521aceca04688c3d2956c4
+  metadata.gz: 67e76830d6ca11e1b34442199e55587c816dfe61
+  data.tar.gz: f75d5135c848e592dffa10100307a93ab8134165
 SHA512:
-  metadata.gz: 00cc479ade9ac596d3ff8f9a16c0ffffbcbfa5245d71ddc48fe6bda9e7df3b4ed3343aad75e283611c7cd9958a521558ee2244c5dd09b17e9126a704dd97113f
-  data.tar.gz: b4506f3b63b4531938994e00f39d8545a5c272ad320d3328524547c12055b3f55fd01abd12f278eaeeb3e37fa110bbaf1822ded9879d097f5b8499d631aad03a
+  metadata.gz: 48860bfd4fdda8282da19281ed40215b7e253067c32149b973545c2cc9948e71aabe553e6b9da3d546eaf65b43b7194170ca5e7641e4ac752541a405414f9b33
+  data.tar.gz: eedaaa3d216ca79f26e3f763a00511e4141dd9bf1862d82812ca12963a157d34000b9851a54e74cb5f68117c9e00c4bcc48e3a262f7205131f7eeb99d602307d

data/bin/waf

@@ -0,0 +1,10 @@
+#!/usr/bin/ruby
+#-*- mode: ruby; -*-
+
+require 'awful'
+require 'awful/waf'
+require 'awful/waf_acl'
+require 'awful/waf_rule'
+require 'awful/waf_ipset'
+
+Awful::WAF::Base.start(ARGV)

data/lib/awful/version.rb

@@ -1,3 +1,3 @@
 module Awful
-  VERSION = '0.0.145'
+  VERSION = '0.0.146'
 end

data/lib/awful/waf.rb

@@ -0,0 +1,40 @@
+module Awful
+  module WAF
+
+    class Base < Cli
+      no_commands do
+        def waf
+          @_waf ||= Aws::WAF::Client.new
+        end
+
+        ## boilerplate for handling paging in all list_ methods
+        def list_thing(thing)
+          next_marker = nil
+          things = []
+          loop do
+            response = waf.send("list_#{thing}", next_marker: next_marker, limit: 10)
+            things += response.send(thing)
+            next_marker = response.next_marker
+            break unless next_marker
+          end
+          things
+        end
+
+        def change_token
+          waf.get_change_token.change_token
+        end
+      end
+
+      desc 'change [ID]', 'get or view change token'
+      def change(token = nil)
+        if token
+          waf.get_change_token_status(change_token: token).change_token_status.output(&method(:puts))
+        else
+          waf.get_change_token.change_token.output(&method(:puts))
+        end
+      end
+
+    end
+
+  end
+end

data/lib/awful/waf_acl.rb

@@ -0,0 +1,32 @@
+module Awful
+  module Short
+    def waf_acl(*args)
+      Awful::WAF::Acl.new.invoke(*args)
+    end
+  end
+
+  module WAF
+    class Acl < Base
+
+      desc 'ls', 'list web_acls'
+      method_option :long, aliases: '-l', type: :boolean, default: false, desc: 'long listing'
+      method_option :limit,               type: :numeric, default: 50,    desc: 'limit of acls to request'
+      def ls
+        list_thing(:web_acls).output do |list|
+          if options[:long]
+            print_table list.map { |a| [a.name, a.web_acl_id] }
+          else
+            puts list.map(&:name)
+          end
+        end
+      end
+
+    end
+
+    class Base < Cli
+      desc 'acl', 'acl subcommands'
+      subcommand 'acl', Acl
+    end
+
+  end
+end

data/lib/awful/waf_ipset.rb

@@ -0,0 +1,62 @@
+module Awful
+  module Short
+    def waf_ipset(*args)
+      Awful::WAF::Ipset.new.invoke(*args)
+    end
+  end
+
+  module WAF
+    class Ipset < Base
+
+      desc 'ls', 'list ipsets'
+      method_option :long, aliases: '-l', type: :boolean, default: false, desc: 'long listing'
+      def ls
+        list_thing(:ip_sets).output do |ipsets|
+          if options[:long]
+            print_table ipsets.map { |i| [i.name, i.ip_set_id] }
+          else
+            puts ipsets.map(&:name)
+          end
+        end
+      end
+
+      desc 'get ID', 'get ipset'
+      method_option :long, aliases: '-l', type: :boolean, default: false, desc: 'long listing'
+      def get(id)
+        waf.get_ip_set(ip_set_id: id).ip_set.ip_set_descriptors.output do |ipsets|
+          if options[:long]
+            print_table ipsets.map { |i| [i.value, i.type] }
+          else
+            puts ipsets.map(&:value)
+          end
+        end
+      end
+
+      desc 'update ID', 'update ipset with ips'
+      method_option :type, type: :string, default: 'ipv4', desc: 'type of address, IPV4 or IPV6'
+      method_option :delete, type: :boolean, default: false, desc: 'delete IPs'
+      def update(id, *values)
+        waf.update_ip_set(
+          ip_set_id: id,
+          change_token: change_token,
+          updates: values.map do |value|
+            {
+              action: options[:delete] ? 'DELETE' : 'INSERT',
+              ip_set_descriptor: {
+                type: options[:type].upcase,
+                value: value
+              }
+            }
+          end
+        )
+      end
+
+    end
+
+    class Base < Cli
+      desc 'ipset', 'ipset subcommands'
+      subcommand 'ipset', Ipset
+    end
+
+  end
+end

data/lib/awful/waf_rule.rb

@@ -0,0 +1,31 @@
+module Awful
+  module Short
+    def waf_rule(*args)
+      Awful::WAF::Rule.new.invoke(*args)
+    end
+  end
+
+  module WAF
+    class Rule < Base
+
+      desc 'ls', 'list rules'
+      method_option :long, aliases: '-l', type: :boolean, default: false, desc: 'long listing'
+      def ls
+        list_thing(:rules).output do |rules|
+          if options[:long]
+            print_table rules.map { |r| [r.name, r.rule_id] }
+          else
+            puts rules.map(&:name)
+          end
+        end
+      end
+
+    end
+
+    class Base < Cli
+      desc 'rule', 'rule subcommands'
+      subcommand 'rule', Rule
+    end
+
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: awful
 version: !ruby/object:Gem::Version
-  version: 0.0.145
+  version: 0.0.146
 platform: ruby
 authors:
 - Ric Lister
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-10-07 00:00:00.000000000 Z
+date: 2016-10-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -115,6 +115,7 @@ executables:
 - subnet
 - ta
 - vpc
+- waf
 extensions: []
 extra_rdoc_files: []
 files:
@@ -155,6 +156,7 @@ files:
 - bin/subnet
 - bin/ta
 - bin/vpc
+- bin/waf
 - lib/awful.rb
 - lib/awful/alb.rb
 - lib/awful/ami.rb
@@ -195,6 +197,10 @@ files:
 - lib/awful/trusted_advisor.rb
 - lib/awful/version.rb
 - lib/awful/vpc.rb
+- lib/awful/waf.rb
+- lib/awful/waf_acl.rb
+- lib/awful/waf_ipset.rb
+- lib/awful/waf_rule.rb
 homepage: ''
 licenses:
 - MIT