awful 0.0.180 → 0.0.181

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8e11f3359fe4adb56535cfd09a2baea8eca683d4
-  data.tar.gz: 7d18da124bd687439a1b9dc01f6c5be1b35d59d9
+  metadata.gz: 57375515263da3b59aa6be96f3b22961cf462f08
+  data.tar.gz: aa3fe03470511d3127f15ade33a1497bbc2ae75a
 SHA512:
-  metadata.gz: 7cd7d321f9dbd8aa02d8b696fc7a2baecec2dab180b32a4f458c777754361418af7b0a474bc64f1eff1688da1fcc9ee339e13ea8e33e6aea0c5db383a1381625
-  data.tar.gz: f23c217fc9e4e08a206f487e02bd5fd49b9916729cc883580f3f70be62781260a70e43943fb64a6309127254f3b4a69b5850771011e66a1ac91cca009065d24c
+  metadata.gz: ec4213f8ce0ca3006ea5c372054dfa087fbfbcb72f895312b8b39825eb88c759b2e0738364d7f5b6f49ead1cf859d18a0a36f7babee15d59fed38d7f2cf41cd0
+  data.tar.gz: c088cc2c848eda7b20c737c8088b27a4f6cb1e11d30f04171c05c5c884b6f402e635f070859c64b6958264b36d381c107ccd0756983983f060b247bf5ca113c7

data/lib/awful/certs.rb

@@ -10,6 +10,20 @@ module Awful
       def iam
         @iam ||= Aws::IAM::Client.new
       end
+
+      def color_date(date)
+        diff = date - Time.now
+        set_color(
+          date,
+          if diff < 0
+            :red
+          elsif diff < (60*60*24*30)
+            :yellow
+          else
+            :green
+          end
+        )
+      end
     end
 
     desc 'ls [PATH_PREFIX]', 'list server certificates'
@@ -32,7 +46,7 @@ module Awful
               c.path,
               c.server_certificate_id,
               c.upload_date,
-              c.expiration,
+              color_date(c.expiration),
             ]
           }.sort
         elsif options[:arns]

data/lib/awful/iam.rb

@@ -2,11 +2,19 @@ require 'json'
 
 module Awful
   class IAM < Cli
+    COLORS = {
+      Active:   :green,
+      Inactive: :red,
+    }
 
     no_commands do
       def iam
         @iam ||= Aws::IAM::Client.new
       end
+
+      def color(string)
+        set_color(string, COLORS.fetch(string.to_sym, :yellow))
+      end
     end
 
     desc 'users', 'list users'
@@ -93,6 +101,62 @@ module Awful
       end
     end
 
+    desc 'keys', 'list access keys'
+    method_option :long, aliases: '-l', type: :boolean, default: false, desc: 'long listing'
+    method_option :user, aliases: '-u', type: :string,  default: nil,   desc: 'show different user'
+    method_option :delete,              type: :string,  default: nil,   desc: 'delete named key'
+    def keys
+      if options[:delete]
+        if yes?("Really delete key #{options[:delete]}?", :yellow)
+          iam.delete_access_key(access_key_id: options[:delete])
+        end
+        return
+      end
+
+      ## list keys
+      iam.list_access_keys(user_name: options[:user]).access_key_metadata.output do |keys|
+        if options[:long]
+          print_table keys.map{ |k|
+            [k.user_name, k.access_key_id, k.create_date, color(k.status)]
+          }
+        else
+          puts keys.map(&:access_key_id)
+        end
+      end
+    end
+
+    desc 'old', 'report on old access keys'
+    method_option :days, aliases: '-d', type: :numeric, default: 90,    desc: 'age in days to treat as old'
+    method_option :all,  aliases: '-a', type: :boolean, default: false, desc: 'list all users'
+    def old
+      iam.list_users.users.map do |u|
+        iam.list_access_keys(user_name: u.user_name).access_key_metadata.map do |k|
+          age = ((Time.now - k.create_date)/(60*60*24)).to_i
+          too_old = age > options[:days]
+          if options[:all] || too_old
+            [k.user_name, k.create_date, set_color("#{age} days", too_old ? :red : :green)]
+          else
+            nil
+          end
+        end
+      end.flatten(1).reject(&:nil?).output do |list|
+        print_table list
+      end
+    end
+
+    desc 'rotate', 'rotate access key for user'
+    method_option :user, aliases: '-u', type: :string,  default: nil,   desc: 'show different user'
+    def rotate
+      key = iam.create_access_key(user_name: options[:user]).access_key
+      puts(
+        "Your new credentials:",
+        "AWS_ACCESS_KEY_ID=#{key.access_key_id}",
+        "AWS_SECRET_ACCESS_KEY=#{key.secret_access_key}",
+      )
+    rescue Aws::IAM::Errors::LimitExceeded
+      warn 'You have two access keys: please delete one and run this command again.'
+    end
+
   end
 
 end

data/lib/awful/version.rb

@@ -1,3 +1,3 @@
 module Awful
-  VERSION = '0.0.180'
+  VERSION = '0.0.181'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: awful
 version: !ruby/object:Gem::Version
-  version: 0.0.180
+  version: 0.0.181
 platform: ruby
 authors:
 - Ric Lister
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-09-14 00:00:00.000000000 Z
+date: 2017-09-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler