aws-role 0.1.0

data/.gitignore

@@ -0,0 +1,11 @@
+/.bundle/
+/.yardoc
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/
+
+# rspec failure tracking
+.rspec_status

data/.rspec

@@ -0,0 +1,3 @@
+--format documentation
+--color
+--require spec_helper

data/.travis.yml

@@ -0,0 +1,5 @@
+sudo: false
+language: ruby
+rvm:
+  - 2.3.1
+before_install: gem install bundler -v 1.16.1

data/Gemfile

@@ -0,0 +1,7 @@
+source "https://rubygems.org"
+
+git_source(:github) {|repo_name| "https://github.com/#{repo_name}" }
+
+# Specify your gem's dependencies in aws-role.gemspec
+gemspec
+

data/Gemfile.lock

@@ -0,0 +1,574 @@
+PATH
+  remote: .
+  specs:
+    aws-role (0.1.0)
+      aws-sdk (~> 3.0.1)
+      clamp (~> 1.2.1)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    aws-partitions (1.68.0)
+    aws-sdk (3.0.1)
+      aws-sdk-resources (~> 3)
+    aws-sdk-acm (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-alexaforbusiness (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-apigateway (1.9.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-applicationautoscaling (1.8.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-applicationdiscoveryservice (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-appstream (1.6.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-appsync (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-athena (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-autoscaling (1.5.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-autoscalingplans (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-batch (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-budgets (1.5.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cloud9 (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-clouddirectory (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cloudformation (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cloudfront (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cloudhsm (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cloudhsmv2 (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cloudsearch (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cloudsearchdomain (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cloudtrail (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cloudwatch (1.4.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cloudwatchevents (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cloudwatchlogs (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-codebuild (1.6.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-codecommit (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-codedeploy (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-codepipeline (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-codestar (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cognitoidentity (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cognitoidentityprovider (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-cognitosync (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-comprehend (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-configservice (1.6.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-core (3.17.0)
+      aws-partitions (~> 1.0)
+      aws-sigv4 (~> 1.0)
+      jmespath (~> 1.0)
+    aws-sdk-costandusagereportservice (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-costexplorer (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-databasemigrationservice (1.4.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-datapipeline (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-dax (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-devicefarm (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-directconnect (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-directoryservice (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-dynamodb (1.4.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-dynamodbstreams (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-ec2 (1.29.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-ecr (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-ecs (1.8.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-efs (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-elasticache (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-elasticbeanstalk (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-elasticloadbalancing (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-elasticloadbalancingv2 (1.8.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-elasticsearchservice (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-elastictranscoder (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-emr (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-firehose (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-gamelift (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-glacier (1.6.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-glue (1.5.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-greengrass (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-guardduty (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-health (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-iam (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-importexport (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv2 (~> 1.0)
+    aws-sdk-inspector (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-iot (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-iotdataplane (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-iotjobsdataplane (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-kinesis (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-kinesisanalytics (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-kinesisvideo (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-kinesisvideoarchivedmedia (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-kinesisvideomedia (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-kms (1.5.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-lambda (1.4.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-lambdapreview (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-lex (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-lexmodelbuildingservice (1.5.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-lightsail (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-machinelearning (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-marketplacecommerceanalytics (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-marketplaceentitlementservice (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-marketplacemetering (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-mediaconvert (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-medialive (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-mediapackage (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-mediastore (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-mediastoredata (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-migrationhub (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-mobile (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-mq (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-mturk (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-opsworks (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-opsworkscm (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-organizations (1.7.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-pinpoint (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-polly (1.4.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-pricing (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-rds (1.13.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-redshift (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-rekognition (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-resourcegroups (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-resourcegroupstaggingapi (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-resources (3.12.0)
+      aws-sdk-acm (~> 1)
+      aws-sdk-alexaforbusiness (~> 1)
+      aws-sdk-apigateway (~> 1)
+      aws-sdk-applicationautoscaling (~> 1)
+      aws-sdk-applicationdiscoveryservice (~> 1)
+      aws-sdk-appstream (~> 1)
+      aws-sdk-appsync (~> 1)
+      aws-sdk-athena (~> 1)
+      aws-sdk-autoscaling (~> 1)
+      aws-sdk-autoscalingplans (~> 1)
+      aws-sdk-batch (~> 1)
+      aws-sdk-budgets (~> 1)
+      aws-sdk-cloud9 (~> 1)
+      aws-sdk-clouddirectory (~> 1)
+      aws-sdk-cloudformation (~> 1)
+      aws-sdk-cloudfront (~> 1)
+      aws-sdk-cloudhsm (~> 1)
+      aws-sdk-cloudhsmv2 (~> 1)
+      aws-sdk-cloudsearch (~> 1)
+      aws-sdk-cloudsearchdomain (~> 1)
+      aws-sdk-cloudtrail (~> 1)
+      aws-sdk-cloudwatch (~> 1)
+      aws-sdk-cloudwatchevents (~> 1)
+      aws-sdk-cloudwatchlogs (~> 1)
+      aws-sdk-codebuild (~> 1)
+      aws-sdk-codecommit (~> 1)
+      aws-sdk-codedeploy (~> 1)
+      aws-sdk-codepipeline (~> 1)
+      aws-sdk-codestar (~> 1)
+      aws-sdk-cognitoidentity (~> 1)
+      aws-sdk-cognitoidentityprovider (~> 1)
+      aws-sdk-cognitosync (~> 1)
+      aws-sdk-comprehend (~> 1)
+      aws-sdk-configservice (~> 1)
+      aws-sdk-costandusagereportservice (~> 1)
+      aws-sdk-costexplorer (~> 1)
+      aws-sdk-databasemigrationservice (~> 1)
+      aws-sdk-datapipeline (~> 1)
+      aws-sdk-dax (~> 1)
+      aws-sdk-devicefarm (~> 1)
+      aws-sdk-directconnect (~> 1)
+      aws-sdk-directoryservice (~> 1)
+      aws-sdk-dynamodb (~> 1)
+      aws-sdk-dynamodbstreams (~> 1)
+      aws-sdk-ec2 (~> 1)
+      aws-sdk-ecr (~> 1)
+      aws-sdk-ecs (~> 1)
+      aws-sdk-efs (~> 1)
+      aws-sdk-elasticache (~> 1)
+      aws-sdk-elasticbeanstalk (~> 1)
+      aws-sdk-elasticloadbalancing (~> 1)
+      aws-sdk-elasticloadbalancingv2 (~> 1)
+      aws-sdk-elasticsearchservice (~> 1)
+      aws-sdk-elastictranscoder (~> 1)
+      aws-sdk-emr (~> 1)
+      aws-sdk-firehose (~> 1)
+      aws-sdk-gamelift (~> 1)
+      aws-sdk-glacier (~> 1)
+      aws-sdk-glue (~> 1)
+      aws-sdk-greengrass (~> 1)
+      aws-sdk-guardduty (~> 1)
+      aws-sdk-health (~> 1)
+      aws-sdk-iam (~> 1)
+      aws-sdk-importexport (~> 1)
+      aws-sdk-inspector (~> 1)
+      aws-sdk-iot (~> 1)
+      aws-sdk-iotdataplane (~> 1)
+      aws-sdk-iotjobsdataplane (~> 1)
+      aws-sdk-kinesis (~> 1)
+      aws-sdk-kinesisanalytics (~> 1)
+      aws-sdk-kinesisvideo (~> 1)
+      aws-sdk-kinesisvideoarchivedmedia (~> 1)
+      aws-sdk-kinesisvideomedia (~> 1)
+      aws-sdk-kms (~> 1)
+      aws-sdk-lambda (~> 1)
+      aws-sdk-lambdapreview (~> 1)
+      aws-sdk-lex (~> 1)
+      aws-sdk-lexmodelbuildingservice (~> 1)
+      aws-sdk-lightsail (~> 1)
+      aws-sdk-machinelearning (~> 1)
+      aws-sdk-marketplacecommerceanalytics (~> 1)
+      aws-sdk-marketplaceentitlementservice (~> 1)
+      aws-sdk-marketplacemetering (~> 1)
+      aws-sdk-mediaconvert (~> 1)
+      aws-sdk-medialive (~> 1)
+      aws-sdk-mediapackage (~> 1)
+      aws-sdk-mediastore (~> 1)
+      aws-sdk-mediastoredata (~> 1)
+      aws-sdk-migrationhub (~> 1)
+      aws-sdk-mobile (~> 1)
+      aws-sdk-mq (~> 1)
+      aws-sdk-mturk (~> 1)
+      aws-sdk-opsworks (~> 1)
+      aws-sdk-opsworkscm (~> 1)
+      aws-sdk-organizations (~> 1)
+      aws-sdk-pinpoint (~> 1)
+      aws-sdk-polly (~> 1)
+      aws-sdk-pricing (~> 1)
+      aws-sdk-rds (~> 1)
+      aws-sdk-redshift (~> 1)
+      aws-sdk-rekognition (~> 1)
+      aws-sdk-resourcegroups (~> 1)
+      aws-sdk-resourcegroupstaggingapi (~> 1)
+      aws-sdk-route53 (~> 1)
+      aws-sdk-route53domains (~> 1)
+      aws-sdk-s3 (~> 1)
+      aws-sdk-sagemaker (~> 1)
+      aws-sdk-sagemakerruntime (~> 1)
+      aws-sdk-serverlessapplicationrepository (~> 1)
+      aws-sdk-servicecatalog (~> 1)
+      aws-sdk-servicediscovery (~> 1)
+      aws-sdk-ses (~> 1)
+      aws-sdk-shield (~> 1)
+      aws-sdk-simpledb (~> 1)
+      aws-sdk-sms (~> 1)
+      aws-sdk-snowball (~> 1)
+      aws-sdk-sns (~> 1)
+      aws-sdk-sqs (~> 1)
+      aws-sdk-ssm (~> 1)
+      aws-sdk-states (~> 1)
+      aws-sdk-storagegateway (~> 1)
+      aws-sdk-support (~> 1)
+      aws-sdk-swf (~> 1)
+      aws-sdk-transcribeservice (~> 1)
+      aws-sdk-translate (~> 1)
+      aws-sdk-waf (~> 1)
+      aws-sdk-wafregional (~> 1)
+      aws-sdk-workdocs (~> 1)
+      aws-sdk-workmail (~> 1)
+      aws-sdk-workspaces (~> 1)
+      aws-sdk-xray (~> 1)
+    aws-sdk-route53 (1.9.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-route53domains (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-s3 (1.8.2)
+      aws-sdk-core (~> 3)
+      aws-sdk-kms (~> 1)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-sagemaker (1.5.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-sagemakerruntime (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-serverlessapplicationrepository (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-servicecatalog (1.4.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-servicediscovery (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-ses (1.6.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-shield (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-simpledb (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv2 (~> 1.0)
+    aws-sdk-sms (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-snowball (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-sns (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-sqs (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-ssm (1.8.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-states (1.2.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-storagegateway (1.3.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-support (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-swf (1.0.1)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-transcribeservice (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-translate (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-waf (1.4.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-wafregional (1.4.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-workdocs (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-workmail (1.0.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-workspaces (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sdk-xray (1.1.0)
+      aws-sdk-core (~> 3)
+      aws-sigv4 (~> 1.0)
+    aws-sigv2 (1.0.1)
+    aws-sigv4 (1.0.2)
+    clamp (1.2.1)
+    diff-lcs (1.3)
+    jmespath (1.3.1)
+    rake (10.5.0)
+    rspec (3.7.0)
+      rspec-core (~> 3.7.0)
+      rspec-expectations (~> 3.7.0)
+      rspec-mocks (~> 3.7.0)
+    rspec-core (3.7.1)
+      rspec-support (~> 3.7.0)
+    rspec-expectations (3.7.0)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.7.0)
+    rspec-mocks (3.7.0)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.7.0)
+    rspec-support (3.7.1)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  aws-role!
+  bundler (~> 1.16)
+  rake (~> 10.0)
+  rspec (~> 3.0)
+
+BUNDLED WITH
+   1.16.1

data/README.md

@@ -0,0 +1,73 @@
+# Aws::Role
+
+CLI to allow easy aws role assumption.
+
+## Why assuming roles with the AWS CLI sucks.
+
+Assuming roles in AWS via the CLI is clunky with the default tooling. You need to do something like this:
+
+```
+# Assume the role. Man that's a long string to have to paste on the CLI!
+aws sts assume-role --role-arn arn:aws:iam::123456789012:role/xaccounts3access --role-session-name s3-access-example
+
+# Now copy the secret key, access key, and token from the output and paste it:
+export AWS_ACCESS_KEY_ID=...
+export AWS_SECRET_KEY=...
+export AWS_SESSION_TOKEN=...
+
+# Okay, NOW you can do stuff using the role....
+```
+
+## How to make it better.
+
+Before doing this, you need to have the following environment variables exported:
+
+  * `AWS_ACCESS_KEY_ID`
+  * `AWS_SECRET_ACCESS_KEY`
+  * `AWS_MFA_SERIAL` -- you only need this if you require MFA for role assumption (which hopefully, you do).
+  * `AWS_DEFAULT_REGION`
+
+I suggest putting these into a `~/.secrets` file so you don't type this stuff out all the time.
+
+Once this is done, you can do the following:
+
+1. Create a ~/.aws_roles file. It's yaml, and it looks like this:
+
+```yaml
+my_role: arn:aws:iam::123456789012:role/xaccounts3access
+my_other_role: arn:aws:iam::2109876312412:otherrole/admin
+```
+
+2. Assume the role:
+```bash
+# You'll get prompted for your MFA token if necessary:
+eval `aws-role -r my_role`
+
+# Now do the things!
+aws s3 ls # etc
+```
+
+3. Oh you want to login to the UI or print out a link? No problem!
+```bash
+# Uses "open" under the hood, only works on OSX:
+aws-role -r my_role --ui
+
+# Just print out the url instead of opening it:
+aws-role -r my_role --url
+```
+
+## Installation
+
+```bash
+gem install aws-role
+```
+
+## Development
+
+After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
+
+To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
+
+## Contributing
+
+Bug reports and pull requests are welcome on GitHub at https://github.com/sheax0r/aws-role.

data/Rakefile

@@ -0,0 +1,6 @@
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new(:spec)
+
+task :default => :spec

data/aws-role.gemspec

@@ -0,0 +1,29 @@
+
+lib = File.expand_path("../lib", __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require "aws/role/version"
+
+Gem::Specification.new do |spec|
+  spec.name          = "aws-role"
+  spec.version       = AwsRole::VERSION
+  spec.authors       = ["Michael Shea"]
+  spec.email         = ["michael.shea@heroku.com"]
+
+  spec.summary       = %q{CLI to assume AWS roles}
+  spec.description   = %q{CLI to assume AWS roles}
+  spec.homepage      = "https://github.com/sheax0r/aws-role"
+
+  spec.files         = `git ls-files -z`.split("\x0").reject do |f|
+    f.match(%r{^(test|spec|features)/})
+  end
+  spec.bindir        = "bin"
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.require_paths = ["lib"]
+
+  spec.add_dependency "clamp", "~> 1.2.1"
+  spec.add_dependency "aws-sdk", "~> 3.0.1"
+
+  spec.add_development_dependency "bundler", "~> 1.16"
+  spec.add_development_dependency "rake", "~> 10.0"
+  spec.add_development_dependency "rspec", "~> 3.0"
+end

data/bin/aws-role

@@ -0,0 +1,5 @@
+#!/usr/bin/env ruby
+require "aws/role"
+
+AwsRole::Assume.run
+

data/lib/aws/role.rb

@@ -0,0 +1,5 @@
+require "aws/role/version"
+require "aws/role/assume"
+
+module AwsRole
+end

data/lib/aws/role/assume.rb

@@ -0,0 +1,95 @@
+require "aws-sdk"
+require "clamp"
+require "yaml"
+
+module AwsRole
+  class Assume < Clamp::Command
+
+    option %w{--access-key}, "AWS_ACCESS_KEY_ID", "aws access key id", required: true, environment_variable: "AWS_ACCESS_KEY_ID", attribute_name: :aws_access_key_id
+    option %w{--secret-key}, "AWS_SECRET_ACCESS_KEY", "aws secret key", required: true, environment_variable: "AWS_SECRET_ACCESS_KEY", attribute_name: :aws_secret_access_key
+    option %w{--region}, "REGION", "aws region", required: true, environment_variable: "AWS_DEFAULT_REGION", attribute_name: :aws_region
+    option %w{-r --role}, "ROLE", "the role to assume", required: true, attribute_name: :role
+    option %w{-d --duration}, "DURATION", "duration of the assumed credentials in seconds", default: 3600
+    option %w{-s --serial}, "AWS_MFA_SERIAL", "MFA serial number", required: false, environment_variable: "AWS_MFA_SERIAL", attribute_name: :mfa_serial
+    option %w{-f --file}, "ROLES_FILE", "Yaml file containing the list of roles", environment_variable: "AWS_ROLES_FILE", attribute_name: :roles_file, default: "#{ENV["HOME"]}/.aws_roles"
+    option "--ui", :flag, "Set this if you want to switch roles in the UI"
+    option "--url", :flag, "Set this if you want to print out the URL to be used to assume a role"
+
+    parameter "PARAMETERS ...", "command to execute", required: false, attribute_name: :params
+
+    def execute
+      if ui? || url?
+        match = role_arn.match(role_expression)
+        account = match["account"]
+        role_name = match["role_name"]
+        url = "https://signin.aws.amazon.com/switchrole?account=#{account}&roleName=#{role_name}&displayName=#{role}"
+
+        puts url if url?
+        system("open '#{url}'") if ui?
+      else
+        creds = credentials
+        if params.size > 0
+          ENV['AWS_ACCESS_KEY_ID'] = creds.access_key_id
+          ENV['AWS_SECRET_ACCESS_KEY'] = creds.secret_access_key
+          ENV['AWS_SESSION_TOKEN'] = creds.session_token
+          exec(params.join(" "))
+        else
+          %w{AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_SESSION_TOKEN}.each do |key|
+            STDOUT.puts "unset #{key};"
+          end
+          STDOUT.puts "export AWS_ACCESS_KEY_ID=#{creds.access_key_id};"
+          STDOUT.puts "export AWS_SECRET_ACCESS_KEY=#{creds.secret_access_key};"
+          STDOUT.puts "export AWS_SESSION_TOKEN=$'#{creds.session_token}';"
+        end
+      end
+    end
+
+    private
+
+    def sts
+      @sts ||= ::Aws::STS::Client.new(aws_params)
+    end
+
+    def credentials
+      sts.assume_role(assume_role_params).credentials
+    end
+
+    def assume_role_params
+      result = {
+        role_arn: role_arn,
+        role_session_name: "srtools-cli",
+        duration_seconds: Integer(duration)
+      }
+      if mfa_serial
+        result [:serial_number] = mfa_serial
+        result[:token_code] = mfa_token
+      end
+      result
+    end
+
+    def aws_params
+      {
+        region: aws_region,
+        access_key_id: aws_access_key_id,
+        secret_access_key: aws_secret_access_key,
+      }
+    end
+
+    def mfa_token
+      STDERR.puts "Enter your MFA code: "
+      STDIN.gets.strip
+    end
+
+    def role_arn
+      roles[role]
+    end
+
+    def roles
+      @roles ||= YAML.load(File.read(roles_file))
+    end
+
+    def role_expression
+      /arn:aws:iam::(?<account>\d.*):role\/(?<role_name>.*)/
+    end
+  end
+end

data/lib/aws/role/version.rb

@@ -0,0 +1,3 @@
+module AwsRole
+  VERSION = "0.1.0"
+end

metadata

@@ -0,0 +1,138 @@
+--- !ruby/object:Gem::Specification
+name: aws-role
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+  prerelease: 
+platform: ruby
+authors:
+- Michael Shea
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-03-06 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: clamp
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.2.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.2.1
+- !ruby/object:Gem::Dependency
+  name: aws-sdk
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 3.0.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 3.0.1
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.16'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.16'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '3.0'
+description: CLI to assume AWS roles
+email:
+- michael.shea@heroku.com
+executables:
+- aws-role
+extensions: []
+extra_rdoc_files: []
+files:
+- .gitignore
+- .rspec
+- .travis.yml
+- Gemfile
+- Gemfile.lock
+- README.md
+- Rakefile
+- aws-role.gemspec
+- bin/aws-role
+- lib/aws/role.rb
+- lib/aws/role/assume.rb
+- lib/aws/role/version.rb
+homepage: https://github.com/sheax0r/aws-role
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.23
+signing_key: 
+specification_version: 3
+summary: CLI to assume AWS roles
+test_files: []