aws-sdk-v1 1.52.0

data/lib/aws/ec2/network_acl/association.rb

@@ -0,0 +1,56 @@
+# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+module AWS
+  class EC2
+    class NetworkACL < Resource
+
+      # Represents the association between a {NetworkACL} and a {Subnet}.
+      class Association
+
+        def initialize association_id, network_acl, subnet
+          @association_id = association_id
+          @network_acl = network_acl
+          @subnet = subnet
+        end
+
+        # @return [String] An identifier representing the association
+        #   between the network ACL and subnet.
+        attr_reader :association_id
+
+        # @return [NetworkACL]
+        attr_reader :network_acl
+
+        # @return [Subnet]
+        attr_reader :subnet
+
+        # Replaces the network acl in the current association with a
+        # different one (a new network acl is assigned to the subnet).
+        #
+        # @param [NetworkACL,String] network_acl A {NetworkACL} object or
+        #   a network acl id (string).
+        #
+        # @return [nil]
+        #
+        def replace_network_acl network_acl
+          acl_id = network_acl.is_a?(NetworkACL) ? network_acl.id : network_acl
+          subnet.client.replace_network_acl_association(
+            :association_id => association_id,
+            :network_acl_id => acl_id)
+          nil
+        end
+
+      end
+    end
+  end
+end

data/lib/aws/ec2/network_acl/entry.rb

@@ -0,0 +1,147 @@
+# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+module AWS
+  class EC2
+    class NetworkACL < Resource
+
+      # Represents a single entry (rule) for an EC2 network ACL.
+      class Entry
+
+        def initialize network_acl, details
+          @network_acl = network_acl
+          @rule_number = details[:rule_number]
+          @protocol = details[:protocol].to_i
+          @action = details[:rule_action].to_sym
+          @egress = details[:egress]
+          @ingress = !@egress
+          @cidr_block = details[:cidr_block]
+          if type_code = details[:icmp_type_code]
+            @icmp_type = type_code[:type]
+            @icmp_code = type_code[:code]
+          end
+          if range = details[:port_range]
+            @port_range = (range[:from]..range[:to])
+          end
+        end
+
+        # @return [NetworkACL]
+        attr_reader :network_acl
+
+        # @return [Integer]
+        attr_reader :rule_number
+
+        # @return [Integer] Returns the protocol number.  A value of -1
+        #   means all protocols.  See
+        #   http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml
+        #   for a list of protocol numbers to names.
+        attr_reader :protocol
+
+        # @return [:allow,:deny] Whether to allow or deny the traffic that
+        #   matches the rule.
+        attr_reader :action
+
+        # @return [Boolean] Indicate the rule is an egress rule (rule is
+        #   applied to traffic leaving the subnet).
+        attr_reader :egress
+
+        # @return [Boolean] Indicate the rule is an ingress rule (rule is
+        #   applied to traffic entering the subnet).
+        attr_reader :ingress
+
+        # @return [String] The network range to allow or deny, in CIDR notation.
+        attr_reader :cidr_block
+
+        # @return [nil,Range<Integer>] For the TCP or UDP protocols, the range
+        #   of ports the rule applies to.
+        attr_reader :port_range
+
+        # @return [nil,Integer] A value of -1 means all codes for the given
+        #  ICMP type.  Returns nil unless the protocol is ICMP.
+        attr_reader :icmp_code
+
+        # @return [nil,Integer] A value of -1 means all codes for the given
+        #  ICMP type.  Returns nil unless the protocol is ICMP.
+        attr_reader :icmp_type
+
+        # @return [Boolean] Returns true if traffic matching this rule
+        #   is allowed.
+        def allow?
+          @action == :allow
+        end
+
+        # @return [Boolean] Returns true if traffic matching this rule
+        #   is denied.
+        def deny?
+          @action == :deny
+        end
+
+        # @return [Boolean] Returns true if the rule is applied to traffic
+        #   entering the subnet.
+        def ingress?
+          @ingress
+        end
+
+        # @return [Boolean] Returns true if the rule is applied to traffic
+        #   leaving the subnet.
+        def egress?
+          @egress
+        end
+
+        # Replaces the current network ACL entry with the options passed.
+        #
+        # @param [Hash] options
+        #
+        # @option options [required,:allow,:deny] :rule_action Whether to
+        #   allow or deny traffic that matches the rule.
+        #
+        # @option options [required,Integer] :protocol IP protocol the rule
+        #   applies to. You can use -1 to mean all protocols. You can see a
+        #   list of #   supported protocol numbers here:
+        #   http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml
+        #
+        # @option options [required,String] :cidr_block The CIDR range to
+        #   allow or deny, in CIDR notation (e.g., 172.16.0.0/24).
+        #
+        # @option options [Boolean] :egress (false)
+        #   Whether this rule applies to egress traffic from the subnet (true)
+        #   or ingress traffic to the subnet (false).
+        #
+        # @option options [Range<Integer>] :port_range A numeric range
+        #   of ports. Required if specifying TCP (6) or UDP (17) for the
+        #   :protocol.
+        #
+        # @option options [Integer] :icmp_code For the ICMP protocol, the
+        #   ICMP code. You can use -1 to specify all ICMP codes for the given
+        #   ICMP type.
+        #
+        # @option options [Integer] :icmp_type For the ICMP protocol,
+        #   the ICMP type. You can use -1 to specify all ICMP types.
+        #
+        # @return [nil]
+        #
+        def replace options = {}
+          network_acl.replace_entry(options.merge(:rule_number => rule_number))
+        end
+
+        # Deletes the current network ACL entry.
+        # @return [nil]
+        def delete
+          network_acl.delete_entry(egress? ? :egress : :ingress, rule_number)
+        end
+
+      end
+
+    end
+  end
+end

data/lib/aws/ec2/network_acl_collection.rb

@@ -0,0 +1,64 @@
+# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+module AWS
+  class EC2
+
+    class NetworkACLCollection < Collection
+
+      include TaggedCollection
+      include Core::Collection::Simple
+
+      # Creates a network ACL.
+      #
+      # @param [Hash] options
+      #
+      # @option options [VPC,String] :vpc The vpc or vpc id of where you want
+      #   to create the subnet.
+      #
+      # @return [NetworkACL]
+      #
+      def create options = {}
+
+        client_opts = {}
+        client_opts[:vpc_id] = vpc_id_option(options)
+
+        resp = client.create_network_acl(client_opts)
+
+        NetworkACL.new_from(:create_network_acl, resp.network_acl,
+          resp.network_acl.network_acl_id, :config => config)
+
+      end
+
+      # @param [String] network_acl_id
+      # @return [NetworkACL]
+      def [] network_acl_id
+        NetworkACL.new(network_acl_id, :config => config)
+      end
+
+      protected
+      def _each_item options = {}, &block
+        response = filtered_request(:describe_network_acls, options, &block)
+        response.network_acl_set.each do |a|
+
+          network_acl = NetworkACL.new_from(:describe_network_acls, a,
+            a.network_acl_id, :config => config)
+
+          yield(network_acl)
+
+        end
+      end
+
+    end
+  end
+end

data/lib/aws/ec2/network_interface.rb

@@ -0,0 +1,237 @@
+# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+require 'aws/ec2/network_interface/attachment'
+
+module AWS
+  class EC2
+
+    # Represents a network interface in EC2.
+    #
+    # @attr [String] description
+    #
+    # @attr_reader [String] vpc_id
+    #
+    # @attr_reader [String] subnet_id
+    #
+    # @attr_reader [String] owner_id
+    #
+    # @attr_reader [Symbol] status
+    #
+    # @attr_reader [String] private_ip_address
+    #
+    # @attr_reader [Array<Hash>] private_ip_addresses Returns an array
+    #   of private ip addresses with the following keys:
+    #   * `:private_ip_address` (String)
+    #   * `:primary` (boolean)
+    #
+    # @attr_reader [String] private_dns_name
+    #
+    # @attr_reader [String] availability_zone_name
+    #
+    # @attr_reader [String] mac_address
+    #
+    # @attr_reader [Hash,nil] association Returns a hash of
+    #   details about the association between this network interface
+    #   and an elastic ip address.
+    #
+    # @attr [Boolean] source_dest_check
+    #
+    # @attr [Boolean] requester_managed
+    #
+    class NetworkInterface < Resource
+
+      include TaggedItem
+
+      def initialize network_interface_id, options = {}
+        @network_interface_id = network_interface_id
+        super
+      end
+
+      # @return [String]
+      attr_reader :network_interface_id
+
+      alias_method :id, :network_interface_id
+
+      attribute :vpc_id, :static => true
+
+      attribute :subnet_id, :static => true
+
+      mutable_attribute :description
+
+      attribute :owner_id, :static => true
+
+      attribute :status, :to_sym => true
+
+      attribute :private_ip_address, :static => true
+
+      attribute :private_ip_addresses,
+        :from => :private_ip_addresses_set,
+        :static => true
+
+      attribute :private_dns_name, :static => true
+
+      attribute :mac_address, :static => true
+
+      attribute :availability_zone_name,
+        :from => :availability_zone,
+        :static => true
+
+      mutable_attribute :source_dest_check
+
+      alias_method :source_dest_check?, :source_dest_check
+
+      attribute :requester_managed
+
+      alias_method :requester_managed?, :requester_managed
+
+      attribute :association do
+        translates_output {|assoc| assoc.to_hash }
+      end
+
+      attribute :attachment_details, :from => :attachment
+
+      protected :attachment_details
+
+      mutable_attribute :groups
+
+      protected :groups
+
+      populates_from(:create_network_interface) do |resp|
+        resp.network_interface if resp.network_interface.network_interface_id == id
+      end
+
+      populates_from(:describe_network_interfaces) do |resp|
+        resp.network_interface_set.find{|i| i.network_interface_id == id }
+      end
+
+      # @return [VPC] Returns the VPC this network interface belongs to.
+      def vpc
+        VPC.new(vpc_id, :config => config)
+      end
+
+      # @return [Subnet] Returns the Subnet this network interface
+      #   belongs to.
+      def subnet
+        Subnet.new(subnet_id, :vpc_id => vpc_id, :config => config)
+      end
+
+      # @return [ElasticIp,nil]
+      def elastic_ip
+        if association = self.association
+          opts = association.merge(:config => config)
+          ElasticIp.new(association[:public_ip], opts)
+        end
+      end
+
+      # @return [AvailabilityZone]
+      def availability_zone
+        AvailabilityZone.new(availability_zone_name, :config => config)
+      end
+
+      # @return [Array<SecurityGroup>]
+      def security_groups
+        groups.collect do |g|
+          SecurityGroup.new(g.group_id, :name => g.group_name, :config => config)
+        end
+      end
+
+      # @param [Array<SecurityGroup>,Array<String>] groups A list of
+      #   security groups objects or security group ids.  This replaces
+      #   the security group set on this network interface.
+      #
+      # @return [nil]
+      #
+      def set_security_groups *groups
+        self.groups = [groups].flatten.collect do |g|
+          g.is_a?(SecurityGroup) ? g.security_group_id : g
+        end
+        nil
+      end
+      alias_method :security_groups=, :set_security_groups
+
+      # @return [Instance,nil] Returns the instance this network interface
+      #   is attached to.  If it has not been attached, then nil is
+      #   returned.
+      def instance
+        if attachment = self.attachment
+          attachment.instance
+        end
+      end
+
+      # @return [Attachment,nil]
+      def attachment
+        if details = attachment_details
+          Attachment.new(self, details)
+        end
+      end
+
+      # @param [Instance,String] instance The instance to attach this network
+      #   interface to, may be an {Instance} object or an instance id string.
+      #
+      # @param [Hash] options
+      #
+      # @option options [Integer] :device_index (1) The index of the device
+      #  for the network interface attachment on the instance.  Defaults to 1.
+      #
+      # @return [nil]
+      #
+      def attach instance, options = {}
+
+        instance_id = instance.is_a?(Instance) ? instance.instance_id : instance
+
+        client_opts = {}
+        client_opts[:network_interface_id] = network_interface_id
+        client_opts[:instance_id] = instance_id
+        client_opts[:device_index] = options[:device_index] || 1
+
+        client.attach_network_interface(client_opts)
+
+        nil
+
+      end
+
+      # Detaches this network interface.
+      # @param [Hash] options
+      # @option (see NetworkInterface::Attachment#detach)
+      # @return (see NetworkInterface::Attachment#detach)
+      def detach options = {}
+        if attachment = self.attachment
+          attachment.detach(options)
+        else
+          raise 'unable to detach network interface, no attachment present'
+        end
+      end
+
+      # Deletes this network interface.
+      # @return [nil]
+      def delete
+        client_opts = {}
+        client_opts[:network_interface_id] = network_interface_id
+        client.delete_network_interface(client_opts)
+        nil
+      end
+
+      # @return [Boolean] Returns true if this network interface exists.
+      def exists?
+        begin
+          get_resource
+          true
+        rescue Errors::InvalidNetworkInterfaceID::NotFound
+          false
+        end
+      end
+
+    end
+  end
+end