aws_pocketknife 0.1.7

data/lib/aws_pocketknife/admin/policies/tester_prd_acc.json

@@ -0,0 +1,176 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": [
+        "acm:DescribeCertificate",
+        "acm:GetCertificate",
+        "acm:ListCertificates",
+        "appstream:Get*",
+        "autoscaling:Describe*",
+        "cloudformation:DescribeStackEvents",
+        "cloudformation:DescribeStackResource",
+        "cloudformation:DescribeStackResources",
+        "cloudformation:DescribeStacks",
+        "cloudformation:GetTemplate",
+        "cloudformation:List*",
+        "cloudfront:Get*",
+        "cloudfront:List*",
+        "cloudsearch:Describe*",
+        "cloudsearch:List*",
+        "cloudtrail:DescribeTrails",
+        "cloudtrail:GetTrailStatus",
+        "cloudwatch:Describe*",
+        "cloudwatch:Get*",
+        "cloudwatch:List*",
+        "codecommit:BatchGetRepositories",
+        "codecommit:Get*",
+        "codecommit:GitPull",
+        "codecommit:List*",
+        "codedeploy:Batch*",
+        "codedeploy:Get*",
+        "codedeploy:List*",
+        "config:Deliver*",
+        "config:Describe*",
+        "config:Get*",
+        "datapipeline:DescribeObjects",
+        "datapipeline:DescribePipelines",
+        "datapipeline:EvaluateExpression",
+        "datapipeline:GetPipelineDefinition",
+        "datapipeline:ListPipelines",
+        "datapipeline:QueryObjects",
+        "datapipeline:ValidatePipelineDefinition",
+        "directconnect:Describe*",
+        "ds:Check*",
+        "ds:Describe*",
+        "ds:Get*",
+        "ds:List*",
+        "ds:Verify*",
+        "dynamodb:BatchGetItem",
+        "dynamodb:DescribeTable",
+        "dynamodb:GetItem",
+        "dynamodb:ListTables",
+        "dynamodb:Query",
+        "dynamodb:Scan",
+        "ec2:Describe*",
+        "ec2:GetConsoleOutput",
+        "ecr:GetAuthorizationToken",
+        "ecr:BatchCheckLayerAvailability",
+        "ecr:GetDownloadUrlForLayer",
+        "ecr:GetManifest",
+        "ecr:DescribeRepositories",
+        "ecr:ListImages",
+        "ecr:BatchGetImage",
+        "ecs:Describe*",
+        "ecs:List*",
+        "elasticache:Describe*",
+        "elasticache:List*",
+        "elasticbeanstalk:Check*",
+        "elasticbeanstalk:Describe*",
+        "elasticbeanstalk:List*",
+        "elasticbeanstalk:RequestEnvironmentInfo",
+        "elasticbeanstalk:RetrieveEnvironmentInfo",
+        "elasticloadbalancing:Describe*",
+        "elasticmapreduce:Describe*",
+        "elasticmapreduce:List*",
+        "elastictranscoder:List*",
+        "elastictranscoder:Read*",
+        "es:DescribeElasticsearchDomain",
+        "es:DescribeElasticsearchDomains",
+        "es:DescribeElasticsearchDomainConfig",
+        "es:ListDomainNames",
+        "es:ListTags",
+        "es:ESHttpGet",
+        "es:ESHttpHead",
+        "events:DescribeRule",
+        "events:ListRuleNamesByTarget",
+        "events:ListRules",
+        "events:ListTargetsByRule",
+        "events:TestEventPattern",
+        "firehose:Describe*",
+        "firehose:List*",
+        "glacier:ListVaults",
+        "glacier:DescribeVault",
+        "glacier:GetDataRetrievalPolicy",
+        "glacier:GetVaultAccessPolicy",
+        "glacier:GetVaultLock",
+        "glacier:GetVaultNotifications",
+        "glacier:ListJobs",
+        "glacier:ListMultipartUploads",
+        "glacier:ListParts",
+        "glacier:ListTagsForVault",
+        "glacier:DescribeJob",
+        "glacier:GetJobOutput",
+        "iam:GenerateCredentialReport",
+        "iam:Get*",
+        "iam:List*",
+        "inspector:Describe*",
+        "inspector:Get*",
+        "inspector:List*",
+        "inspector:LocalizeText",
+        "inspector:PreviewAgentsForResourceGroup",
+        "iot:Describe*",
+        "iot:Get*",
+        "iot:List*",
+        "kinesis:Describe*",
+        "kinesis:Get*",
+        "kinesis:List*",
+        "kms:Describe*",
+        "kms:Get*",
+        "kms:List*",
+        "lambda:List*",
+        "lambda:Get*",
+        "logs:Describe*",
+        "logs:Get*",
+        "logs:TestMetricFilter",
+        "machinelearning:Describe*",
+        "machinelearning:Get*",
+        "mobilehub:GetProject",
+        "mobilehub:ListAvailableFeatures",
+        "mobilehub:ListAvailableRegions",
+        "mobilehub:ListProjects",
+        "mobilehub:ValidateProject",
+        "mobilehub:VerifyServiceRole",
+        "opsworks:Describe*",
+        "opsworks:Get*",
+        "rds:Describe*",
+        "rds:ListTagsForResource",
+        "redshift:Describe*",
+        "redshift:ViewQueriesInConsole",
+        "route53:Get*",
+        "route53:List*",
+        "route53domains:CheckDomainAvailability",
+        "route53domains:GetDomainDetail",
+        "route53domains:GetOperationDetail",
+        "route53domains:ListDomains",
+        "route53domains:ListOperations",
+        "route53domains:ListTagsForDomain",
+        "s3:Get*",
+        "s3:List*",
+        "sdb:GetAttributes",
+        "sdb:List*",
+        "sdb:Select*",
+        "ses:Get*",
+        "ses:List*",
+        "sns:Get*",
+        "sns:List*",
+        "sqs:GetQueueAttributes",
+        "sqs:ListQueues",
+        "sqs:ReceiveMessage",
+        "storagegateway:Describe*",
+        "storagegateway:List*",
+        "swf:Count*",
+        "swf:Describe*",
+        "swf:Get*",
+        "swf:List*",
+        "tag:Get*",
+        "trustedadvisor:Describe*",
+        "waf:Get*",
+        "waf:List*",
+        "workspaces:Describe*"
+      ],
+      "Effect": "Allow",
+      "Resource": "*"
+    }
+  ]
+}

data/lib/aws_pocketknife/admin/policies/web_front_end.json.erb

@@ -0,0 +1,59 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "Stmt1445469060000",
+      "Effect": "Allow",
+      "Action": [
+        "ec2:CreateTags",
+        "ec2:DescribeTags",
+        "ec2:RunInstances"
+      ],
+      "Resource": [
+        "*"
+      ]
+    },
+    {
+      "Sid": "Stmt1445469103000",
+      "Effect": "Allow",
+      "Action": [
+        "s3:GetObject"
+      ],
+      "Resource": [
+        <% buckets.first(buckets.length-1).each do |bucket| %>
+        "<%= bucket %>/*",
+        <% end %>
+        "<%= buckets.reverse[0] %>"
+      ]
+    },
+    {
+      "Effect": "Allow",
+      "Action": [
+        "s3:PutObject",
+        "s3:ListBucket"
+      ],
+      "Resource": [
+        <% buckets.first(buckets.length-1).each do |bucket| %>
+        "<%= bucket %>/logs",
+        "<%= bucket %>/logs/*",
+        <% end %>
+        "<%= buckets.reverse[0] %>"
+      ]
+    },
+    {
+      "Sid": "AllowAccessToSSM",
+      "Effect": "Allow",
+      "Action": [
+        "cloudwatch:PutMetricData",
+        "logs:CreateLogGroup",
+        "logs:CreateLogStream",
+        "logs:DescribeLogGroups",
+        "logs:DescribeLogStreams",
+        "logs:PutLogEvents"
+      ],
+      "Resource": [
+        "*"
+      ]
+    }
+  ]
+}

data/lib/aws_pocketknife/admin/trust_relationships/ec2.json

@@ -0,0 +1,13 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "",
+      "Effect": "Allow",
+      "Principal": {
+        "Service": "ec2.amazonaws.com"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}

data/lib/aws_pocketknife/asg.rb

@@ -0,0 +1,56 @@
+require 'aws_pocketknife'
+require 'base64'
+require 'openssl'
+
+module AwsPocketknife
+  module Asg
+
+    class << self
+      include AwsPocketknife::Common::Utils
+
+      def describe_asg_by_name(name: "")
+        asgs = []
+        asg_list = name.split(";")
+        resp = asg_client.describe_auto_scaling_groups({
+                                         auto_scaling_group_names: asg_list,
+                               })
+        resp.auto_scaling_groups.each do |asg|
+          asgs << asg
+        end
+        asgs
+      end
+
+      def list(max_records: 100)
+        asgs = []
+        resp = asg_client.describe_auto_scaling_groups({
+                                max_records: max_records,
+                            })
+        asgs << resp.auto_scaling_groups
+        next_token = resp.next_token
+        while true
+          break if next_token.nil? or next_token.empty?
+          resp = get_asgs(next_token: next_token, max_records: max_records)
+          asgs << resp.auto_scaling_groups
+          next_token = resp.next_token
+
+        end
+
+        asgs.flatten!
+
+      end
+
+      private
+
+      def get_asgs(next_token: "", max_records: 100)
+
+        asg_client.describe_auto_scaling_groups({
+                                max_records: max_records,
+                                next_token: next_token,
+                            })
+
+      end
+
+    end
+
+  end
+end

data/lib/aws_pocketknife/cli/ami.rb

@@ -0,0 +1,24 @@
+require "thor"
+require "aws_pocketknife"
+
+module AwsPocketknife
+  module Cli
+    class Ami < Thor
+
+      desc "clean AMI_NAME_PATTERN DAYS --dry_run", "Given a name or filter (i.e, test-*), this command will delete all matched AMIs (and associated snapshots) with creation time lower than DAYS."
+      option :dry_run, :type => :boolean, :default => true, :desc => 'just show images that would be deleted'
+      def clean(ami_name_pattern, days)
+        dry_run = options.fetch("dry_run", true)
+        AwsPocketknife::Ec2.clean_ami ami_name_pattern: ami_name_pattern,
+                                      days: days,
+                                      dry_run: dry_run
+      end
+
+      desc "share IMAGE_ID ACCOUNT_ID", "share the IMAGE_ID with the specified ACCOUNT_ID"
+      def share(image_id, account_id)
+        AwsPocketknife::Ec2.share_ami(image_id: image_id, user_id: account_id)
+      end
+
+    end
+  end
+end

data/lib/aws_pocketknife/cli/asg.rb

@@ -0,0 +1,40 @@
+require "thor"
+require "aws_pocketknife"
+
+module AwsPocketknife
+  module Cli
+    class Asg < Thor
+
+      desc "list", "list all autoscaling groups"
+      def list
+        asgs = AwsPocketknife::Asg.list
+        print_asg(asgs: asgs)
+      end
+
+      desc "desc ASG_NAME", "describe autoscaling group name"
+      def desc(asg_name)
+        asgs = AwsPocketknife::Asg.describe_asg_by_name(name: asg_name)
+        print_asg(asgs: asgs)
+      end
+
+      private
+
+      def print_asg(asgs: [])
+        headers = ["name", "min size", "max size", "desired capacity", "instances", "elb"]
+        data = []
+        if asgs.length > 0
+          asgs.each do |asg|
+            instances = []
+            asg.instances.map { |instance| instances << instance.instance_id }
+            data << [asg.auto_scaling_group_name, asg.min_size, asg.max_size,
+                     asg.desired_capacity, instances.join(", "), asg.load_balancer_names.join(", ")]
+          end
+          AwsPocketknife::Asg.pretty_table(headers: headers, data: data)
+        else
+          puts "No asg(s) found for name #{args[:name]}"
+        end
+      end
+
+    end
+  end
+end

data/lib/aws_pocketknife/cli/eb.rb

@@ -0,0 +1,49 @@
+require "thor"
+require "aws_pocketknife"
+
+module AwsPocketknife
+  module Cli
+    class Eb < Thor
+
+      desc "list", "list environments"
+      def list
+        environments = AwsPocketknife::ElasticBeanstalk.describe_environment
+        headers = [ 'App Name', 'Env Name', 'cname', 'Updated', 'Version', 'Health']
+        data = []
+        environments.each do |e|
+          data << [e.application_name, e.environment_name, e.cname, e.date_updated, e.version_label, e.health]
+        end
+        AwsPocketknife::ElasticBeanstalk.pretty_table(headers: headers, data: data)
+      end
+
+      desc "desc ENVIRONMENT_NAME", "describe environment name"
+      def desc(environment_name)
+        environment = AwsPocketknife::ElasticBeanstalk.describe_environment_resources(environment_name: environment_name)
+        unless environment.nil?
+          AwsPocketknife::ElasticBeanstalk.nice_print(object: environment.to_h)
+        else
+          puts "#{environment_name} not found"
+        end
+      end
+
+      desc "vars NAME", "list environment variables for the specified elastic beanstalk environment name"
+      def vars(environment_name)
+        variables = AwsPocketknife::ElasticBeanstalk.list_environment_variables(environment_name: environment_name)
+        headers = [ 'Name', 'Value']
+        data = []
+        variables.each do |v|
+          v_temp = v.split("=")
+          name = v_temp[0]
+
+          # remove first element (headers) from array
+          v_temp.shift
+          value = v_temp.join
+          data << [name, value]
+        end
+        puts "Environment: #{environment_name}"
+        AwsPocketknife::ElasticBeanstalk.pretty_table(headers: headers, data: data)
+      end
+
+    end
+  end
+end

data/lib/aws_pocketknife/cli/ec2.rb

@@ -0,0 +1,61 @@
+require "thor"
+require "aws_pocketknife"
+
+module AwsPocketknife
+  module Cli
+    class Ec2 < Thor
+
+      desc "find_by_name NAME", "find instances by name. (You can filter by adding *) "
+      def find_by_name(name)
+
+        instances = AwsPocketknife::Ec2.find_by_name(name: name)
+        headers = ["name", "id", "image", "state", "private ip", "public ip", "type", "key name", "launch time"]
+        data = []
+        if instances.length > 0
+          instances.each do |instance|
+            name = AwsPocketknife::Ec2.get_tag_value(tags: instance.tags, tag_key: "Name")
+            data << [name, instance.instance_id, instance.image_id, instance.state.name,
+                     instance.private_ip_address, instance.public_ip_address, instance.instance_type,
+                     instance.key_name, instance.launch_time]
+          end
+          AwsPocketknife::Ec2.pretty_table(headers: headers, data: data)
+        else
+          puts "No instance(s) found for name #{name}"
+        end
+
+      end
+
+      desc "find_by_id INSTANCE_ID", "find instances by id."
+      def find_by_id(instance_id)
+        instance = AwsPocketknife::Ec2.find_by_id(instance_id: instance_id)
+        if instance.nil?
+          puts "Instance #{instance_id} not found"
+        else
+          AwsPocketknife::Ec2.nice_print(object: instance.to_h)
+        end
+      end
+
+      desc "get_windows_password INSTANCE_ID", "get windows password."
+      def get_windows_password(instance_id)
+        instance = AwsPocketknife::Ec2.get_windows_password(instance_id: instance_id)
+        headers = ["instance id", "password", "private ip", "public ip"]
+        data = [[instance.instance_id,
+                 instance.password,
+                 instance.private_ip_address,
+                 instance.public_ip_address]]
+        AwsPocketknife::Ec2.pretty_table(headers: headers, data: data)
+      end
+
+      desc "stop INSTANCE_ID", "stop ec2 instance"
+      def stop(instance_id)
+        AwsPocketknife::Ec2.stop_instance_by_id(instance_id)
+      end
+
+      desc "start INSTANCE_ID", "start ec2 instance"
+      def start(instance_id)
+        AwsPocketknife::Ec2.start_instance_by_id(instance_id)
+      end
+
+    end
+  end
+end