awscli 0.1.1 → 0.1.2

checksums.yaml

@@ -1,15 +1,15 @@
 ---
 !binary "U0hBMQ==":
   metadata.gz: !binary |-
-    NjZmMTc3NTYxZjgzYjg3NTg3NTBlOWQ1NDg3Mjk2ODE4NjEyNjIzZg==
+    MGYzNjYyNTcyZTBiZGQzNjM2MDM5YWIwMDE5ZGJkY2U0OTkwZTgxYQ==
   data.tar.gz: !binary |-
-    OGQ1YzUwODYxZjZkYmQzYzY0YmE4OTU1MTJlYzk1MGE5MzZiNzk1YQ==
+    MGI5OWM2NWI5YzkxNDU2YjcyY2FiZGFjNTcyN2Y1MjA5YWYxZGVlMw==
 !binary "U0hBNTEy":
   metadata.gz: !binary |-
-    ZTEwNDU0NWQ4ZjRmMTI0YmI4ZDU0OThmYTYzZjU0YzE4NWJkZjNiYzJmN2I3
-    NWQ5MmJjMmI3YjU2MzlmNGI4ZDYyYjFjY2FhZjVhOTFjYTk2OTMxMjA0Y2Qz
-    MWM3NzUxMTZkMGM3MzE5MDk3YjM1YWJiYjczOGEzZjUyYjljY2I=
+    MWJjMmZmZGU0YzI2YzcxOWFiYTlhZGJmZTNiZjE3NDA4ZjliN2M1MzVhY2Ew
+    ODk5NDA1OTE4YTViYzExNjRjY2M4NTgyODQ4Y2EyMDJkZTQ4ZTVkYTc0M2Rj
+    MjJhMTE4YjllMWZkYjhjY2U3YmVhZmQ3ZGE1MWZmZTg2NDNlOWI=
   data.tar.gz: !binary |-
-    ZTUxN2ZlOTcyMWQyNzUyMjY4Yjk1MTZiZTViZGFhMTU1ZGI4YTU5YzQ5YTBj
-    OGQ3NmZjYWZlZmI2MjNiNzRjZjY5ODQ0NmQwM2EzMWQyNzZlNWQ5YTUwN2E1
-    YTY4MTRmZjQwYjQzYzMzMWI0NzliOGVmZGRiMWI0MTU0MTAyY2M=
+    ZDIxYjZhZWUyMjg0ZTk2NzI3OWQ3Y2Y4OWI1MWExZDk1OWU3ODcxMmNjYTRi
+    NmE3ZDA1Yjg5ZWRmMGVlYzlkZTU2N2NlZWVlNDYyMTNlNzc5NzYzOWE3MGEz
+    MTExODI3YzQyMWRjYzM0OGYyNDNiNTliYzlhMjRkNDAzZjQ5ZTM=

data/lib/awscli.rb

@@ -48,4 +48,11 @@ module AwsCli
   require 'awscli/cli/as/groups'
   require 'awscli/cli/as/instances'
   require 'awscli/cli/as/policies'
+    #IAM
+  require 'awscli/cli/iam'
+  require 'awscli/cli/iam/user'
+  require 'awscli/cli/iam/group'
+  require 'awscli/cli/iam/policies'
+  require 'awscli/cli/iam/roles'
+  require 'awscli/cli/iam/profiles'
 end

data/lib/awscli/cli/iam.rb

@@ -0,0 +1,10 @@
+module AwsCli
+  module CLI
+    require 'awscli/cli'
+    require 'awscli/connection'
+    require 'awscli/iam'
+    class Iam < Thor
+      AwsCli::Cli.register AwsCli::CLI::Iam, :iam, 'iam [COMMAND]', 'AWS Identity and Access Management Interface'
+    end
+  end
+end

data/lib/awscli/cli/iam/group.rb

@@ -0,0 +1,46 @@
+module AwsCli
+  module CLI
+    module IAM
+      require 'awscli/cli/iam'
+      class Group < Thor
+
+        desc 'list', 'list users'
+        long_desc <<-DESC
+        Lists the users that have the specified path prefix. If there are none, the action returns an empty list.
+        DESC
+        method_option :path, :aliases => '-p', :default => '/', :desc => 'The path prefix for filtering the results. For example, /division_abc/subdivision_xyz/ would get all users whose path starts with /division_abc/subdivision_xyz/. Default: prints all groups'
+        def list
+          create_iam_object
+          @iam.list options[:path]
+        end
+
+        desc 'create', 'create a new group'
+        method_option :group_name, :aliases => '-g', :required => true, :desc => 'name of the group to create (do not include path)'
+        method_option :path, :aliases => '-p', :default => '/', :desc => 'optional path to group, defaults to "/"'
+        def create
+          create_iam_object
+          @iam.create options[:group_name], options[:path]
+        end
+
+        desc 'delete', 'delete existing group'
+        method_option :group_name, :aliases => '-g', :required => true, :desc => 'name of the group to delete'
+        def delete
+          create_iam_object
+          @iam.delete options[:group_name]
+        end
+
+        private
+
+        def create_iam_object
+          puts 'IAM Establishing Connetion...'
+          $iam_conn =  Awscli::Connection.new.request_iam
+          puts 'IAM Establishing Connetion... OK'
+          @iam = Awscli::Iam::Group.new($iam_conn)
+        end
+
+        AwsCli::CLI::Iam.register AwsCli::CLI::IAM::Group, :group, 'group [COMMAND]', 'IAM Group Management'
+
+      end
+    end
+  end
+end

data/lib/awscli/cli/iam/policies.rb

@@ -0,0 +1,82 @@
+module AwsCli
+  module CLI
+    module IAM
+      require 'awscli/cli/iam'
+      class Policies < Thor
+
+        desc 'add [OPTIONS]', 'Adds (or updates) a policy document associated with the specified user/group'
+        long_desc <<-DESC
+        Creates a policy based on the information you provide and attaches the policy to the specified user/group.  The command accepts a file containing the policy.
+        Use http://awspolicygen.s3.amazonaws.com/policygen.html to generate policy documents
+        DESC
+        method_option :user_name, :aliases => '-u', :banner => 'NAME', :desc => 'Name of the user the policy is for'
+        method_option :group_name, :aliases => '-g', :banner => 'NAME', :desc => 'Name of the group the policy is for'
+        method_option :role_name, :aliases => '-r', :banner => 'NAME', :desc => 'Name of the role the policy is for'
+        method_option :policy_name, :aliases => '-p', :required => true, :banner => 'NAME', :desc => 'Name you want to assign the policy'
+        method_option :policy_document, :aliases => '-f', :required => true, :banner => 'PATH', :desc => 'Path and name of the file containing the policy, Use http://awspolicygen.s3.amazonaws.com/policygen.html to generate policy documents'
+        def add
+          create_iam_object
+          if !options[:user_name] and !options[:group_name] and !options[:role_name]
+            puts 'should pass either --user-name or --group-name or --role-name'
+            exit
+          end
+          @iam.add_policy_document options
+        end
+
+        # desc 'addpolicy', 'Creates a policy based on the information you provide and attaches the policy to the specified user'
+        # long_desc <<-DESC
+        # Use this command if you need a simple policy with no conditions, and you don't want to write the policy yourself. If you need a policy with conditions, you must write the policy yourself and upload it with addpolicydoc.
+        # DESC
+        # method_option :user_name, :aliases => '-u', :required => true, :desc => 'Name of the user the policy is for'
+        # method_option :policy_name, :aliases => '-p', :required => true, :desc => 'Name you want to assign the policy'
+        # method_option :effect, :aliases => '-e', :required => true, :desc => 'The value for the policys Effect element. Specifies whether the policy results in an allow or a deny, Valid Values: Allow | Deny'
+        # method_option :action, :aliases => '-a', :type => :array, :required => true, :desc => 'The value for the policys Action element. Specifies the service and action you want to allow or deny permission to. For example: -a iam:ListAccessKeys. You can use wildcards, and you can specify more than one -a Action option in the request'
+        # method_option :resouce_name, :aliases => '-r', :type => :array, :required => true, :desc => 'The value for the policys Resource element. Specifies the Amazon Resource Name (ARN) for the resource (or resources) the policy applies to. You can use wildcards, and you can specify more than one -r AMAZON RESOURCE NAME option in the request'
+        # method_option :output, :aliases => '-o', :type => :boolean, :default => false, :desc => 'Causes the output to include the JSON policy document that IAM created for you'
+        # def addpolicy
+        #   create_iam_object
+        #   @iam.add_policy options
+        # end
+
+        desc 'list [OPTIONS]' , 'list policies for a user/group pass respective options'
+        method_option :user_name, :aliases => '-u', :desc => 'name of the user to list policies for'
+        method_option :group_name, :aliases => '-g', :desc => 'name of the gourp to list policies for'
+        method_option :role_name, :aliases => '-r', :desc => 'name of the role to list policies for'
+        def list
+          if !options[:user_name] and !options[:group_name] and !options[:role_name]
+            puts 'should pass either --user-name or --group-name or --role-name'
+            exit
+          end
+          create_iam_object
+          @iam.list options
+        end
+
+        desc 'delete [OPTIONS]', 'delete policy associated with a user/group'
+        method_option :user_name, :aliases => '-u', :desc => 'name of the user to delete policies for'
+        method_option :group_name, :aliases => '-g', :desc => 'name of the gourp to delete policies for'
+        method_option :role_name, :aliases => '-r', :banner => 'NAME', :desc => 'Name of the role to delete the policy for'
+        method_option :policy_name, :aliases => '-p', :required => true, :desc => 'name of the policy to delete'
+        def delete
+          if !options[:user_name] and !options[:group_name] and !options[:role_name]
+            puts 'should pass either --user-name or --group-name or --role-name'
+            exit
+          end
+          create_iam_object
+          @iam.delete_policy options
+        end
+
+        private
+
+        def create_iam_object
+          puts 'IAM Establishing Connetion...'
+          $iam_conn =  Awscli::Connection.new.request_iam
+          puts 'IAM Establishing Connetion... OK'
+          @iam = Awscli::Iam::Policies.new($iam_conn)
+        end
+
+        AwsCli::CLI::Iam.register AwsCli::CLI::IAM::Policies, :policies, 'policies [COMMAND]', 'IAM Policies Management'
+
+      end
+    end
+  end
+end

data/lib/awscli/cli/iam/profiles.rb

@@ -0,0 +1,55 @@
+module AwsCli
+  module CLI
+    module IAM
+      require 'awscli/cli/iam'
+      class Profiles < Thor
+
+        desc 'list', 'list available isntance profiles, specify role to list profiles specific to that role'
+        method_option :role, :aliases => '-r', :banner => 'NAME', :desc => 'role name to list instance profiles for'
+        def list
+          create_iam_object
+          if options[:role]
+            @iam.list_for_role options[:role]
+          else
+            @iam.list
+          end
+        end
+
+        desc 'create', 'Creates a new instance profile'
+        method_option :profile_name, :aliases => '-p', :banner => 'NAME', :required => true, :desc => 'name of the isntance profile to create'
+        method_option :path, :aliases => '-p', :default => '/', :desc => 'optional path to group, defaults to /'
+        def create
+          create_iam_object
+          @iam.create options[:profile_name], options[:path]
+        end
+
+        desc 'delete', 'Deletes an existing instance profile from your AWS account'
+        method_option :profile_name, :aliases => '-p', :banner => 'NAME', :required => true, :desc => 'name of the isntance profile to create'
+        def delete
+          create_iam_object
+          @iam.delete options[:profile_name]
+        end
+
+        desc 'delete_role', 'Removes a role from a instance profile'
+        method_option :profile_name, :aliases => '-p', :banner => 'NAME', :required => true, :desc => 'Name of the instance profile to update'
+        method_option :role_name, :aliases => '-r', :banner => 'NAME', :required => true, :desc => 'Name of the role to remove'
+        def delete_role
+          create_iam_object
+          @iam.remove_role_from_instance_profile options[:profile_name], options[:role_name]
+        end
+
+        private
+
+        def create_iam_object
+          puts 'IAM Establishing Connetion...'
+          $iam_conn =  Awscli::Connection.new.request_iam
+          puts 'IAM Establishing Connetion... OK'
+          @iam = Awscli::Iam::Profiles.new($iam_conn)
+        end
+
+        AwsCli::CLI::Iam.register AwsCli::CLI::IAM::Profiles, :profiles, 'profiles [COMMAND]', 'IAM Profiles Management'
+
+      end
+    end
+  end
+end

data/lib/awscli/cli/iam/roles.rb

@@ -0,0 +1,43 @@
+module AwsCli
+  module CLI
+    module IAM
+      require 'awscli/cli/iam'
+      class Roles < Thor
+
+        desc 'list', 'list available roles'
+        def list
+          create_iam_object
+          @iam.list
+        end
+
+        desc 'create', 'Creates a new role for your AWS account'
+        method_option :role_name, :aliases => '-r', :required => true, :desc => 'name of the role to create'
+        method_option :policy_document, :aliases => '-d', :required => true, :banner => 'PATH', :desc => 'path to the policy document that grants an entity permission to assume the role'
+        method_option :path, :aliases => '-p', :default => '/', :desc => 'Path to the user If you dont want the role to have a path, set to /'
+        def create
+          create_iam_object
+          @iam.create_role options
+        end
+
+        desc 'delete', 'Deletes an existing role from your AWS account'
+        method_option :role_name, :aliases => '-r', :required => true, :desc => 'name of the role to delete'
+        def delete
+          create_iam_object
+          @iam.delete_role options[:role_name]
+        end
+
+        private
+
+        def create_iam_object
+          puts 'IAM Establishing Connetion...'
+          $iam_conn =  Awscli::Connection.new.request_iam
+          puts 'IAM Establishing Connetion... OK'
+          @iam = Awscli::Iam::Roles.new($iam_conn)
+        end
+
+        AwsCli::CLI::Iam.register AwsCli::CLI::IAM::Roles, :roles, 'roles [COMMAND]', 'IAM Roles Management'
+
+      end
+    end
+  end
+end

data/lib/awscli/cli/iam/user.rb

@@ -0,0 +1,128 @@
+module AwsCli
+  module CLI
+    module IAM
+      require 'awscli/cli/iam'
+      class User < Thor
+
+        desc 'list', 'list users'
+        long_desc <<-DESC
+        Lists the users that have the specified path prefix. If there are none, the action returns an empty list.
+        DESC
+        method_option :path, :aliases => '-p', :default => '/', :desc => 'The path prefix for filtering the results. For example, /division_abc/subdivision_xyz/ would get all users whose path starts with /division_abc/subdivision_xyz/. Default: prints all users'
+        # method_option :marker, :aliases => '-m', :desc => 'used to paginate subsequent requests'
+        # method_option :maxitems, :alises => '-i', :type => :numeric, :desc => 'limit results to this number per page'
+        def list
+          create_iam_object
+          @iam.list options[:path]
+        end
+
+        desc 'create', 'create a user'
+        long_desc <<-DESC
+        Creates a new user in your AWS account. Optionally adds the user to one or more groups, and creates an access key for the user.
+        DESC
+        method_option :user_name, :aliases => '-u', :required => true, :desc => 'name of the user to create (do not include path)'
+        method_option :path, :aliases => '-p', :defualt => '/', :desc => 'optional path to group, defaults to "/"'
+        method_option :group, :aliases => '-g', :desc => 'name of a group you want to add the user to'
+        method_option :access_key, :alises => '-k', :desc => 'creates an access key for the user'
+        def create
+          create_iam_object
+          @iam.create options[:user_name], options[:path]
+        end
+
+        desc 'delete', 'delete existing user'
+        method_option :user_name, :aliases => '-u', :required => true, :desc => 'name of the user to delete (dont include path)'
+        def delete
+          create_iam_object
+          @iam.delete options[:user_name]
+        end
+
+        desc 'cak', 'create access key for user'
+        long_desc <<-DESC
+        Creates a new AWS Secret Access Key and corresponding AWS Access Key ID for the specified user. The default status for new keys is Active.
+        DESC
+        method_option :user_name, :aliases => '-u', :required => true, :desc => 'The user name that the new key will belong to'
+        def cak
+          create_iam_object
+          @iam.create_user_access_key options[:user_name]
+        end
+
+        desc 'lak', 'list access keys for a user'
+        method_option :user_name, :aliases => '-u', :required => true, :desc => 'The user name to list the access keys for'
+        def lak
+          create_iam_object
+          @iam.list_user_access_keys options[:user_name]
+        end
+
+        desc 'dak', 'delete access key for a user'
+        method_option :user_name, :aliases => '-u', :required => true, :desc => 'The username to delete the access key for'
+        method_option :access_key_id, :aliases => '-a', :required => true, :desc => 'Access key id to delete'
+        def dak
+          create_iam_object
+          @iam.delete_user_access_key options[:user_name], options[:access_key_id]
+        end
+
+        desc 'update', 'updates the name and/or the path of the specified user'
+        method_option :user_name, :aliases => '-u', :required => true, :desc => 'The user name to update the information for'
+        method_option :new_user_name, :aliases => '-n', :banner => 'USERNAME', :desc => 'New name for the user. Include this parameter only if you are changing the users name.'
+        method_option :new_path, :aliases => '-p', :banner => 'PATH' , :desc => 'New path for the user. Include this parameter only if you are changing the users path'
+        def update
+          create_iam_object
+          if !options[:new_user_name] and !options[:new_path]
+            puts 'Should pass atleast one option to change, either --new-user-name (or) --new-path'
+            exit
+          end
+          @iam.update_user options
+        end
+
+        desc 'addtogroup', 'Add an existing user to a group'
+        method_option :user_name, :aliases => '-u', :required => true, :desc => 'name of user to add'
+        method_option :group_name, :aliases => '-g', :required => true, :desc => 'name of the group'
+        def addtogroup
+          create_iam_object
+          @iam.add_user_to_group options[:user_name], options[:group_name]
+        end
+
+        desc 'removefromgroup', 'Remove a user from a group'
+        method_option :user_name, :aliases => '-u', :required => true, :desc => 'name of user to remove'
+        method_option :group_name, :aliases => '-g', :required => true, :desc => 'name of the group to remove from'
+        def removefromgroup
+          create_iam_object
+          @iam.remove_user_from_group options[:user_name], options[:group_name]
+        end
+
+        desc 'listgroups', 'List groups for user'
+        method_option :user_name, :aliases => '-u', :required => true, :desc => 'name of the user to list the groups for'
+        def listgroups
+          create_iam_object
+          @iam.list_groups_for_user options[:user_name]
+        end
+
+        desc 'passwd [OPTIONS]', 'add/change user password'
+        method_option :user_name, :aliases => '-u', :required => true, :desc => 'name of the user to change password for'
+        method_option :password, :alases => '-p', :desc => 'password for the user'
+        method_option :genereate, :aliases => '-g', :type => :boolean, :default => false, :desc => 'generates the password'
+        method_option :remove, :aliases => '-r', :type => :boolean, :default => false, :desc => 'remove password for the user'
+        def passwd
+          create_iam_object
+          if options[:remove]
+            @iam.remove_password options[:user_name]
+          else
+            @iam.assign_password options[:user_name], options[:password], options[:genereate]
+          end
+        end
+
+        private
+
+        def create_iam_object
+          puts 'IAM Establishing Connetion...'
+          $iam_conn =  Awscli::Connection.new.request_iam
+          puts 'IAM Establishing Connetion... OK'
+          @iam = Awscli::Iam::User.new($iam_conn)
+        end
+
+        AwsCli::CLI::Iam.register AwsCli::CLI::IAM::User, :user, 'user [COMMAND]', 'IAM User Management'
+
+      end
+    end
+  end
+end

data/lib/awscli/connection.rb

@@ -55,8 +55,18 @@ module Awscli
 
     def request_as
       # => returns AWS Auto Scaling connection object
+      #remove region if passed from config
       Fog::AWS::AutoScaling.new(@@config)
     end
 
+    def request_iam
+      # => returns AWS IAM object
+      if @@config['region']
+        #remove region
+        @@config.reject!{ |k| k == "region" }
+      end
+      Fog::AWS::IAM.new(@@config)
+    end
+
   end
 end

data/lib/awscli/ec2.rb

@@ -843,7 +843,7 @@ module Awscli
         dhcp.destroy
       end
 
-      def associate dhcp_ic, vpc_id
+      def associate dhcp_id, vpc_id
         @@conn.dhcp_options.attach(dhcp_id, vpc_id)
       end
     end # => Dhcp

data/lib/awscli/iam.rb

@@ -0,0 +1,395 @@
+require 'json'
+
+module Awscli
+  module Iam
+
+    class User
+      def initialize connection, options = {}
+        @@conn = connection
+      end
+
+      def list path
+        begin
+          users = @@conn.list_users('PathPrefix' => path).body['Users']
+          Formatador.display_table(users)
+        rescue Fog::AWS::IAM::ValidationError
+          puts "ValidationError: #{$!}"
+        end
+      end
+
+      def create username, path
+        # TODO: Include other options as well
+        begin
+          @@conn.create_user(username, path ||= '/')
+          puts "Created User: #{username}"
+        rescue Fog::AWS::IAM::ValidationError
+          puts "ValidationError: #{$!}"
+        rescue Fog::AWS::IAM::EntityAlreadyExists
+          puts "[Error] User Exists: #{$!}"
+        end
+      end
+
+      def create_user_access_key username
+        begin
+          data = @@conn.create_access_key('UserName' => username)
+          accesskeyid = data.body['AccessKey']['AccessKeyId']
+          secretaccesskey = data.body['AccessKey']['SecretAccessKey']
+          keystatus = data.body['AccessKey']['Status']
+          puts 'Store the following access id and secret key:'
+          puts "AccessKey: #{accesskeyid}"
+          puts "SecretAccessKey: #{secretaccesskey}"
+        rescue Fog::AWS::IAM::NotFound
+          puts "[Error]: #{$!}"
+        end
+      end
+
+      def list_user_access_keys username
+        begin
+          @@conn.access_keys(:username => username).table
+        rescue Fog::AWS::IAM::NotFound
+         puts "[Error]: #{$!}"
+        end
+      end
+
+      def delete_user_access_key username, accesskeyid
+        begin
+          @@conn.delete_access_key(accesskeyid, 'UserName' => username)
+          puts "Deleted AccessKey for user: #{username}"
+        rescue Fog::AWS::IAM::NotFound
+         puts "[Error]: #{$!}"
+        end
+      end
+
+      def update_user options
+        opts = Marshal.load(Marshal.dump(options))
+        opts.reject! { |k| k == 'user_name' }
+        if new_user_name = opts.delete(:new_user_name)
+          opts.merge!('NewUserName' => new_user_name)
+        end
+        if new_path = opts.delete(:new_path)
+          opts.merge!('NewPath' => new_path)
+        end
+        begin
+          @@conn.update_user(options[:user_name], opts)
+          puts 'Updated user details'
+        rescue Fog::AWS::IAM::EntityAlreadyExists
+          puts '[Error] User already exists, pass in a different username'
+        rescue Fog::AWS::IAM::ValidationError
+          puts "ValidationError: #{$!}"
+        end
+      end
+
+      def add_user_to_group username, groupname
+        begin
+          @@conn.add_user_to_group(groupname, username)
+          puts "Added user: #{username}, to group: #{groupname}"
+        rescue Fog::AWS::IAM::NotFound
+          puts "[Error]: #{$!}"
+        end
+      end
+
+      def remove_user_from_group username, groupname
+        begin
+          @@conn.remove_user_from_group(groupname, username)
+          puts "Removed user: #{username}, from group: #{groupname}"
+        rescue Fog::AWS::IAM::NotFound
+          puts "[Error]: #{$!}"
+        end
+      end
+
+      def list_groups_for_user username
+        begin
+          groups = @@conn.list_groups_for_user(username).body['GroupsForUser']
+          Formatador.display_table(groups)
+        rescue Fog::AWS::IAM::NotFound => e
+          puts "[Error]: #{$!}"
+        end
+      end
+
+      def add_policy options
+      end
+
+      def assign_password username, password, autogenpwd = false
+        password = if autogenpwd
+          # generate a random password
+          ((33..126).map { |i| i.chr }).to_a.shuffle[0..14].join
+        end
+        begin
+          @@conn.create_login_profile(username, password)
+          puts "Assigned user #{username} password: #{password}"
+        rescue Fog::AWS::IAM::NotFound, Fog::AWS::IAM::ValidationError
+          puts "[Error]: #{$!}"
+        rescue Fog::AWS::IAM::Error
+          puts "[Error]: #{$!}"
+          if $!.to_s =~ /PasswordPolicyViolation/
+            #TODO: show password policy, this is not available in fog
+            puts "Revisit your password polocies"
+          end
+        end
+      end
+
+      def remove_password username
+        begin
+          @@conn.delete_login_profile(username)
+        rescue Fog::AWS::IAM::Error, Fog::AWS::IAM::NotFound
+          puts "[Error]: #{$!}"
+        end
+      end
+
+      def delete username
+        begin
+          @@conn.delete_user(username)
+          puts "Deleted User: #{username}"
+        rescue Fog::AWS::IAM::NotFound
+          puts "[Error]: #{$!}"
+        end
+      end
+    end
+
+    class Group
+      def initialize connection, options = {}
+        @@conn = connection
+      end
+
+      def list path
+        begin
+          groups = @@conn.list_groups('PathPrefix' => path).body['Groups']
+          Formatador.display_table(groups)
+        rescue Fog::AWS::IAM::ValidationError
+          puts "ValidationError: #{$!}"
+        end
+      end
+
+      def create groupname, path
+        begin
+          @@conn.create_group(groupname, path ||= '/')
+          puts "Created group: #{groupname}"
+        rescue Fog::AWS::IAM::ValidationError
+          puts "ValidationError: #{$!}"
+        rescue Fog::AWS::IAM::EntityAlreadyExists
+          puts "[Error] Group Exists: #{$!}"
+        end
+      end
+
+      def delete groupname
+        begin
+          @@conn.delete_group(groupname)
+          puts "Create group: #{groupname}"
+        rescue Fog::AWS::IAM::NotFound
+          puts "[Error]: #{$!}"
+        end
+      end
+    end
+
+    class Policies
+      def initialize connection, options = {}
+        @@conn = connection
+      end
+
+      def list options
+        if options[:user_name]
+          user = @@conn.users.get(options[:user_name])
+          abort "[Error]: User not found #{user_name}" unless user
+          user.policies.table
+        elsif options[:group_name]
+          begin
+            grp_policies = @@conn.list_group_policies(options[:group_name]).body['PolicyNames'].map { |p| { 'Policy' => p } }
+            Formatador.display_table(grp_policies)
+          rescue Fog::AWS::IAM::NotFound
+            puts "[Error]: #{$!}"
+          end
+        elsif options[:role_name]
+          begin
+            role_policies = @@conn.list_role_policies(options[:role_name]).body['PolicyNames'].map { |p| {'Policy' => p} }
+            Formatador.display_table(role_policies)
+          rescue Fog::AWS::IAM::NotFound
+            puts "[Error]: #{$!}"
+          end
+        end
+      end
+
+      def add_policy_document options
+        document = options[:policy_document]
+        policyname = options[:policy_name]
+        #validate json document
+        doc_path = File.expand_path(document)
+        abort "Invalid file path: #{file_path}" unless File.exist?(doc_path)
+        json_string = File.read(doc_path)
+        abort "Invalid JSON format found in the document: #{document}" unless valid_json?(json_string)
+        begin
+          if options[:user_name]
+            @@conn.put_user_policy(options[:user_name],
+              policyname,
+              JSON.parse(json_string)   #json parsed to hash
+            )
+            puts "Added policy: #{policyname} to user: #{options[:user_name]}"
+          elsif options[:group_name]
+            @@conn.put_group_policy(option[:group_name],
+              policyname,
+              JSON.parse(json_string)
+            )
+            puts "Added policy: #{policyname} to group: #{options[:group_name]}"
+          elsif options[:role_name]
+            @@conn.put_role_policy(options[:role_name],
+              policyname,
+              JSON.parse(json_string)
+            )
+          end
+          puts "Added Policy #{policyname} from #{document}"
+        rescue Fog::AWS::IAM::NotFound
+          puts "[Error]: #{$!}"
+        rescue Fog::AWS::IAM::Error
+          puts "[Error]: #{$!}"
+        end
+
+        # => Example Documents
+
+        # iam.put_user_policy(username, 'UserKeyPolicy', {
+        #   'Statement' => [
+        #     'Effect' => 'Allow',
+        #     'Action' => 'iam:*AccessKey*',
+        #     'Resource' => arn
+        #   ]
+        # })
+
+        # iam.put_user_policy(username, 'UserS3Policy', {
+        #   'Statement' => [
+        #     {
+        #       'Effect' => 'Allow',
+        #       'Action' => ['s3:*'],
+        #       'Resource' => [
+        #         "arn:aws:s3:::#{bucket_name}",
+        #         "arn:aws:s3:::#{bucket_name}/*"
+        #       ]
+        #     }, {
+        #       'Effect' => 'Deny',
+        #       'Action' => ['s3:*'],
+        #       'NotResource' => [
+        #         "arn:aws:s3:::#{bucket_name}",
+        #         "arn:aws:s3:::#{bucket_name}/*"
+        #       ]
+        #     }
+        #   ]
+        # })
+      end
+
+      def delete_policy options
+        begin
+          if options[:user_name]
+            @@conn.delete_user_policy(options[:user_name], options[:policy_name])
+          elsif options[:group_name]
+            @@conn.delete_group_policy(options[:group_name], options[:policy_name])
+          elsif options[:role_name]
+            @@conn.delete_role_policy(options[:role_name], options[:policy_name])
+          end
+          puts "Deleted Policy #{options[:policy_name]}"
+        rescue Fog::AWS::IAM::NotFound
+          puts "[Error]: #{$!}"
+        rescue Fog::AWS::IAM::Error
+          puts "[Error]: #{$!}"
+        end
+      end
+
+      def valid_json? json_string
+        JSON.parse(json_string)
+        return true
+      rescue JSON::ParserError
+        return false
+      end
+    end
+
+    class Roles
+      def initialize connection, options = {}
+        @@conn = connection
+      end
+
+      def list
+        roles = @@conn.list_roles.body['Roles']
+        Formatador.display_table(roles, ['Arn', 'RoleName', 'Path', 'RoleId'])
+      end
+
+      def create_role rolename, document, path
+        #TODO: Build document in line from options use iam-rolecreate as reference
+        doc_path = File.expand_path(document)
+        abort "Invalid file path: #{file_path}" unless File.exist?(doc_path)
+        json_string = File.read(doc_path)
+        abort "Invalid JSON format found in the document: #{document}" unless valid_json?(json_string)
+        begin
+          @@conn.create_role(rolename, JSON.parse(json_string), path)
+          # Example document, AssumeRolePolicyDocument={"Version":"2008-10-17","Statement":[{"Effect":"Allow","Principal":{"Service":["ec2.amazonaws.com"]},"Action":["sts:AssumeRole"]}]}
+          puts "Created role: #{rolename}"
+        rescue Fog::AWS::IAM::Error
+          puts "[Error]: #{$!}"
+        end
+      end
+
+      def delete_role rolename
+        begin
+          @@conn.delete_role(rolename)
+          puts "Deleted Role #{rolename}"
+        rescue Fog::AWS::IAM::NotFound, Fog::AWS::IAM::Error
+          if $!.to_s =~ /must remove roles from instance profile first/
+            puts "[Error]: #{$!}"
+            profile = @@conn.list_instance_profiles_for_role('test').body['InstanceProfiles'].map { |k| k['InstanceProfileName'] }
+            puts "Associated instance profile name: #{profile.to_s}, delete the instance profile using `awscli iam profiles delete-role --profile-name=NAME --role-name=NAME`"
+          else
+            puts "[Error]: #{$!}"
+          end
+        end
+      end
+
+      def valid_json? json_string
+        # => validates json document
+        JSON.parse(json_string)
+        return true
+      rescue JSON::ParserError
+        return false
+      end
+    end
+
+    class Profiles
+      def initialize connection, options = {}
+        @@conn = connection
+      end
+
+      def list
+        profiles = @@conn.list_instance_profiles.body['InstanceProfiles']
+        Formatador.display_table(profiles, ['Arn', 'InstanceProfileName', 'InstanceProfileId', 'Path', 'Roles'])
+      end
+
+      def list_for_role rolename
+        begin
+          profiles = @@conn.list_instance_profiles_for_role(rolename).body['InstanceProfiles']
+          Formatador.display_table(profiles, ['Arn', 'InstanceProfileName', 'InstanceProfileId', 'Path', 'Roles'])
+        rescue Fog::AWS::IAM::NotFound, Fog::AWS::IAM::Error
+          puts "[Error]: #{$!}"
+        end
+      end
+
+      def remove_role_from_instance_profile rolename, profilename
+        begin
+          @@conn.remove_role_from_instance_profile(rolename, profilename)
+        rescue Fog::AWS::IAM::NotFound, Fog::AWS::IAM::Error
+          puts "[Error]: #{$!}"
+        end
+      end
+
+      def create profilename, path
+        begin
+          @@conn.create_instance_profile(profilename, path)
+        rescue Fog::AWS::IAM::NotFound, Fog::AWS::IAM::Error
+          puts "[Error]: #{$!}"
+        end
+      end
+
+      def delete profilename
+        begin
+          @@conn.delete_instance_profile(profilename)
+        rescue Fog::AWS::IAM::NotFound, Fog::AWS::IAM::Error
+          puts "[Error]: #{$!}"
+        end
+      end
+    end
+
+  end
+end

data/lib/awscli/version.rb

@@ -1,3 +1,3 @@
 module Awscli
-  VERSION = '0.1.1'
+  VERSION = '0.1.2'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: awscli
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Ashrith
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-03-30 00:00:00.000000000 Z
+date: 2013-04-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -134,6 +134,12 @@ files:
 - lib/awscli/cli/ec2/vpc/route_tables.rb
 - lib/awscli/cli/ec2/vpc.rb
 - lib/awscli/cli/ec2.rb
+- lib/awscli/cli/iam/group.rb
+- lib/awscli/cli/iam/policies.rb
+- lib/awscli/cli/iam/profiles.rb
+- lib/awscli/cli/iam/roles.rb
+- lib/awscli/cli/iam/user.rb
+- lib/awscli/cli/iam.rb
 - lib/awscli/cli/s3/directories.rb
 - lib/awscli/cli/s3/files.rb
 - lib/awscli/cli/s3.rb
@@ -142,16 +148,12 @@ files:
 - lib/awscli/ec2.rb
 - lib/awscli/errors.rb
 - lib/awscli/helper.rb
+- lib/awscli/iam.rb
 - lib/awscli/s3.rb
 - lib/awscli/version.rb
 - lib/awscli.rb
-- test/default_test.rb
-- test/test_helper.rb
 - README.md
 - LICENSE
-- features/awscli.feature
-- features/step_definitions/awscli_steps.rb
-- features/support/env.rb
 homepage: http://github.com/ashrithr/awscli
 licenses:
 - MIT
@@ -178,9 +180,4 @@ signing_key:
 specification_version: 4
 summary: Command Line Interface for Amazon Web Services built in Ruby, using Fog and
   Thor
-test_files:
-- features/awscli.feature
-- features/step_definitions/awscli_steps.rb
-- features/support/env.rb
-- test/default_test.rb
-- test/test_helper.rb
+test_files: []

data/features/awscli.feature

@@ -1,8 +0,0 @@
-Feature: My bootstrapped app kinda works
-  In order to get going on coding my awesome app
-  I want to have aruba and cucumber setup
-  So I don't have to do it myself
-
-  Scenario: App just runs
-    When I get help for "awscli"
-    Then the exit status should be 0

data/features/step_definitions/awscli_steps.rb

@@ -1,6 +0,0 @@
-When /^I get help for "([^"]*)"$/ do |app_name|
-  @app_name = app_name
-  step %(I run `#{app_name} help`)
-end
-
-# Add more step definitions here

data/features/support/env.rb

@@ -1,15 +0,0 @@
-require 'aruba/cucumber'
-
-ENV['PATH'] = "#{File.expand_path(File.dirname(__FILE__) + '/../../bin')}#{File::PATH_SEPARATOR}#{ENV['PATH']}"
-LIB_DIR = File.join(File.expand_path(File.dirname(__FILE__)),'..','..','lib')
-
-Before do
-  # Using "announce" causes massive warnings on 1.9.2
-  @puts = true
-  @original_rubylib = ENV['RUBYLIB']
-  ENV['RUBYLIB'] = LIB_DIR + File::PATH_SEPARATOR + ENV['RUBYLIB'].to_s
-end
-
-After do
-  ENV['RUBYLIB'] = @original_rubylib
-end

data/test/default_test.rb

@@ -1,14 +0,0 @@
-require 'test_helper'
-
-class DefaultTest < Test::Unit::TestCase
-
-  def setup
-  end
-
-  def teardown
-  end
-
-  def test_the_truth
-    assert true
-  end
-end

data/test/test_helper.rb

@@ -1,9 +0,0 @@
-require 'test/unit'
-
-# Add test libraries you want to use here, e.g. mocha
-
-class Test::Unit::TestCase
-
-  # Add global extensions to the test case class here
-  
-end