awsec 0.0.3 → 0.1a

data/README.md

@@ -0,0 +1,4 @@
+awsec
+=====
+
+AWS Security Toolbelt

data/bin/{awsec → awsec.sh}

@@ -4,7 +4,8 @@ require File.expand_path(File.join(File.dirname(__FILE__), '..', 'lib', 'aw_sec'
 require 'json'
 require 'highline/import'
 require 'optparse'
-require File.expand_path(File.join(File.dirname(__FILE__), '..', 'lib', 'version'))
+
+VERSION = '0.1'
 
 config_path = File.join(Dir.home, '.awsec', 'awsec.json')
 
@@ -81,7 +82,7 @@ optparse = OptionParser.new do |opts|
 	end
   
   opts.on('-v', '--version', 'AwSec version') do
-    say("AwSec v#{AwSec::Version.current}")
+    say("AwSec v#{VERSION}")
     exit
   end
 

metadata

@@ -1,11 +1,11 @@
 --- !ruby/object:Gem::Specification
 name: awsec
 version: !ruby/object:Gem::Version
-  version: 0.0.3
-  prerelease: 
+  version: 0.1a
+  prerelease: 3
 platform: ruby
 authors:
-- Cloud 66
+- Khash Sajadi (Cloud 66)
 autorequire: 
 bindir: bin
 cert_chain: []
@@ -13,55 +13,41 @@ date: 2013-02-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json
-  requirement: &70344224561740 !ruby/object:Gem::Requirement
+  requirement: &70130876834020 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
-        version: 1.6.3
+        version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *70344224561740
-- !ruby/object:Gem::Dependency
-  name: fog
-  requirement: &70344224560400 !ruby/object:Gem::Requirement
-    none: false
-    requirements:
-    - - ~>
-      - !ruby/object:Gem::Version
-        version: 1.4.0
-  type: :runtime
-  prerelease: false
-  version_requirements: *70344224560400
+  version_requirements: *70130876834020
 - !ruby/object:Gem::Dependency
   name: highline
-  requirement: &70344224557720 !ruby/object:Gem::Requirement
+  requirement: &70130876833300 !ruby/object:Gem::Requirement
     none: false
     requirements:
-    - - ~>
+    - - ! '>='
       - !ruby/object:Gem::Version
-        version: 1.6.11
+        version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *70344224557720
+  version_requirements: *70130876833300
 description: Open and close AWS Security Group from the terminal for more secure operations
 email: khash@cloud66.com
 executables:
-- awsec
+- awsec.sh
 extensions: []
-extra_rdoc_files: []
+extra_rdoc_files:
+- README.md
 files:
-- lib/version.rb
-- lib/aw_sec.rb
-- lib/aw_sec/core.rb
-- lib/aw_sec/providers.rb
-- lib/providers/ip_echo.rb
-- lib/providers/my_ip.rb
-- bin/awsec
+- README.md
+- bin/awsec.sh
 homepage: https://github.com/cloud66/awsec
 licenses: []
 post_install_message: 
-rdoc_options: []
+rdoc_options:
+- --charset=UTF-8
 require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
@@ -73,9 +59,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
 required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
   requirements:
-  - - ! '>='
+  - - ! '>'
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubyforge_project: 
 rubygems_version: 1.8.15

data/lib/aw_sec.rb

@@ -1,5 +0,0 @@
-require File.join(File.dirname(__FILE__), 'aw_sec', 'core')
-require File.join(File.dirname(__FILE__), 'aw_sec', 'providers')
-
-module AwSec
-end

data/lib/aw_sec/core.rb

@@ -1,110 +0,0 @@
-require 'fog'
-
-module AwSec
-  class Core
-    
-    def self.secure(group_names, public_ip, options = {})
-      client = AwSec::Core.new
-      client.secure(group_names, public_ip, options)
-    end
-    
-    def secure(group_names, public_ip, options = {})
-      public_ip = public_ip
-      @port = options[:port] || 22
-      @region = options[:aws_region] 
-      @aws_key = options[:aws_key] 
-      @aws_secret = options[:aws_secret] 
-      revoke_all = options.has_key?(:revoke_all) ? options[:revoke_all] : true
-      wtlist = options[:whitelist] || []
-      
-      whitelist = []
-      public_ip = "#{public_ip}/32" unless public_ip =~  /\//
-      wtlist.each do |ip|
-        whitelist << "#{ip}/32" unless ip =~  /\//
-      end
-      
-      puts "Connecting AWS..."
-      groups = get_groups(group_names)
-      groups.each do |group|
-        puts "Configuring #{group.name}"
-        granted_ips = list_ips(group) || []
-        puts "Existing IPs with access to port #{port}: #{granted_ips.join(',')}"
-        allowed_ips = granted_ips.select { |i| whitelist.include? i }
-        allowed_ips << public_ip
-        if revoke_all
-          granted_ips.each do |ip|
-            unless allowed_ips.include? ip
-              puts "Revoking access to #{ip}"
-              revoke_access(group, ip)
-            end
-          end
-        end
-        granted_ips.uniq!
-        allowed_ips.each do |ip|
-          puts "Granting access to port #{port} to #{ip}"
-          safe_authorize_port(group, ip)
-        end
-      end
-    end
-    
-    def list_ips(group)
-      result = []
-    	group.ip_permissions.detect do |ip_permission|
-    		result << ip_permission['ipRanges'].collect{ |i| i["cidrIp"] } if ip_permission["toPort"] == port
-    	end
-
-      result.flatten!
-    end
-
-    def revoke_access(group, ip)
-      group.revoke_port_range(port..port, :cidr_ip => ip)
-    end
-    
-    def get_groups(group_names)
-      groups = []
-      group_names.each do |group_name|
-        groups << conn.security_groups.get(group_name)
-      end
-      
-      groups
-    end
-    
-    def safe_authorize_port(group, ip)
-    	if group.ip_permissions.nil?
-    		authorized = false
-    	else
-    		authorized = is_authorized?(group, ip)
-    	end
-    	unless authorized
-        begin
-          group.authorize_port_range(port..port, :cidr_ip => ip)
-        rescue => exc
-          puts "Failed #{exc.message}"
-        end
-    	end
-    end
-    
-    def is_authorized?(group, ip)
-    	return group.ip_permissions.detect do |ip_permission|
-    		ip_permission['ipRanges'].first && ip_permission['ipRanges'].first['cidrIp'] == ip &&
-    			ip_permission['fromPort'] == port &&
-    			ip_permission['ipProtocol'] == 'tcp' &&
-    			ip_permission['toPort'] == port
-    	end
-    end
-    
-    def port
-      @port
-    end
-    
-    def conn
-      @conn ||= Fog::Compute.new({
-        :provider => 'AWS',
-      	:region => @region,
-      	:aws_access_key_id => @aws_key,
-      	:aws_secret_access_key => @aws_secret
-      	})
-    end
-    
-  end
-end

data/lib/aw_sec/providers.rb

@@ -1,29 +0,0 @@
-module AwSec
-  module Providers
-    class Register
-
-      def self.register(name, klass)
-        @register ||= []
-        @register << { :name => name, :class => klass }
-      end
-      
-      def self.list
-        @register
-      end
-      
-      def self.provider(provider_name)
-        puts "Configuring #{provider_name}"
-        klass = Kernel.const_get(provider_name)
-        klass.new
-      end
-
-      Dir.foreach(File.join(File.dirname(__FILE__), '..', 'providers')) do |file|
-        path = File.join(File.join(File.dirname(__FILE__), '..', 'providers', file))
-        unless File.directory? path
-          require path
-        end
-      end
-      
-    end
-  end
-end

data/lib/providers/ip_echo.rb

@@ -1,18 +0,0 @@
-require 'net/http'
-
-module AwSec
-  module Providers
-    class EchoIp
-      
-      Register.register('Echo IP', AwSec::Providers::EchoIp.new())
-      
-      def get_public_ip(options)
-        Net::HTTP.get(URI "http://ipecho.net/plain")
-      end
-      
-       def configure
-       end
-       
-    end
-  end
-end

data/lib/providers/my_ip.rb

@@ -1,24 +0,0 @@
-require 'net/http'
-require 'highline/import'
-
-module AwSec
-  module Providers
-    class MyIp
-      
-      Register.register('My IP', AwSec::Providers::MyIp.new())
-      
-      def get_public_ip(options)
-      	Net::HTTP.get(URI "http://auto.whatismyip.com/ip.php?user=#{options[:my_ip_username]}&password=#{options[:my_ip_password]}")
-      end
-      
-      def configure
-        result = {}
-        result[:my_ip_username] = ask('My IP username')
-        result[:my_ip_password] = ask('My IP password') { |q| q.echo = "*" }
-        
-        result
-      end
-
-    end
-  end
-end

data/lib/version.rb

@@ -1,52 +0,0 @@
-# encoding: utf-8
-
-module AwSec
-	class Version
-
-		##
-		# Change the MAJOR, MINOR and PATCH constants below
-		# to adjust the version of the Cloud66 Agent gem
-		#
-		# MAJOR:
-		#  Defines the major version
-		# MINOR:
-		#  Defines the minor version
-		# PATCH:
-		#  Defines the patch version
-		MAJOR, MINOR, PATCH  = 0, 0, 3
-
-		#ie. PRERELEASE_MODIFIER = 'beta1'
-		PRERELEASE_MODIFIER = nil
-
-		##
-		# Returns the major version ( big release based off of multiple minor releases )
-		def self.major
-			MAJOR
-		end
-
-		##
-		# Returns the minor version ( small release based off of multiple patches )
-		def self.minor
-			MINOR
-		end
-
-		##
-		# Returns the patch version ( updates, features and (crucial) bug fixes )
-		def self.patch
-			PATCH
-		end
-
-		##
-		# Returns the prerelease modifier ( not quite ready for public consumption )
-		def self.prerelease_modifier
-			PRERELEASE_MODIFIER
-		end
-
-		##
-		# Returns the current version of the Backup gem ( qualified for the gemspec )
-		def self.current
-			prerelease_modifier.nil? ? "#{major}.#{minor}.#{patch}" : "#{major}.#{minor}.#{patch}.#{prerelease_modifier}"
-		end
-
-	end
-end