cmonson_2ndwatch_awspec 0.85.3

data/lib/awspec/helper/finder/efs.rb

@@ -0,0 +1,63 @@
+module Awspec::Helper
+  module Finder
+    module Efs
+      def find_efs(id)
+        begin
+          res = efs_client.describe_file_systems({
+                                                   file_system_id: id,
+                                                   max_items: 1
+                                                 })
+        rescue
+          # Aws::EFS::Errors::BadRequest (invalid file system ID: my-efs)
+          file_system_id = get_id_by_name_tag(id)
+          res = efs_client.describe_file_systems({
+                                                   file_system_id: file_system_id,
+                                                   max_items: 1
+                                                 })
+        end
+        res.file_systems.single_resource(id)
+      end
+
+      def find_efs_tags(id, tag_key)
+        begin
+          tag_set = efs_client.describe_tags({ file_system_id: id })
+        rescue
+          # Aws::EFS::Errors::BadRequest (invalid file system ID: my-efs)
+          file_system_id = get_id_by_name_tag(id)
+          tag_set = efs_client.describe_tags({
+                                               file_system_id: file_system_id
+                                             })
+        end
+        tag_query = tag_set.tags.find { |tag| tag.key == tag_key }
+        return tag_query if tag_query
+      end
+
+      def get_id_by_name_tag(name)
+        # takes a name tag and iterates inventory and returns file_system obj
+        inventory = efs_client.describe_file_systems
+        file_systems = inventory.file_systems.select do |fs|
+          tag_query = efs_client.describe_tags({
+                                                 file_system_id: fs.file_system_id
+                                               })
+          name_tag = tag_query.tags.find { |tag| tag.key == 'Name' } if tag_query.tags
+          name_tag && name_tag.value == name
+        end
+        file_systems.single_resource(name).file_system_id
+      end
+
+      def get_name_by_id(id)
+        tag_query = efs_client.describe_tags({
+                                               file_system_id: id
+                                             })
+        name_tag = tag_query.tags.find { |tag| tag.key == 'Name' }
+        return name_tag.value if name_tag
+      end
+
+      def select_all_file_systems
+        file_systems_query = efs_client.describe_file_systems
+        file_systems = file_systems_query.file_systems
+        file_systems
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/elasticache.rb

@@ -0,0 +1,21 @@
+module Awspec::Helper
+  module Finder
+    module Elasticache
+      def find_cache_cluster(id)
+        res = elasticache_client.describe_cache_clusters({
+                                                           cache_cluster_id: id
+                                                         })
+        res.cache_clusters.single_resource(id)
+      rescue
+        nil
+      end
+
+      def find_cache_subnet_group(group_name)
+        res = elasticache_client.describe_cache_subnet_groups({
+                                                                cache_subnet_group_name: group_name
+                                                              })
+        res.cache_subnet_groups.single_resource(group_name)
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/elasticsearch.rb

@@ -0,0 +1,19 @@
+module Awspec::Helper
+  module Finder
+    module Elasticsearch
+      def find_elasticsearch_domain(id)
+        res = elasticsearch_client.describe_elasticsearch_domain(domain_name: id)
+        res.domain_status
+      rescue
+        nil
+      end
+
+      def select_all_elasticsearch_domains
+        domain_names = elasticsearch_client.list_domain_names.domain_names
+        domain_names.map do |domain|
+          elasticsearch_client.describe_elasticsearch_domain(domain_name: domain.domain_name)
+        end
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/elastictranscoder.rb

@@ -0,0 +1,18 @@
+module Awspec::Helper
+  module Finder
+    module Elastictranscoder
+      def find_pipeline(id)
+        selected = []
+        res = elastictranscoder_client.list_pipelines
+        loop do
+          selected += res.pipelines.select do |pipeline|
+            pipeline.id == id || pipeline.name == id
+          end
+          (res.next_page? && res = res.next_page) || break
+        end
+
+        selected.single_resource(id)
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/elb.rb

@@ -0,0 +1,21 @@
+module Awspec::Helper
+  module Finder
+    module Elb
+      def find_elb(id)
+        res = elb_client.describe_load_balancers({
+                                                   load_balancer_names: [id]
+                                                 })
+        res.load_balancer_descriptions.single_resource(id)
+      rescue
+        return nil
+      end
+
+      def select_elb_by_vpc_id(vpc_id)
+        res = elb_client.describe_load_balancers
+        res.load_balancer_descriptions.select do |lb|
+          lb.vpc_id == vpc_id
+        end
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/iam.rb

@@ -0,0 +1,108 @@
+module Awspec::Helper
+  module Finder
+    module Iam
+      # find_iam_user, find_iam_group find_iam_role find_iam_policy
+      role_types = %w(user group role policy)
+      role_types.each do |type|
+        define_method 'find_iam_' + type do |*args|
+          id = args.first
+          selected = []
+          res = iam_client.method('list_' + type.pluralize).call
+          loop do
+            selected += res[type.pluralize].select do |u|
+              u[type + '_name'] == id || u[type + '_id'] == id || u.arn == id
+            end
+            (res.next_page? && res = res.next_page) || break
+          end
+
+          selected.single_resource(id)
+        end
+      end
+
+      def select_policy_evaluation_results(policy_arn, action_name, resource_arn = nil, context_entries = nil)
+        options = {
+          policy_source_arn: policy_arn,
+          action_names: [action_name]
+        }
+        options[:resource_arns] = [resource_arn] if resource_arn
+        options[:context_entries] = context_entries if context_entries
+
+        res = iam_client.simulate_principal_policy(options)
+        res.evaluation_results
+      end
+
+      def select_iam_group_by_user_name(user_name)
+        res = iam_client.list_groups_for_user({
+                                                user_name: user_name
+                                              })
+        res.groups
+      end
+
+      %w(user group role).each do |type|
+        define_method 'select_iam_policy_by_' + type + '_name' do |name|
+          res = iam_client.method('list_attached_' + type + '_policies').call({
+                                                                                (type + '_name').to_sym => name
+                                                                              })
+          res.attached_policies
+        end
+
+        define_method 'select_inline_policy_by_' + type + '_name' do |name|
+          res = iam_client.method('list_' + type + '_policies').call({
+                                                                       (type + '_name').to_sym => name
+                                                                     })
+          res.policy_names
+        end
+      end
+
+      def select_all_attached_policies
+        selected = []
+        res = iam_client.list_policies
+
+        loop do
+          selected += res.policies.select { |p| p.attachment_count > 0 }
+          (res.next_page? && res = res.next_page) || break
+        end
+
+        selected
+      end
+
+      def select_attached_entities(policy_id)
+        policy = find_iam_policy(policy_id)
+        iam_client.list_entities_for_policy(policy_arn: policy[:arn])
+      end
+
+      def select_attached_users(policy_id)
+        entities = select_attached_entities(policy_id)
+        entities.policy_users
+      end
+
+      def select_attached_groups(policy_id)
+        entities = select_attached_entities(policy_id)
+        entities.policy_groups
+      end
+
+      def select_attached_roles(policy_id)
+        entities = select_attached_entities(policy_id)
+        entities.policy_roles
+      end
+
+      def select_all_iam_users
+        iam_client.list_users.map do |responce|
+          responce.users
+        end.flatten
+      end
+
+      def select_all_iam_groups
+        iam_client.list_groups.map do |responce|
+          responce.groups
+        end.flatten
+      end
+
+      def select_all_iam_roles
+        iam_client.list_roles.map do |responce|
+          responce.roles
+        end.flatten
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/kms.rb

@@ -0,0 +1,22 @@
+module Awspec::Helper
+  module Finder
+    module Kms
+      def find_kms_key(key_id)
+        kms_client.describe_key(key_id: key_id).key_metadata
+      rescue
+        nil
+      end
+
+      def find_kms_key_by_alias(key_alias_name)
+        key = kms_client.list_aliases.aliases.find do |key_alias|
+          key_alias.alias_name == "alias/#{key_alias_name}"
+        end
+        find_kms_key(key.target_key_id)
+      end
+
+      def select_all_kms_aliases
+        kms_client.list_aliases.aliases
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/lambda.rb

@@ -0,0 +1,32 @@
+module Awspec::Helper
+  module Finder
+    module Lambda
+      def find_lambda(id)
+        selected = []
+        res = lambda_client.list_functions
+
+        loop do
+          selected += res.functions.select do |function|
+            function.function_name == id || function.function_arn == id
+          end
+          (res.next_page? && res = res.next_page) || break
+        end
+
+        selected.single_resource(id)
+      end
+
+      def select_event_source_by_function_arn(function_arn)
+        res = lambda_client.list_event_source_mappings({
+                                                         function_name: function_arn
+                                                       })
+        res.event_source_mappings
+      end
+
+      def select_all_lambda_functions
+        res = lambda_client.list_functions.map do |responce|
+          responce.functions
+        end.flatten
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/rds.rb

@@ -0,0 +1,25 @@
+module Awspec::Helper
+  module Finder
+    module Rds
+      def find_rds(id)
+        begin
+          res = rds_client.describe_db_instances({
+                                                   db_instance_identifier: id
+                                                 })
+        rescue
+          res = rds_client.describe_db_instances({
+                                                   filters: [{ name: 'db-instance-id', values: [id] }]
+                                                 })
+        end
+        res.db_instances.single_resource(id)
+      end
+
+      def select_rds_by_vpc_id(vpc_id)
+        res = rds_client.describe_db_instances
+        res.db_instances.select do |db_instance|
+          db_instance.db_subnet_group.vpc_id == vpc_id
+        end
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/route53.rb

@@ -0,0 +1,31 @@
+module Awspec::Helper
+  module Finder
+    module Route53
+      def find_hosted_zone(id)
+        res = route53_client.list_hosted_zones
+        selected = []
+        loop do
+          res.hosted_zones.each do |hosted_zone|
+            if hosted_zone[:name] == id || hosted_zone[:id] == '/hostedzone/' + id || hosted_zone[:id] == id
+              selected.push(hosted_zone)
+            end
+          end
+          (res.next_page? && res = res.next_page) || break
+        end
+        selected.single_resource(id)
+      end
+
+      def select_record_sets_by_hosted_zone_id(id)
+        selected = []
+        res = route53_client.list_resource_record_sets({
+                                                         hosted_zone_id: id
+                                                       })
+        loop do
+          selected += res.resource_record_sets
+          (res.next_page? && res = res.next_page) || break
+        end
+        selected
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/s3.rb

@@ -0,0 +1,64 @@
+module Awspec::Helper
+  module Finder
+    module S3
+      def find_bucket(id)
+        res = s3_client.list_buckets
+        ret = s3_client.list_buckets[:buckets].find do |bucket|
+          bucket.name == id
+        end
+      end
+
+      def find_bucket_acl(id)
+        s3_client.get_bucket_acl(bucket: id)
+      rescue Aws::S3::Errors::ServiceError
+        nil
+      end
+
+      def find_bucket_cors(id)
+        s3_client.get_bucket_cors(bucket: id)
+      rescue Aws::S3::Errors::ServiceError
+        nil
+      end
+
+      def find_bucket_policy(id)
+        s3_client.get_bucket_policy(bucket: id)
+      rescue Aws::S3::Errors::ServiceError
+        nil
+      end
+
+      def find_bucket_logging(id)
+        s3_client.get_bucket_logging(bucket: id)
+      rescue Aws::S3::Errors::ServiceError
+        nil
+      end
+
+      def find_bucket_tag(id, tag_key)
+        tag = nil
+        begin
+          bucket_tagging = s3_client.get_bucket_tagging(bucket: id)
+          tag_set = bucket_tagging.tag_set
+          tag = tag_set.find { |tag_obj| tag_obj.key == tag_key }
+        rescue Aws::S3::Errors::ServiceError
+          nil
+        end
+        return tag if tag
+      end
+
+      def find_bucket_versioning(id)
+        s3_client.get_bucket_versioning(bucket: id)
+      rescue Aws::S3::Errors::ServiceError
+        nil
+      end
+
+      def find_bucket_lifecycle_configuration(id)
+        s3_client.get_bucket_lifecycle_configuration(bucket: id)
+      rescue Aws::S3::Errors::ServiceError
+        nil
+      end
+
+      def select_all_buckets
+        s3_client.list_buckets.buckets
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/security_group.rb

@@ -0,0 +1,35 @@
+module Awspec::Helper
+  module Finder
+    module SecurityGroup
+      def find_security_group(sg_id)
+        resource = select_security_group_by_group_id([sg_id]).single_resource(sg_id)
+        return resource if resource
+
+        resource = select_security_group_by_group_name([sg_id]).single_resource(sg_id)
+        return resource if resource
+
+        select_security_group_by_tag_name([sg_id]).single_resource(sg_id)
+      end
+
+      def select_security_group_by_vpc_id(vpc_id)
+        describe_security_groups({ filters: [{ name: 'vpc-id', values: [vpc_id] }] })
+      end
+
+      def select_security_group_by_group_id(ids)
+        describe_security_groups({ filters: [{ name: 'group-id', values: ids }] })
+      end
+
+      def select_security_group_by_group_name(names)
+        describe_security_groups({ filters: [{ name: 'group-name', values: names }] })
+      end
+
+      def select_security_group_by_tag_name(names)
+        describe_security_groups({ filters: [{ name: 'tag:Name', values: names }] })
+      end
+
+      def describe_security_groups(param)
+        ec2_client.describe_security_groups(param).security_groups
+      end
+    end
+  end
+end