cthiesfork-awspec 1.0.0

data/lib/awspec/helper/finder/elasticache.rb

@@ -0,0 +1,21 @@
+module Awspec::Helper
+  module Finder
+    module Elasticache
+      def find_cache_cluster(id)
+        res = elasticache_client.describe_cache_clusters({
+                                                           cache_cluster_id: id
+                                                         })
+        res.cache_clusters.single_resource(id)
+      rescue
+        nil
+      end
+
+      def find_cache_subnet_group(group_name)
+        res = elasticache_client.describe_cache_subnet_groups({
+                                                                cache_subnet_group_name: group_name
+                                                              })
+        res.cache_subnet_groups.single_resource(group_name)
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/elasticsearch.rb

@@ -0,0 +1,19 @@
+module Awspec::Helper
+  module Finder
+    module Elasticsearch
+      def find_elasticsearch_domain(id)
+        res = elasticsearch_client.describe_elasticsearch_domain(domain_name: id)
+        res.domain_status
+      rescue
+        nil
+      end
+
+      def select_all_elasticsearch_domains
+        domain_names = elasticsearch_client.list_domain_names.domain_names
+        domain_names.map do |domain|
+          elasticsearch_client.describe_elasticsearch_domain(domain_name: domain.domain_name)
+        end
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/elastictranscoder.rb

@@ -0,0 +1,21 @@
+module Awspec::Helper
+  module Finder
+    module Elastictranscoder
+      def find_pipeline(id)
+        selected = []
+        res = elastictranscoder_client.list_pipelines
+        loop do
+          selected += res.pipelines.select do |pipeline|
+            pipeline.id == id || pipeline.name == id
+          end
+          break if res.next_page_token.nil?
+          res = elastictranscoder_client.list_pipelines({
+                                                          page_token: res.next_page_token
+                                                        })
+        end
+
+        selected.single_resource(id)
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/elb.rb

@@ -0,0 +1,37 @@
+module Awspec::Helper
+  module Finder
+    module Elb
+      def find_elb(id)
+        res = elb_client.describe_load_balancers({
+                                                   load_balancer_names: [id]
+                                                 })
+        res.load_balancer_descriptions.single_resource(id)
+      rescue
+        return nil
+      end
+
+      def find_elb_attribute(id)
+        res = elb_client.describe_load_balancer_attributes({
+                                                             load_balancer_name: id
+                                                           })
+        res.load_balancer_attributes
+      rescue
+        return nil
+      end
+
+      def select_elb_by_vpc_id(vpc_id)
+        res = elb_client.describe_load_balancers
+        res.load_balancer_descriptions.select do |lb|
+          lb.vpc_id == vpc_id
+        end
+      end
+
+      def select_all_elb_tags(id)
+        res = elb_client.describe_tags({
+                                         load_balancer_names: [id]
+                                       })
+        res.tag_descriptions.single_resource(id).tags
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/emr.rb

@@ -0,0 +1,9 @@
+module Awspec::Helper
+  module Finder
+    module Emr
+      def find_emr_cluster(cluster_id)
+        emr_client.describe_cluster({ cluster_id: cluster_id }).cluster
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/firehose.rb

@@ -0,0 +1,13 @@
+module Awspec::Helper
+  module Finder
+    module Firehose
+      def find_delivery_stream(name)
+        firehose_client
+          .describe_delivery_stream({
+                                      delivery_stream_name: name
+                                    })
+          .delivery_stream_description
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/iam.rb

@@ -0,0 +1,118 @@
+module Awspec::Helper
+  module Finder
+    module Iam
+      # find_iam_user, find_iam_group find_iam_role find_iam_policy
+      role_types = %w(user group role policy)
+      role_types.each do |type|
+        define_method 'find_iam_' + type do |*args|
+          id = args.first
+          selected = []
+          res = iam_client.send('list_' + type.pluralize)
+          loop do
+            selected += res[type.pluralize].select do |u|
+              u[type + '_name'] == id || u[type + '_id'] == id || u.arn == id
+            end
+
+            break unless res.is_truncated
+            res = iam_client.send(
+              'list_' + type.pluralize,
+              { marker: res.marker }
+            )
+          end
+
+          selected.single_resource(id)
+        end
+      end
+
+      def select_policy_evaluation_results(policy_arn, action_name, resource_arn = nil, context_entries = nil)
+        options = {
+          policy_source_arn: policy_arn,
+          action_names: [action_name]
+        }
+        options[:resource_arns] = [resource_arn] if resource_arn
+        options[:context_entries] = context_entries if context_entries
+
+        res = iam_client.simulate_principal_policy(options)
+        res.evaluation_results
+      end
+
+      def select_iam_group_by_user_name(user_name)
+        res = iam_client.list_groups_for_user({
+                                                user_name: user_name
+                                              })
+        res.groups
+      end
+
+      %w(user group role).each do |type|
+        define_method 'select_iam_policy_by_' + type + '_name' do |name|
+          res = iam_client.send(
+            'list_attached_' + type + '_policies',
+            { (type + '_name').to_sym => name }
+          )
+          res.attached_policies
+        end
+
+        define_method 'select_inline_policy_by_' + type + '_name' do |name|
+          res = iam_client.send(
+            'list_' + type + '_policies',
+            { (type + '_name').to_sym => name }
+          )
+          res.policy_names
+        end
+      end
+
+      def select_all_attached_policies
+        selected = []
+        res = iam_client.list_policies
+
+        loop do
+          selected += res.policies.select { |p| p.attachment_count > 0 }
+          break unless res.is_truncated
+          res = iam_client.list_policies({
+                                           marker: res.marker
+                                         })
+        end
+
+        selected
+      end
+
+      def select_attached_entities(policy_id)
+        policy = find_iam_policy(policy_id)
+        iam_client.list_entities_for_policy(policy_arn: policy[:arn])
+      end
+
+      def select_attached_users(policy_id)
+        entities = select_attached_entities(policy_id)
+        entities.policy_users
+      end
+
+      def select_attached_groups(policy_id)
+        entities = select_attached_entities(policy_id)
+        entities.policy_groups
+      end
+
+      def select_attached_roles(policy_id)
+        entities = select_attached_entities(policy_id)
+        entities.policy_roles
+      end
+
+      def select_all_iam_users
+        iam_client.list_users.map do |response|
+          response.users
+        end.flatten
+      end
+
+      def select_all_iam_groups
+        iam_client.list_groups.map do |response|
+          response.groups
+        end.flatten
+      end
+
+      def select_all_iam_roles
+        iam_client.list_roles.map do |response|
+          response.roles
+        end.flatten
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/kinesis.rb

@@ -0,0 +1,14 @@
+module Awspec::Helper
+  module Finder
+    module Kinesis
+      def find_kinesis_by_stream_name(name)
+        kinesis_client.list_streams.stream_names.each do |stream|
+          if stream == name
+            return kinesis_client.describe_stream_summary({ stream_name: name }).stream_description_summary
+          end
+        end
+        nil
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/kms.rb

@@ -0,0 +1,38 @@
+module Awspec::Helper
+  module Finder
+    module Kms
+      def find_kms_key(key_id)
+        kms_client.describe_key(key_id: key_id).key_metadata
+      rescue
+        nil
+      end
+
+      def find_kms_key_by_alias(key_alias_name)
+        alias_name = key_alias_name.start_with?('alias/') ? key_alias_name : "alias/#{key_alias_name}"
+        found = nil
+        next_marker = nil
+
+        loop do
+          res = kms_client.list_aliases(marker: next_marker, limit: 100)
+          found = res.aliases.find { |key_alias| key_alias.alias_name == alias_name }
+          (found.nil? && next_marker = res.next_marker) || break
+        end
+
+        find_kms_key(found.target_key_id) if found
+      end
+
+      def select_all_kms_aliases
+        all_aliases = []
+        next_marker = nil
+
+        loop do
+          res = kms_client.list_aliases(marker: next_marker, limit: 100)
+          all_aliases.concat(res.aliases)
+          next_marker = res.next_marker || break
+        end
+
+        all_aliases
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/lambda.rb

@@ -0,0 +1,35 @@
+module Awspec::Helper
+  module Finder
+    module Lambda
+      def find_lambda(id)
+        selected = []
+        res = lambda_client.list_functions
+
+        loop do
+          selected += res.functions.select do |function|
+            function.function_name == id || function.function_arn == id
+          end
+          break if res.next_marker.nil?
+          res = lambda_client.list_functions({
+                                               marker: res.next_marker
+                                             })
+        end
+
+        selected.single_resource(id)
+      end
+
+      def select_event_source_by_function_arn(function_arn)
+        res = lambda_client.list_event_source_mappings({
+                                                         function_name: function_arn
+                                                       })
+        res.event_source_mappings
+      end
+
+      def select_all_lambda_functions
+        lambda_client.list_functions.map do |response|
+          response.functions
+        end.flatten
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/mq.rb

@@ -0,0 +1,11 @@
+module Awspec::Helper
+  module Finder
+    module Mq
+      def find_broker(broker_id)
+        mq_client.describe_broker({ broker_id: broker_id })
+      rescue
+        nil
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/nlb.rb

@@ -0,0 +1,68 @@
+module Awspec::Helper
+  module Finder
+    module Nlb
+      def find_nlb(id)
+        res = elbv2_client.describe_load_balancers({ names: [id] })
+        res.load_balancers.select do |lb|
+          lb.type == 'network'
+        end.single_resource(id)
+      rescue
+        return nil
+      end
+
+      def select_nlb_by_vpc_id(vpc_id)
+        res = elbv2_client.describe_load_balancers
+        res.load_balancers.select do |lb|
+          lb.vpc_id == vpc_id && lb.type == 'network'
+        end
+      end
+
+      def find_nlb_listener(arn)
+        res = elbv2_client.describe_listeners({ listener_arns: [arn] })
+        res.listeners.single_resource(arn)
+      rescue
+        return nil
+      end
+
+      def select_nlb_listener_by_nlb_arn(arn)
+        selected = []
+        next_marker = nil
+        loop do
+          res = elbv2_client.describe_listeners({ marker: next_marker, load_balancer_arn: arn })
+          selected += res.listeners unless res.nil?
+          (res.nil? && next_marker = res.next_marker) || break
+        end
+        selected
+      end
+
+      def find_nlb_target_group(id)
+        res = elbv2_client.describe_target_groups({ names: [id] })
+        httpx_res = res.target_groups.select do |tg|
+          %w(HTTP HTTPS).include?(tg.protocol)
+        end
+        if !httpx_res || httpx_res.empty?
+          raise "ERROR: Found no HTTP nor HTTPS -protocol target group named '#{id}'."
+        end
+        httpx_res.single_resource(id)
+      rescue
+        # Prefer the HTTP/HTTPS protocol target group, but survive without it:
+        begin
+          res.target_groups.single_resource(id)
+        rescue
+          return nil
+        end
+      end
+
+      def select_rule_by_nlb_listener_id(id)
+        selected = []
+        next_marker = nil
+        loop do
+          res = elbv2_client.describe_rules(marker: next_marker, listener_arn: id)
+          selected += res.rules unless res.nil?
+          (res.nil? && next_marker = res.next_marker) || break
+        end
+        selected
+      end
+    end
+  end
+end

data/lib/awspec/helper/finder/rds.rb

@@ -0,0 +1,59 @@
+module Awspec::Helper
+  module Finder
+    module Rds
+      def find_rds(id)
+        begin
+          res = rds_client.describe_db_instances({
+                                                   db_instance_identifier: id
+                                                 })
+        rescue
+          res = rds_client.describe_db_instances({
+                                                   filters: [{ name: 'db-instance-id', values: [id] }]
+                                                 })
+        end
+        res.db_instances.single_resource(id)
+      end
+
+      def select_rds_by_vpc_id(vpc_id)
+        res = rds_client.describe_db_instances
+        res.db_instances.select do |db_instance|
+          db_instance.db_subnet_group.vpc_id == vpc_id
+        end
+      end
+
+      def select_all_rds_db_parameters(parameter_group)
+        parameters = {}
+        res = rds_client.describe_db_parameters({
+                                                  db_parameter_group_name: parameter_group
+                                                })
+        loop do
+          res.parameters.each do |param|
+            parameters[param.parameter_name] = param.parameter_value
+          end
+          break if res.marker.nil?
+          res = rds_client.describe_db_parameters({
+                                                    db_parameter_group_name: parameter_group,
+                                                    marker: res.marker
+                                                  })
+        end
+        parameters
+      end
+
+      def select_all_rds_db_cluster_parameters(parameter_group)
+        parameters = {}
+        next_marker = nil
+        loop do
+          res = rds_client.describe_db_cluster_parameters({
+                                                            marker: next_marker,
+                                                            db_cluster_parameter_group_name: parameter_group
+                                                          })
+          res.parameters.each do |param|
+            parameters[param.parameter_name] = param.parameter_value
+          end
+          (res.marker.present? && next_marker = res.marker) || break
+        end
+        parameters
+      end
+    end
+  end
+end