rds_ssm_connect 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2023 Iaroslav Pyrogov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,63 @@
+# AWS Environment Selector and Command Executor
+
+This Node.js application allows you to select an AWS environment and execute various AWS commands within that environment. The environments are read from your AWS configuration file, and the application uses the `aws-vault` tool to securely manage your AWS credentials.
+
+## Prerequisites
+
+Before running this application, make sure you have the following installed:
+
+- Node.js: You can download it from the [official website](https://nodejs.org/).
+- `aws-vault` tool: You can install it following the instructions on the [official GitHub page](https://github.com/99designs/aws-vault).
+- AWS CLI: You can install it following the instructions on the [official AWS page](https://aws.amazon.com/cli/).
+
+Also, ensure that your AWS configuration file (`~/.aws/config`) is properly set up with the environments you want to use.
+
+## Installation
+
+1. Clone the repository or download the source code.
+2. Navigate to the project directory.
+3. Install the necessary Node.js dependencies by running:
+
+```bash
+npm install
+```
+
+## Usage
+
+1. Run the application. It will read your AWS configuration file and prompt you to select an environment.
+
+```bash
+node connect.js
+```
+
+2. Select the environment you want to use. The application will then execute a series of AWS commands within that environment.
+
+## Requirements
+
+This application requires the following Node.js modules:
+
+- `child_process`: For spawning child processes to execute AWS commands.
+- `inquirer`: For prompting the user to select an environment.
+- `fs`: For reading the AWS configuration file.
+- `os`: For getting the user's home directory.
+- `path`: For working with file paths.
+
+You can install these modules by running:
+
+```bash
+npm install child_process inquirer fs os path
+```
+
+## How It Works
+
+The application first reads the AWS configuration file and extracts the environments from it. It then prompts the user to select an environment.
+
+After the user selects an environment, the application executes a series of AWS commands within that environment using `aws-vault`. These commands include:
+
+- Describing SSM parameters to get the name of the parameter containing the RDS password.
+- Getting the value of the RDS password parameter.
+- Describing EC2 instances to get the ID of the bastion instance.
+- Describing RDS DB clusters to get the endpoint of the RDS cluster.
+- Starting an AWS SSM session to forward a local port to the RDS cluster.
+
+The application logs the output of each command and any errors that occur.

package/connect.js

@@ -0,0 +1,115 @@
+// Import necessary modules
+import { spawn } from 'child_process'; // For spawning child processes
+import inquirer from 'inquirer'; // For prompting the user for input
+import fs from 'fs'; // For reading files
+import os from 'os'; // For getting the user's home directory
+import path from 'path'; // For working with file paths
+
+// Get the path to the AWS config file
+const awsConfigPath = path.join(os.homedir(), '.aws', 'config');
+
+// Read the contents of the AWS config file
+const awsConfig = fs.readFileSync(awsConfigPath, 'utf-8');
+
+// Extract environments from AWS config file
+const ENVS = awsConfig
+  .split('\n')
+  .filter(line => line.startsWith('[') && line.endsWith(']'))
+  .map(line => line.slice(1, -1))
+  .map(line => line.replace('profile ', ''));
+
+// Prompt the user to select an environment
+inquirer
+  .prompt([
+    {
+      type: 'list',
+      name: 'ENV',
+      message: 'Please select the environment:',
+      choices: ENVS,
+    },
+  ])
+  .then((answers) => {
+    const ENV = answers.ENV; // Get the selected environment from the user's answers
+    console.log(`You selected: ${ENV}`);
+
+    // Set up the commands to run inside the aws-vault environment
+    const awsVaultExecCommand = ['aws-vault', 'exec', ENV, '--'];
+    const ssmDescribeCommand = 'aws ssm describe-parameters --region us-east-2 --query \'Parameters[?ends_with(Name, `/rds/rds-aurora-password`)].Name\' --output text | head -n 1';
+
+    // Run the commands inside aws-vault environment
+    const ssmDescribeProcess = spawn('sh', ['-c', `${awsVaultExecCommand.join(' ')} ${ssmDescribeCommand}`]);
+
+    // Get the name of the parameter containing the RDS password
+    ssmDescribeProcess.stdout.on('data', (data) => {
+      const PARAM_NAME = data.toString().trim();
+
+      // Get the RDS credentials
+      const ssmGetCommand = `aws ssm get-parameter --region us-east-2 --name '${PARAM_NAME}' --with-decryption --query Parameter.Value --output text`;
+      const ssmGetProcess = spawn('sh', ['-c', `${awsVaultExecCommand.join(' ')} ${ssmGetCommand}`]);
+
+      // Parse the JSON output of the ssm get-parameter command to get the RDS credentials
+      ssmGetProcess.stdout.on('data', (data) => {
+        const CREDENTIALS = JSON.parse(data.toString());
+        const USERNAME = CREDENTIALS.user; // Get the RDS username from the credentials
+        const PASSWORD = CREDENTIALS.password; // Get the RDS password from the credentials
+
+        // Display connection credentials and connection string
+        console.log(`Your connection string is: psql -h localhost -p 5432 -U ${USERNAME} -d emr`);
+        console.log(`Use the password: ${PASSWORD}`);
+
+        // Get the ID of the bastion instance
+        const instanceIdCommand = `aws ec2 describe-instances --region us-east-2 --filters "Name=tag:Name,Values='*bastion*'" --query "Reservations[].Instances[].[InstanceId]" --output text`;
+        const instanceIdProcess = spawn('sh', ['-c', `${awsVaultExecCommand.join(' ')} ${instanceIdCommand}`]);
+
+        instanceIdProcess.stdout.on('data', (data) => {
+          const INSTANCE_ID = data.toString().trim();
+
+          if (!INSTANCE_ID) {
+            console.error('Failed to find the instance with tag Name=*bastion*.');
+            return;
+          }
+
+          // Get the endpoint of the RDS cluster
+          const rdsEndpointCommand = `aws rds describe-db-clusters --region us-east-2 --query "DBClusters[?contains(DBClusterIdentifier, 'rds-aurora')].Endpoint" --output text`;
+          const rdsEndpointProcess = spawn('sh', ['-c', `${awsVaultExecCommand.join(' ')} ${rdsEndpointCommand}`]);
+
+          rdsEndpointProcess.stdout.on('data', (data) => {
+            const RDS_ENDPOINT = data.toString().trim();
+
+            if (!RDS_ENDPOINT) {
+              console.error('Failed to find the RDS endpoint.');
+              return;
+            }
+
+            // Start a port forwarding session to the RDS cluster
+            const portForwardingCommand = `aws ssm start-session --target ${INSTANCE_ID} --document-name AWS-StartPortForwardingSessionToRemoteHost --parameters "host=${RDS_ENDPOINT},portNumber='5432',localPortNumber='5432'" --cli-connect-timeout 0`;
+            const portForwardingProcess = spawn('sh', ['-c', `${awsVaultExecCommand.join(' ')} ${portForwardingCommand}`]);
+
+            portForwardingProcess.stdout.on('data', (data) => {
+              console.log(data.toString().trim());
+            });
+
+            portForwardingProcess.stderr.on('data', (data) => {
+              console.error(`Command execution error: ${data.toString()}`);
+            });
+          });
+
+          rdsEndpointProcess.stderr.on('data', (data) => {
+            console.error(`Command execution error: ${data.toString()}`);
+          });
+        });
+
+        instanceIdProcess.stderr.on('data', (data) => {
+          console.error(`Command execution error: ${data.toString()}`);
+        });
+      });
+
+      ssmGetProcess.stderr.on('data', (data) => {
+        console.error(`Command execution error: ${data.toString()}`);
+      });
+    });
+
+    ssmDescribeProcess.stderr.on('data', (data) => {
+      console.error(`Command execution error: ${data.toString()}`);
+    });
+  });

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "rds_ssm_connect",
+  "version": "1.0.0",
+  "type": "module",
+  "dependencies": {
+    "@aws-sdk/client-ec2": "^3.363.0",
+    "@aws-sdk/client-rds": "^3.363.0",
+    "@aws-sdk/client-ssm": "^3.363.0",
+    "aws-sdk": "^2.1411.0",
+    "inquirer": "^8.2.5",
+    "node-jq": "^2.3.5"
+  }
+}