better-aws-tags 0.3.1__py3-none-any.whl → 0.5.0__py3-none-any.whl

better_aws_tags/__init__.py

@@ -1,4 +1,4 @@
-__version__ = "0.3.1"
+__version__ = "0.5.0"
 
 from .tags import get_tags as get_tags
 from .tags import set_tags as set_tags

better_aws_tags/handlers/__init__.py

@@ -0,0 +1,45 @@
+from .asg import ASGHandler
+from .base import Handler
+from .cloudfront import CloudFrontFunctionHandler
+from .glue import GlueTableHandler
+from .iam import IAMPolicyHandler, IAMRoleHandler, IAMUserHandler
+from .inspector import InspectorHandler
+from .rds import RDSAutoBackupHandler
+from .resource_explorer import ResourceExplorer2Handler
+from .ses import SESIdentityHandler
+from .tagging_api import TaggingAPIHandler
+from .wafv2 import WAFv2Handler
+
+HANDLERS = {
+    ("autoscaling", "autoscaling-group"): ASGHandler,
+    ("cloudfront", "function"): CloudFrontFunctionHandler,
+    ("glue", "table"): GlueTableHandler,
+    ("iam", "iam-role"): IAMRoleHandler,
+    ("iam", "user"): IAMUserHandler,
+    ("iam", "policy"): IAMPolicyHandler,
+    ("inspector", "target-template"): InspectorHandler,
+    ("rds", "auto-backup"): RDSAutoBackupHandler,
+    ("resource-explorer-2", "index"): ResourceExplorer2Handler,
+    ("resource-explorer-2", "view"): ResourceExplorer2Handler,
+    ("ses", "identity"): SESIdentityHandler,
+    ("wafv2", "ipset"): WAFv2Handler,
+    ("wafv2", "rulegroup"): WAFv2Handler,
+    ("wafv2", "webacl"): WAFv2Handler,
+}
+
+__all__ = [
+    "ASGHandler",
+    "CloudFrontFunctionHandler",
+    "GlueTableHandler",
+    "Handler",
+    "HANDLERS",
+    "IAMPolicyHandler",
+    "IAMRoleHandler",
+    "IAMUserHandler",
+    "InspectorHandler",
+    "RDSAutoBackupHandler",
+    "ResourceExplorer2Handler",
+    "SESIdentityHandler",
+    "TaggingAPIHandler",
+    "WAFv2Handler",
+]

better_aws_tags/handlers/asg.py

@@ -0,0 +1,54 @@
+from botocore.exceptions import ClientError
+from arnmatch import arnmatch
+
+from .base import Handler
+
+
+class ASGHandler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        client = session.client("autoscaling")
+        result = {}
+
+        names = {arnmatch(arn).resource_name: arn for arn in arns}
+
+        response = client.describe_tags(
+            Filters=[{"Name": "auto-scaling-group", "Values": list(names.keys())}]
+        )
+
+        for arn in arns:
+            result[arn] = {}
+
+        for tag in response["Tags"]:
+            arn = names[tag["ResourceId"]]
+            result[arn][tag["Key"]] = tag["Value"]
+
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        client = session.client("autoscaling")
+        result = {}
+
+        for arn in arns:
+            name = arnmatch(arn).resource_name
+            payload = [
+                {
+                    "ResourceId": name,
+                    "ResourceType": "auto-scaling-group",
+                    "Key": k,
+                    "Value": v,
+                    "PropagateAtLaunch": False,
+                }
+                for k, v in tags.items()
+            ]
+            try:
+                client.create_or_update_tags(Tags=payload)
+                result[arn] = True
+            except ClientError as e:
+                if e.response["Error"]["Code"] == "ValidationError":
+                    result[arn] = None
+                else:
+                    raise
+
+        return result

better_aws_tags/handlers/base.py

@@ -0,0 +1,13 @@
+from abc import ABC, abstractmethod
+
+
+class Handler(ABC):
+    @classmethod
+    @abstractmethod
+    def get_tags(cls, session, arns):
+        pass
+
+    @classmethod
+    @abstractmethod
+    def set_tags(cls, session, arns, tags):
+        pass

better_aws_tags/handlers/cloudfront.py

@@ -0,0 +1,27 @@
+from .base import Handler
+
+
+class CloudFrontFunctionHandler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        client = session.client("cloudfront")
+        result = {}
+
+        for arn in arns:
+            response = client.list_tags_for_resource(Resource=arn)
+            tags = response["Tags"].get("Items", [])
+            result[arn] = {t["Key"]: t["Value"] for t in tags}
+
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        client = session.client("cloudfront")
+        result = {}
+
+        payload = {"Items": [{"Key": k, "Value": v} for k, v in tags.items()]}
+        for arn in arns:
+            client.tag_resource(Resource=arn, Tags=payload)
+            result[arn] = True
+
+        return result

better_aws_tags/handlers/glue.py

@@ -0,0 +1,25 @@
+from .base import Handler
+
+
+class GlueTableHandler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        client = session.client("glue")
+        result = {}
+
+        for arn in arns:
+            response = client.get_tags(ResourceArn=arn)
+            result[arn] = response["Tags"]
+
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        client = session.client("glue")
+        result = {}
+
+        for arn in arns:
+            client.tag_resource(ResourceArn=arn, TagsToAdd=tags)
+            result[arn] = True
+
+        return result

better_aws_tags/handlers/iam.py

@@ -0,0 +1,79 @@
+from arnmatch import arnmatch
+
+from .base import Handler
+
+
+class IAMRoleHandler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        client = session.client("iam")
+        result = {}
+        for arn in arns:
+            name = arnmatch(arn).resource_name
+            response = client.list_role_tags(RoleName=name)
+            result[arn] = {t["Key"]: t["Value"] for t in response["Tags"]}
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        client = session.client("iam")
+        payload = [{"Key": k, "Value": v} for k, v in tags.items()]
+        result = {}
+        for arn in arns:
+            name = arnmatch(arn).resource_name
+            try:
+                client.tag_role(RoleName=name, Tags=payload)
+                result[arn] = True
+            except client.exceptions.NoSuchEntityException:
+                result[arn] = None
+        return result
+
+
+class IAMUserHandler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        client = session.client("iam")
+        result = {}
+        for arn in arns:
+            name = arnmatch(arn).resource_name
+            response = client.list_user_tags(UserName=name)
+            result[arn] = {t["Key"]: t["Value"] for t in response["Tags"]}
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        client = session.client("iam")
+        payload = [{"Key": k, "Value": v} for k, v in tags.items()]
+        result = {}
+        for arn in arns:
+            name = arnmatch(arn).resource_name
+            try:
+                client.tag_user(UserName=name, Tags=payload)
+                result[arn] = True
+            except client.exceptions.NoSuchEntityException:
+                result[arn] = None
+        return result
+
+
+class IAMPolicyHandler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        client = session.client("iam")
+        result = {}
+        for arn in arns:
+            response = client.list_policy_tags(PolicyArn=arn)
+            result[arn] = {t["Key"]: t["Value"] for t in response["Tags"]}
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        client = session.client("iam")
+        payload = [{"Key": k, "Value": v} for k, v in tags.items()]
+        result = {}
+        for arn in arns:
+            try:
+                client.tag_policy(PolicyArn=arn, Tags=payload)
+                result[arn] = True
+            except client.exceptions.NoSuchEntityException:
+                result[arn] = None
+        return result

better_aws_tags/handlers/inspector.py

@@ -0,0 +1,26 @@
+from .base import Handler
+
+
+class InspectorHandler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        client = session.client("inspector")
+        result = {}
+
+        for arn in arns:
+            response = client.list_tags_for_resource(resourceArn=arn)
+            result[arn] = {t["key"]: t["value"] for t in response["tags"]}
+
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        client = session.client("inspector")
+        result = {}
+
+        payload = [{"key": k, "value": v} for k, v in tags.items()]
+        for arn in arns:
+            client.set_tags_for_resource(resourceArn=arn, tags=payload)
+            result[arn] = True
+
+        return result

better_aws_tags/handlers/rds.py

@@ -0,0 +1,26 @@
+from .base import Handler
+
+
+class RDSAutoBackupHandler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        client = session.client("rds")
+        result = {}
+
+        for arn in arns:
+            response = client.list_tags_for_resource(ResourceName=arn)
+            result[arn] = {t["Key"]: t["Value"] for t in response["TagList"]}
+
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        client = session.client("rds")
+        result = {}
+
+        payload = [{"Key": k, "Value": v} for k, v in tags.items()]
+        for arn in arns:
+            client.add_tags_to_resource(ResourceName=arn, Tags=payload)
+            result[arn] = True
+
+        return result

better_aws_tags/handlers/resource_explorer.py

@@ -0,0 +1,25 @@
+from .base import Handler
+
+
+class ResourceExplorer2Handler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        client = session.client("resource-explorer-2")
+        result = {}
+
+        for arn in arns:
+            response = client.list_tags_for_resource(resourceArn=arn)
+            result[arn] = response.get("Tags", {})
+
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        client = session.client("resource-explorer-2")
+        result = {}
+
+        for arn in arns:
+            client.tag_resource(resourceArn=arn, Tags=tags)
+            result[arn] = True
+
+        return result

better_aws_tags/handlers/ses.py

@@ -0,0 +1,26 @@
+from .base import Handler
+
+
+class SESIdentityHandler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        client = session.client("sesv2")
+        result = {}
+
+        for arn in arns:
+            response = client.list_tags_for_resource(ResourceArn=arn)
+            result[arn] = {t["Key"]: t["Value"] for t in response["Tags"]}
+
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        client = session.client("sesv2")
+        result = {}
+
+        payload = [{"Key": k, "Value": v} for k, v in tags.items()]
+        for arn in arns:
+            client.tag_resource(ResourceArn=arn, Tags=payload)
+            result[arn] = True
+
+        return result

better_aws_tags/handlers/tagging_api.py

@@ -0,0 +1,50 @@
+from .base import Handler
+
+
+class TaggingAPIHandler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        if not arns:
+            raise ValueError("At least one ARN must be provided to get_tags.")
+
+        client = session.client("resourcegroupstaggingapi")
+        result = {}
+
+        # https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/API_GetResources.html
+        batch_size = 100
+        for i in range(0, len(arns), batch_size):
+            batch = arns[i : i + batch_size]
+            response = client.get_resources(ResourceARNList=batch)
+            response = response["ResourceTagMappingList"]
+            for arn in batch:
+                if arn in response:
+                    result[arn] = {
+                        t["Key"]: t["Value"] for t in response[arn].get("Tags", [])
+                    }
+                else:
+                    result[arn] = None
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        if not arns:
+            raise ValueError("At least one ARN must be provided to set_tags.")
+
+        if len(tags) == 0:
+            raise ValueError("At least one tag must be provided to set_tags.")
+
+        if len(tags) > 50:
+            raise ValueError("A maximum of 50 tags can be set at once.")
+
+        client = session.client("resourcegroupstaggingapi")
+        result = {}
+
+        # https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/API_TagResources.html
+        batch_size = 20
+        for i in range(0, len(arns), batch_size):
+            batch = arns[i : i + batch_size]
+            response = client.tag_resources(ResourceARNList=batch, Tags=tags)
+            for arn in batch:
+                result[arn] = arn not in response["FailedResourcesMap"]
+
+        return result

better_aws_tags/handlers/wafv2.py

@@ -0,0 +1,27 @@
+from .base import Handler
+
+
+class WAFv2Handler(Handler):
+    @classmethod
+    def get_tags(cls, session, arns):
+        client = session.client("wafv2")
+        result = {}
+
+        for arn in arns:
+            response = client.list_tags_for_resource(ResourceARN=arn)
+            tags = response["TagInfoForResource"]["TagList"]
+            result[arn] = {t["Key"]: t["Value"] for t in tags}
+
+        return result
+
+    @classmethod
+    def set_tags(cls, session, arns, tags):
+        client = session.client("wafv2")
+        result = {}
+
+        payload = [{"Key": k, "Value": v} for k, v in tags.items()]
+        for arn in arns:
+            client.tag_resource(ResourceARN=arn, Tags=payload)
+            result[arn] = True
+
+        return result