Krzysztof Szyper ChristophShyper

Reading and fitlering AWS accounts' attributes with Terraform

To fix hashicorp/terraform-provider-aws#17656 I created a simple script using external data source for Terraform.

Using it I'm able, for example, to list all ACTIVE accounts with IDs or emails.

Usage

local {
  accounts_emails = split(",", data.external.accounts.result.Outputs)

Terraform timeouts

Resource

Will be executed only on trigger change

resource "null_resource" "first" {
}

resource "null_resource" "sleep" {
 provisioner "local-exec" {

Save metadata in DynamoDB

resource "aws_dynamodb_table_item" "organization" {
  table_name = "my-dyn-db-table"
  hash_key = "KeyName"
  item = jsonencode({
    KeyName = {
      S = "organization"
    }
    Outputs = {

Save outputs from a resource to a YAML file:

# Module Alpha
# https://www.terraform.io/docs/providers/aws/r/s3_bucket_object.html
resource "aws_s3_bucket_object" "outputs" {
  bucket = local.metadata_bucket
  key    = "${local.key_path}/organization.yml"
  content = yamlencode({
    "organization_arn" : aws_organizations_organization.default.arn
 "organization_id" : aws_organizations_organization.default.id

Repo	Description	Link
alphagov/aws-auth	AWS authentication wrapper to handle MFA and roles	https://github.com/alphagov/aws-auth
beezz/elastalert-lambda	Lambda handler for Yelp's ElastAlert	https://github.com/beezz/elastalert-lambda
blueimp/aws-lambda	Collection of functions for AWS Lambda	https://github.com/blueimp/aws-lambda
cloudposse/tfmask	Terraform utility to mask select output from `terraform plan` and `terraform apply`	https://github.com/cloudposse/tfmask
cytopia/awesome-ci	Awesome Continuous Integration - Lot's of tools for git, file and static source code analysis.	https://github.com/cytopia/awesome-ci
cytopia/docker-terraform-docs	Alpine-based multistage-build version of terraform-docs and terraform-docs-replace in multiple versions to be used for CI and other reproducible automations	https://github.com/cytopia/docker-terraform-docs
cytopia/docker-terragrunt	Alpine-based multistage-build version of Terragrunt and Terr

Keybase proof

I hereby claim:

I am ChristophShyper on github.
I am biotyk (https://keybase.io/biotyk) on keybase.
I have a public key whose fingerprint is 7B58 8495 C657 E51B 054B 2085 C9A1 2AA4 E28D AFF1

To claim this, I am signing this object:

	#!/usr/bin/env python3

	import boto3
	import botocore.exceptions


	"""
	Script for counting current usage of public IPv4 across all accounts and regions.
	Showing average spent starting January 2024
	More info https://aws.amazon.com/blogs/aws/new-aws-public-ipv4-address-charge-public-ip-insights/


	<configuration>
	<group name="Instrumentation">
	<key name="AllowSending" type="bool" value="0"/>
	<key name="ShowInstrumentationScreen" type="bool" value="0"/>
	</group>
	<group name="Update">
	<key name="Version" type="string" value="4.3.4"/>
	</group>
	<group name="Activation">

	! Scan125 Scanner Data File - #scan125# - #full#
	! Scan125 Control Program © Nick Bailey 2013-2020 V3.3.0.0 http://www.nick-bailey.co.uk
	! Comments added To this file will be removed!
	! PLEASE Do Not EDIT Or MESS With THIS FILE
	MDL=UBC125XLT
	VER=!Version 1.01.00
	VOL=12
	SQL=3
	CNT=8
	BLT=AF