JohnTheodore

{
  "metadata": {
    "device": {
      "emulatorDevice": {
        "serialNumber": "emulator-5554",
        "isOnline": true,
        "release": "15",
        "apiLevel": {
          "majorVersion": 35,
          "minorVersion": 0

JohnTheodore

{
  'state': 'California',
  'extensions': {
    'sub_alt_names': {
      'names': <SubjectAlternativeName(<GeneralNames([])>)>
    },
    'basic_constraints': <BasicConstraints(ca=True, path_length=None)>, 'custom': []
  },
  'validity_end': <Arrow [2025-05-21T21:36:54.696211+00:00]>,
  'owner': '[email protected]',

JohnTheodore

# Certificate Defaults
LEMUR_DEFAULT_COUNTRY = 'US'
LEMUR_DEFAULT_STATE = 'California'
LEMUR_DEFAULT_LOCATION = 'Mountain View'
LEMUR_DEFAULT_ORGANIZATION = 'Example Corp'
LEMUR_DEFAULT_ORGANIZATIONAL_UNIT = 'My Org'
# set the default plugin
LEMUR_DEFAULT_ISSUER_PLUGIN = 'verisign-issuer'
LEMUR_DEFAULT_AUTHORITY = 'verisign'

JohnTheodore

May 21 18:14:05 localhost systemd[1]: Started lemur gunicorn daemon.
May 21 18:14:19 localhost lemur[379]: /usr/local/lib/python3.5/dist-packages/psycopg2/__init__.py:144: UserWarning: The psycopg2 wheel package will be renamed from release 2.8; in order to keep installing from binary please use "pip insta
May 21 18:14:19 localhost lemur[379]:   """)
May 21 18:14:19 localhost lemur[379]: Plugin 'DigiCertCISSourcePlugin' may not work correctly. Required variable 'DIGICERT_CIS_API_KEY' is not set in Lemur's conf.
May 21 18:14:19 localhost lemur[379]: Plugin 'ACMEIssuerPlugin' may not work correctly. Required variable 'ACME_DIRECTORY_URL' is not set in Lemur's conf.
May 21 18:14:19 localhost lemur[379]: Plugin 'DigiCertIssuerPlugin' may not work correctly. Required variable 'DIGICERT_API_KEY' is not set in Lemur's conf.
May 21 18:14:19 localhost lemur[379]: Plugin 'DigiCertCISIssuerPlugin' may not work correctly. Required variable 'DIGICERT_CIS_API_KEY' is not set in Lemur's conf.
May 21 18:14:19 localhost lemur

JohnTheodore

JohnTheodore

policies:

- name: ec2-unmark-event
  resource: ec2
  mode:
    type: periodic
    role: arn:aws:iam::{account_id}:role/custodian-auto-tag-lambda
    schedule: rate(1 day)
  filters:
    - type: marked-for-op

JohnTheodore

policies:
  
- name: ec2-email-about-scheduled-maintenance
  resource: ec2
  mode:
    type: periodic
    role: arn:aws:iam::{account_id}:role/custodian-lambda-role
    schedule: rate(1 day)
  filters:
    - type: health-event

JohnTheodore

## Ensure no root account access key exists

- name: account-root-access-keys-check
  resource: account
  comments: |
    Verifies root access keys don't exist anymore
  filters:
      - type: iam-summary
        key: AccountAccessKeysPresent
        value: true

JohnTheodore

policies:

- name: ec2-tag-noncompliance-mark-shutdown
  resource: ec2
  comments: |
    Schedule a resource that does not meet tag compliance policies
    to be stopped in 5 days.
  filters:
    - State.Name: running
    - "tag:aws:autoscaling:groupName": absent

JohnTheodore

#!/usr/bin/env python

import jinja2
import os

foo = jinja2.Environment(trim_blocks=True, autoescape=False)
foo.loader = jinja2.FileSystemLoader(os.path.abspath('/tmp'))

bar = foo.get_template('/custodian/email/jinja_template.j2')