| #!/usr/bin/env python3 | |
| import os | |
| import sys | |
| from time import strftime | |
| import gzip | |
| import io | |
| import boto3.session |
From time to time, you might want a quick envrionment for doing some dev or troubleshooting within an AWS environment. Since CloudShell now support VPC connections, this is especially useful. Pasting the following commands into CloudShell give you a way to connect from VS Code, edit code, and more.
cd
mkdir -p ~/.local/bin| #!/usr/bin/env python3 | |
| from functools import cache | |
| import os | |
| import sys | |
| from typing import Literal | |
| import json | |
| import click | |
| import boto3 | |
| from rich.console import Console |
| # Working example of a Glue Catalog Data Table for CloudTrail logs that can be used with Athena | |
| CloudTrailGlueTable: | |
| Type: AWS::Glue::Table | |
| Properties: | |
| CatalogId: !Ref AWS::AccountId | |
| DatabaseName: !Ref CloudTrailDatabase | |
| TableInput: | |
| Name: !Sub "${resourcePrefix}_org_cloudtrail" | |
| PartitionKeys: | |
| - Name: account |
| _ _ _ _ _ _ _ | |
| | _| _||_||_ |_ ||_||_| | |
| ||_ _| | _||_| ||_| _| | |
| _ _ _ _ _ _ _ | |
| | | _| _||_| ||_ ||_||_| | |
| |_||_ _| | ||_| ||_| _| |
| bucketAccessPoint: | |
| Type: AWS::S3::AccessPoint | |
| Properties: | |
| Bucket: !Ref bucket | |
| Name: ${self:service}-${self:provider.stage}-ap | |
| lambdaAccessPoint: | |
| Type: AWS::S3ObjectLambda::AccessPoint | |
| Properties: | |
| Name: ${self:service}-${self:provider.stage}-lambda-ap |
| - Effect: Allow | |
| Action: | |
| - s3-object-lambda:WriteGetObjectResponse | |
| Resource: '*' | |
| - Effect: Allow | |
| Action: | |
| - s3:GetObject | |
| - s3:ListBucket | |
| Resource: | |
| - !GetAtt bucket.Arn |
| obj_get_ctx = event['getObjectContext'] | |
| request_route = obj_get_ctx['outputRoute'] | |
| request_token = obj_get_ctx['outputToken'] | |
| obj_url = obj_get_ctx['inputS3Url'] | |
| requested_url = event['userRequest']['url'] | |
| path = Path(urlparse(requested_url).path).relative_to('/') | |
| # First attempt to read directly using the signed URL provided | |
| response = requests.get(obj_url) | |
| resp = {'StatusCode': response.status_code} |
| NotificationFunction: | |
| Type: AWS::Serverless::Function | |
| Properties: | |
| CodeUri: handlers/ | |
| Handler: notification.handleS3Notification | |
| Runtime: nodejs12.x | |
| Policies: | |
| - Version: '2012-10-17' | |
| Statement: | |
| - Effect: Allow |
| apiCustomDomain: | |
| Type: AWS::ApiGateway::DomainName | |
| Properties: | |
| CertificateArn: ${self:custom.apiConfig.apiCert} | |
| DomainName: api.sliclists.com | |
| apiCustomDomainPathMappings: | |
| Type: AWS::ApiGateway::BasePathMapping | |
| Properties: | |
| BasePath: '' |