Mitch Garnaat garnaat

Principal engineer at AWS. Creator of boto, botocore, and AWSCLI.

garnaat / gist:5154381

Last active December 14, 2015 21:49

Create an IAM Role. See comment below for links to JSON policy files.

	import boto

	# Create a connection to the Identity & Access Management Service
	iam = boto.connect_iam()

	# Create a new user
	user_data = iam.create_user('pycon')

	# Create a new group
	group_data = iam.create_group('pythonistas')

garnaat / gist:5154407

Last active December 14, 2015 21:58

JSON policy for read-only access to an S3 bucket

garnaat / gist:5154413

Last active December 14, 2015 21:58

JSON policy file for launching EC2 instance from console.

garnaat / gist:6675449

Last active December 23, 2015 18:19

Call EC2 DescribeInstances using botocore

	import botocore.session

	session = botocore.session.get_session()
	ec2 = session.get_service('ec2')
	operation = ec2.get_operation('DescribeInstances')
	endpoint = ec2.get_endpoint('us-west-2')
	# Calling with no parameters will return all instances
	# associated with this account in this region.
	http_response, data = operation.call(endpoint)
	# You could also limit the results to only certain

garnaat / gist:7076677

Created October 20, 2013 23:37

Simple example of getting a snapshot and accessing its attributes.

	import boto.ec2

	ec2con = ec2.connect_to_region("us-west-1")
	snap = ec2con.get_all_snapshots(['snap-3b82a650'])[0]
	print(snap.id)
	print(snap.volume_id)
	print(snap.status)
	print(snap.start_time)
	print(snap.owner_id)
	print(snap.volume_size)

garnaat / gist:7921001

Created December 12, 2013 00:11

Find all instances with a tag name of "component" and then return just the Tags themselves.

aws ec2 describe-instances --filters Name=tag-key,Values=component --query 'Reservations[].Instances[].Tags'

garnaat / keybase.md

Last active August 29, 2015 13:57

keybase identity proof

I hereby claim:

I am garnaat on github.
I am garnaat (https://keybase.io/garnaat) on keybase.
I have a public key whose fingerprint is A6C2 33BA 6313 1605 6E70 1EE4 F2E1 4005 8CC6 80A4

To claim this, I am signing this object:

garnaat / gist:10682964

Created April 14, 2014 21:11

Launch an AWS Web Console using credential from an IAM Role

	#!/usr/bin/env python
	"""
	Launch an AWS Web Console.

	Usage:
	awsconsole launch --role=<role_arn> [--profile=<profile_name>]

	Commands:
	launch - Launch the AWS Console in your default web browser with
	the specified credentials. The console will be authenticated

garnaat / sdcustom

Created April 24, 2014 20:46

A click-based script to upload a custom metric to StackDriver

	#!/usr/bin/env python
	import requests
	import time
	import json
	import click


	@click.command()
	@click.option('--name', prompt='metric name',
	help='the name of the custom metric', required=True)

garnaat / gist:4123f1aefe7d65df9b48

Created October 15, 2014 19:08

A skew script to audit all security groups for non-whitelisted IP addresses

	import skew

	# Add whitelisted CIDR blocks here, e.g. 192.168.1.1/32.
	# Any addresses not in this list will be flagged.
	whitelist = []

	for secgrp in skew.scan('arn:aws:ec2:::security-group/*'):
	for ipperms in secgrp.data['IpPermissions']:
	for ip in ipperms['IpRanges']:
	if ip['CidrIp'] not in whitelist: