joelthompson

#!/bin/bash

MFA_ARN=$(aws sts get-caller-identity --query "Arn" --output text | sed -e "s#:user/#:mfa/#")
read -p "Enter MFA Code: " MFA_CODE

read -a CREDS <<< $(aws sts get-session-token --serial-number $MFA_ARN --token-code $MFA_CODE --output text)
export AWS_ACCESS_KEY_ID="${CREDS[1]}"
export AWS_SECRET_ACCESS_KEY="${CREDS[3]}"
export AWS_SECURITY_TOKEN="${CREDS[4]}"
export AWS_SESSION_TOKEN="${CREDS[4]}"

joelthompson

#!/usr/bin/env python

from botocore.credentials import CredentialProvider, RefreshableCredentials
import requests
from datetime import datetime, timedelta

class VaultCredentialProvider(CredentialProvider):
    METHOD = 'vault'
    CANONICAL_NAME = 'VaultRole'

joelthompson

2017/07/25 21:57:38 [INFO] Terraform version: 0.9.11  efca455c35d0d218a9bfee835a8ec3ef8d4d1c8c
2017/07/25 21:57:38 [INFO] Go runtime version: go1.8
2017/07/25 21:57:38 [INFO] CLI args: []string{"/mnt/home-root/home/joelthompson/Downloads/terraform", "plan"}
2017/07/25 21:57:38 [DEBUG] Detected home directory from env var: /home/joelthompson
2017/07/25 21:57:38 [DEBUG] Detected home directory from env var: /home/joelthompson
2017/07/25 21:57:38 [DEBUG] Attempting to open CLI config file: /home/joelthompson/.terraformrc
2017/07/25 21:57:38 [DEBUG] File doesn't exist, but doesn't need to. Ignoring.
2017/07/25 21:57:38 [INFO] CLI command args: []string{"plan"}
2017/07/25 21:57:38 [DEBUG] Detected home directory from env var: /home/joelthompson
2017/07/25 21:57:38 [DEBUG] command: loading backend config file: /mnt/home-root/home/joelthompson/temp/temp

joelthompson

vault_aws_auth

These are python 2 and 3 snippets showing how to generate headers to authenticate with HashiCorp's Vault using the AWS authentication method. There's also a Ruby implementation which uses version 3 of the AWS SDK for Ruby.

The python scripts look for credentials in the default boto3 locations; if you need to supply custom credentials (such as from an AssumeRole call), you would use the botocore.session.set_credentials method before calling create_client.

joelthompson

#!/usr/bin/env python
#
# Note: First, pull the Google Auth database locally, which requires root access
# Then, run this, which assumes you have a databases file in the current directory
# It also assumes you have the qrencode package installed locally

import subprocess
import urllib
import sqlite3

joelthompson

diff --git a/cloud/amazon/ec2_vpc_dhcp_options.py b/cloud/amazon/ec2_vpc_dhcp_options.py
index 7068b05..00f56ff 100644
--- a/cloud/amazon/ec2_vpc_dhcp_options.py
+++ b/cloud/amazon/ec2_vpc_dhcp_options.py
@@ -233,7 +233,7 @@ def fetch_dhcp_options_for_vpc(vpc_conn, vpc_id):
     connection variable.
     """
     vpcs = vpc_conn.get_all_vpcs(vpc_ids=[vpc_id])
-    if len(vpcs) != 1:
+    if len(vpcs) != 1 or vpcs[0].dhcp_options_id == "default":

joelthompson

public class Hello
{
  public static void main(String[] args)
  {
    System.out.println("Hello, World!");
    java.nio.file.Path path = java.nio.file.Paths.get("/");
    System.out.println("Path is " + path);
  }
}

joelthompson

---

- hosts: localhost
  connection: local
  gather_facts: false
  tasks:
    - name: Set AWS access key
      set_fact:
        aws_access_key: "<redacted>"
    - name: Set AWS secret key