http://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html https://www.youtube.com/watch?v=_wiGpBQGCjU
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
set -e | |
AWS_FUNCTIONS=$(aws lambda list-functions --query "Functions[].FunctionArn") | |
for func in $AWS_FUNCTIONS | |
do | |
CMD="aws lambda delete-function --function-name $func" | |
echo $CMD | |
$CMD |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Automated AMI and Snapshot Deletion | |
# | |
# @author Robert Kozora <[email protected]> | |
# | |
# This script will search for all instances having a tag with "Backup" or "backup" | |
# on it. As soon as we have the instances list, we loop through each instance | |
# and reference the AMIs of that instance. We check that the latest daily backup | |
# succeeded then we store every image that's reached its DeleteOn tag's date for | |
# deletion. We then loop through the AMIs, deregister them and remove all the | |
# snapshots associated with that AMI. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import boto3 | |
import json | |
client = boto3.client('iam') | |
paginator = client.get_paginator('list_policies') | |
response_iterator = paginator.paginate(Scope='AWS') | |
managed_policies = [] | |
for response in response_iterator: | |
for policy in response['Policies']: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import boto3 | |
import json | |
client = boto3.client('iam') | |
paginator = client.get_paginator('list_policies') | |
response_iterator = paginator.paginate(Scope='AWS') | |
managed_policies = [] | |
for response in response_iterator: | |
for policy in response['Policies']: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
"Version": "2012-10-17", | |
"Statement": [ | |
{ | |
"Action": [ | |
"autoscaling:Describe*", | |
"cloudformation:DescribeStacks", | |
"cloudformation:DescribeStackEvents", | |
"cloudformation:DescribeStackResources", | |
"cloudformation:GetTemplate", |