AWS scripts

aws_trusted_advisors.rb

require 'bundler/inline'

gemfile do
  source 'https://rubygems.org'
  gem 'aws-sdk-support', '~> 1'
end

sts = Aws::STS::Client.new
pp sts.get_caller_identity

REGION  = 'us-east-1'
support = Aws::Support::Client.new(region: REGION)

lang = ARGV[0] || 'en' # ja

checks  = support.describe_trusted_advisor_checks(language: lang).checks
results = checks.lazy.map do |check|
  result = support.describe_trusted_advisor_check_result(check_id: check.id, language: lang).result
  [check.name, result.status]
end

pp results.to_h

unused_sg.rb

require 'bundler/inline'
require 'set'

gemfile do
  source 'https://rubygems.org'
  gem 'aws-sdk-ec2', '~> 1'
end

ec2 = Aws::EC2::Resource.new

all = ec2.security_groups.map(&:id)
used = ec2.network_interfaces.flat_map(&:groups).map(&:group_id)
unused = all.to_set - used.to_set

groups = ec2.security_groups group_ids: unused
groups.each do |group|
  puts [group.id, group.vpc_id, group.group_name].join("\t")
end

ref

• https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/Resource.html#security_groups-instance_method
• https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/Resource.html#network_interfaces-instance_method
• https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/SecurityGroup.html
• https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/NetworkInterface.html
• https://docs.ruby-lang.org/ja/latest/method/Enumerable/i/to_set.html

rewrite: https://gist.github.com/maemichi-monosense/60627feed80a1d13bc08c35a6e6759aa