vvalorous

Finding Packer-generated AMIs automatically after builds

The basic technique is to have Packer add a tag with a unique value during the build, and use AWS' built-in filtering capabilities to find that specific AMI after the build finishes.

• template.json - Shows the settings that need to be added to your template
• build.sh - Shows how to use the template to do a build and retrieve the AMI information

vvalorous

AWS recently released Versioning and Aliases for Lambda Functions. I'm going to outline how I've taken advantage of this to provide environmentally-aware Lambda function configurations in Python.

AWS Lambda doesn't currently support environment variables, so 12-factor-style configuration isn't an option. I'll be using seprate config files for each environment.

Pregame

We're making two assumptions for this article:

• I've already created an AWS Lambda function with the following aliases:
  • Dev
  • Test
  • Staging
  • Production

vvalorous

package main

import (
	"fmt"
	"sort"

	"github.com/aws/aws-sdk-go/aws"
	"github.com/aws/aws-sdk-go/aws/session"
	"github.com/aws/aws-sdk-go/service/ec2"
	"github.com/aws/aws-sdk-go/service/ec2/ec2iface"

vvalorous

{
      "Version": "2012-10-17",
      "Statement": [
            {
                  "Sid": "AWSCloudTrailAclCheck20131101",
                  "Effect": "Allow",
                  "Principal": {
                        "AWS": [
                              "arn:aws:iam::903692715234:root",
                              "arn:aws:iam::859597730677:root",

vvalorous

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Description": "The AWS CloudFormation template for Kinesis Stream",
    "Parameters": {
	    "Environment": {
	        "Description": "dev, stage, or prod - this is for bucket tags",
	        "Type": "String",
	        "MinLength": "3",
	        "MaxLength": "5"
	    }

vvalorous

AWSTemplateFormatVersion: '2010-09-09'
Description: Cognito Stack
Parameters:
  AuthName:
    Type: String
    Description: Unique Auth Name for Cognito Resources

Resources:

  # Creates a role that allows Cognito to send SNS messages

vvalorous

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Parameters": {
    "SharedSecret": {
      "Default": "SOOPASEKRET",
      "Description": "Shared Secret, aka External ID",
      "Type": "String",
      "NoEcho": "true"
    }
  },

vvalorous

import hmac
import os
import hashlib
import base64
import unittest
__author__ = 'drem'


class SecurityUtil(object):

vvalorous

import boto3
import argparse

from pprint import pprint as pp
from dateutil.tz import tzutc
from datetime import datetime, timedelta
from collections import defaultdict as dd

class IL(object):
    """

vvalorous

#!/usr/bin/env python3

import boto3
import json

central_logging = '<insert your central logging account id here>'

# Variables for the grafana monitoring server
role_name = 'monitoring_prodcloudwatch_access_role'
policy_arn = 'arn:aws:iam::<insert your central logging account id here>:policy/monitor-assumerole'