Skip to main content

Cloud Auxiliary is a python wrapper and orchestration module for interacting with cloud providers

Project description

# cloudaux

[![Join the chat at](](


[![Build Status](](

[![Coverage Status](](

Cloud Auxiliary is a python wrapper and orchestration module for interacting with cloud providers.

## Documenation

- [CloudAux]( "CloudAux Readme") [THIS FILE]
- [AWS](cloudaux/aws/ "Amazon Web Services Docs")
- [GCP](cloudaux/gcp/ "Google Cloud Platform Docs")

## Features

- intelligent connection caching.
- handles pagination for certain client methods.
- rate limit handling, with exponential backoff.
- multi-account sts:assumerole abstraction.
- orchestrates all the calls required to fully describe an item.

- choosing the best client based on service
- client caching
- general caching and stats decorators available
- basic support for non-specified discovery-API services

## Orchestration Supported Technologies

- IAM Role
- IAM User
- S3

- IAM Service Accounts
- Network/Subnetworks
- Storage Buckets

## Install

pip install cloudaux

## Examples

### AWS Example

# Using wrapper methods:
from import get_queue, get_messages
conn_details = {
'account_number': '111111111111',
'assume_role': 'MyRole',
'session_name': 'MySession',
'region': 'us-east-1'
queue = get_queue(queue_name='MyQueue', **conn_details)
messages = get_messages(queue=queue)

# Using the CloudAux class
from cloudaux import CloudAux
CloudAux.go('kms.client.list_aliases', **conn_details)

ca = CloudAux(**conn_details)'kms.client.list_aliases')

# directly asking for a boto3 connection:
from import boto3_cached_conn
conn = boto3_cached_conn('ec2', **conn_details)

# Over your entire environment:
from cloudaux.decorators import iter_account_region

accounts = ['000000000000', '111111111111']

conn_details = {
'assume_role': 'MyRole',
'session_name': 'MySession',
'conn_type': 'boto3'

@iter_account_region('kms', accounts=accounts, regions=['us-east-1'], **conn_details)
def list_keys(conn=None):
return conn.list_keys()['Keys']

### GCP Example

# directly asking for a client:
from import get_client
client = get_client('gce', **conn_details)

# Over your entire environment:
from cloudaux.gcp.decorators import iter_project

projects = ['my-project-one', 'my-project-two']

# To specify per-project key_files, you can do thie following:
# projects = [
# {'project': 'my-project-one', key_file='/path/to/project-one.json'},
# {'project': 'my-project-two', key_file='/path/to/project-two.json'}
# ]
# To specify a single key_file for all projects, use the key_file argument
# to the decorator
# @iter_project(projects=projects, key_file='/path/to/key.json')
# To use default credentials, omit the key_file argument
# @iter_project(projects=projects)

@iter_project(projects=projects, key_file='/path/to/key.json')
def test_iter(**kwargs):
accounts = list_serviceaccounts(**kwargs)
ret = []
for account in accounts:
return ret

## Orchestration Example

### AWS IAM Role

from import get_role

# account_number may be extracted from the ARN of the role passed to get_role
# if not included in conn.
conn = dict(
assume_role='SecurityMonkey', # or whichever role you wish to assume into

role = get_role(
dict(arn='arn:aws:iam::000000000000:role/myRole', role_name='myRole'),
output='camelized', # optional: {camelized underscored}

# cloudaux makes a number of calls to obtain a full description of the role
print(json.dumps(role, indent=4, sort_keys=True))

"Arn": ...,
"AssumeRolePolicyDocument": ...,
"CreateDate": ..., # str
"InlinePolicies": ...,
"InstanceProfiles": ...,
"ManagedPolicies": ...,
"Path": ...,
"RoleId": ...,
"RoleName": ...,
"_version": 1 # Orchestration results return a _Version

### GCP IAM Service Account

from cloudaux.orchestration.gcp.iam.serviceaccount import get_serviceaccount_complete
sa_name = 'projects/my-project-one/serviceAccounts/'
sa = get_serviceaccount_complete(sa_name, **conn_details)
print(json.dumps(sa, indent=4, sort_keys=True))

"DisplayName": "service-account",
"Email": "",
"Etag": "BwUzTDvWgHw=",
"Keys": [
"KeyAlgorithm": "KEY_ALG_RSA_2048",
"Name": "projects/my-project-one/serviceAccounts/",
"ValidAfterTime": "2016-06-30T18:26:45Z",
"ValidBeforeTime": "2026-06-28T18:26:45Z"
"Name": "projects/my-project-one/serviceAccounts/",
"Oauth2ClientId": "115386704809902483492",
"Policy": [
"Members": [
"Role": "roles/iam.serviceAccountActor"
"ProjectId": "my-project-one",
"UniqueId": "115386704809902483492"

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for cloudaux, version 1.1.6
Filename, size File type Python version Upload date Hashes
Filename, size cloudaux-1.1.6.tar.gz (31.7 kB) File type Source Python version None Upload date Hashes View hashes

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN SignalFx SignalFx Supporter DigiCert DigiCert EV certificate StatusPage StatusPage Status page