idem-aws-auto 0.1.0

Idem-Aws-Auto

aws_auto Cloud Provider for Idem

DEVELOPMENT

Clone the idem-aws-auto repository and install with pip.

git clone git@gitlab.com:my-user/idem-aws-auto.git
pip install -e idem-aws-auto

ACCT

After installation aws_auto Idem Provider execution and state modules will be accessible to the pop hub. In order to use them we need to set up our credentials.

Create a new file called credentials.yaml and populate it with profiles. The default profile will be used automatically by idem unless you specify one with –acct-profile=profile_name on the cli.

acct backends provide alternate methods for storing profiles.

The aws_auto provider uses the aws_auto acct plugin for authentication. A profile needs to specify the authentication parameters for aws_auto.

credentials.yaml

aws_auto:
  default:
    username: my_user
    password: my_good_password
    endpoint_url: https://console.aws_auto.com/api

Now encrypt the credentials file and add the encryption key and encrypted file path to the ENVIRONMENT.

The acct command should be available as it is a requisite of idem and idem_aws_auto. Encrypt the the credential file.

acct encrypt credentials.yaml

output:

-A9ZkiCSOjWYG_lbGmmkVh4jKLFDyOFH4e4S1HNtNwI=

Add these to your environment:

export ACCT_KEY="-A9ZkiCSOjWYG_lbGmmkVh4jKLFDyOFH4e4S1HNtNwI="
export ACCT_FILE=$PWD/credentials.yaml.fernet

USAGE

A profile can be specified for use with a specific state. If no profile is specified, the profile called “default”, if one exists, will be used:

ensure_user_exists:
  aws_auto.user.present:
    - acct_profile: my-staging-env
    - name: a_user_name
    - kwarg1: val1

It can also be specified from the command line when executing states.

idem state --acct-profile my-staging-env my_state.sls

It can also be specified from the command line when calling an exec module directly.

idem exec --acct-profile my-staging-env aws_auto.user.list