Skip to main content

AWS Configuration Mangement

Project description


Library for sanely managing AWS security settings

Why does this exist?

Managing your AWS security settings through the AWS console is problematic for several reasons. Aside from using the console, your options are to use a library like boto. This is fine, but really more work than I care to do for my environments.

Roadhouse is an attempt to apply configuration management to AWS’s settings. Think of it as Puppet/Chef/Salt for AWS.

Within roadhouse, a config can be applied to a VPC. This allows the same configuration to be used across multiple VPCs. It’s useful in cases where you want to run multiple VPCs with the same configuration. For instance, this is useful when running across multiple datacenters for fault tolerance.

Config File Syntax

The config file is YAML based. Groups are the top level object. Within a group are options and rules. Rules are specified using a syntax similar to tcpdump (at a very, very trivial level). For ICMP protocol we use ICMP Type Numbers for port. More information is available at:

  • <protocol:optional, tcp by default> <port> <group_or_ip_mask_optional>

It should be easier to understand a valid configuration based on example:

description: cassandra and redis prune: true # remove rules not listed here
  • tcp port 22 # mysterious office IP
  • tcp port 9160, 6379 test_web_group # refer to a group by name
  • port 55 # /32 by default
  • tcp port 22-50, 55-60
  • icmp port 0 # ICMP Type 0; Echo Reply
description: web servers prune: false # false by default
  • tcp port 80
  • icmp port 8 # ICMP Type 8; Timestamp


from import SecurityGroupsConfig v = vpc.connect_to_region(‘us-west-1’) e = ec2.connect_to_region(‘us-west-1’)

# assuming you only have 1 vpc already created # otherwise you’ll need to pick the right VPC you want # to apply your changes to vpc = v.get_all_vpcs()[0]

config = SecurityGroupsConfig.load(“roadhouse.yaml”) config.configure(ec2_conn) config.apply(vpc)


In a virtualenv, pip install -r requirements

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for roadhouse, version 0.6
Filename, size File type Python version Upload date Hashes
Filename, size roadhouse-0.6.tar.gz (5.6 kB) File type Source Python version None Upload date Hashes View

Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring DigiCert DigiCert EV certificate Facebook / Instagram Facebook / Instagram PSF Sponsor Fastly Fastly CDN Google Google Object Storage and Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Salesforce Salesforce PSF Sponsor Sentry Sentry Error logging StatusPage StatusPage Status page