Skip to main content

AWS roles toolkit

Project description

Trustyroles

An AWS Roles Toolkit

Trusty Roles is intended to alleviate some of the painpoints I have dealt with in AWS automation leveraging boto3. The first version of this focuses on easily editing the assume role policy document of a role.

Install

pip install trustyroles

Assume Role Policy Update Module

Command Line Tool

arpd_update

-h, --help Show this help message and exit

-a, --arn ARN[] Add new ARNs to trust policy. Accepts multiple ARNS.

-u, --update_role UPDATE_ROLE Role for updating trust policy. Takes an role friendly name as string.

-m, --method [get, update, remove] Takes choice of method to update, get, or remove.

-e, --add_external_id ADD_EXTERNAL_ID Takes an external id as a string.

-r, --remove_external_id Method for removing externalId condition. Takes no arguments

-j, --json Add to print json in get method.

Example usage:

Get Policy

ardp_update -m get -u 'test-role' --json

Returns:

{

     "Action": "sts:AssumeRole",

     "Condition": {},

     "Effect": "Allow",

     "Principal": {

          "AWS": ["arn:aws:iam:::user/test-role"]

      }

}

Using Python Modules

arpd_update

Get Policy

from trustyroles.arpd_update import arpd_update
arpd_update.get_arpd('test-role', json_flag=True)
Returns:

{

   "Action": "sts:AssumeRole",

     "Condition": {},

     "Effect": "Allow",

     "Principal": {

          "AWS": ["arn:aws:iam:::user/test-role"]

      }

}

Update Policy ARNS

The update_arn method takes a list of ARNS(arn_list) and a role_name to add to trust policy of suppplied role.

from trustyroles.arpd_update import arpd_update
arpd_update.update_arn(["arn:aws:iam:::user/test-role2"], role_name='test-role')

Remove Policy ARNS

The remove_arn method takes a list of ARNS(arn_list) and a role_name to add to trust policy of suppplied role.

from trustyroles.arpd_update import arpd_update
arpd_update.remove_arn(["arn:aws:iam:::user/test-role2"], role_name='test-role')

Add ExternalId

The add_external_id method takes an external_id and role_name as strings to allow the addition of an externalId condition.

from trustyroles.arpd_update import arpd_update
arpd_update.add_external_id('<external_id>', role_name='test-role')

Remove ExternalId

The remove_external_id method takes a role_name as a string to allow the removal of an externalId condition.

from trustyroles.arpd_update import arpd_update
arpd_update.remove_external_id(role_name='test-role')

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for trustyroles, version 0.2.5
Filename, size File type Python version Upload date Hashes
Filename, size trustyroles-0.2.5.tar.gz (3.5 kB) File type Source Python version None Upload date Hashes View

Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring Facebook / Instagram Facebook / Instagram PSF Sponsor Fastly Fastly CDN Google Google Object Storage and Download Analytics Huawei Huawei PSF Sponsor Microsoft Microsoft PSF Sponsor NVIDIA NVIDIA PSF Sponsor Pingdom Pingdom Monitoring Salesforce Salesforce PSF Sponsor Sentry Sentry Error logging StatusPage StatusPage Status page