initial commit

modules/util/resource-list/README.md

@@ -0,0 +1,2 @@
+# resource-list module
+Module for listing resources, where native terraform data source is not available.

modules/util/resource-list/list-alb-targetgroups.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+eval "$(jq -r '@sh "export lb=\(.input) asrolearn=\(.asrolearn)"')"
+eval "$(aws sts assume-role --role-arn $asrolearn --role-session-name awscli | jq -cr '"export AWS_ACCESS_KEY_ID=" + .Credentials.AccessKeyId, "export AWS_SECRET_ACCESS_KEY=" + .Credentials.SecretAccessKey, "export AWS_SESSION_TOKEN=" + .Credentials.SessionToken')"
+
+RESULTS=$(aws elbv2 describe-target-groups --load-balancer-arn $lb --query TargetGroups[*].TargetGroupArn --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'

modules/util/resource-list/list-alb.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+RESULTS=$(aws elbv2 describe-load-balancers --query 'LoadBalancers[?Type==`application`].LoadBalancerArn' --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'
+

modules/util/resource-list/list-asg.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# exclude ASG instances
+RESULTS=$(aws autoscaling describe-auto-scaling-groups --query 'AutoScalingGroups[*].AutoScalingGroupName' --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'
+
+

modules/util/resource-list/list-ec2.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+# exclude ASG instances
+RESULTS=$(aws ec2 describe-instances --query 'Reservations[].Instances[?!not_null(Tags[?Key == `aws:autoscaling:groupName`].Value)].InstanceId' --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'

modules/util/resource-list/list-emr.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+eval "$(jq -r '@sh "asrolearn=\(.asrolearn)"')"
+eval "$(aws sts assume-role --role-arn $asrolearn --role-session-name awscli | jq -cr '"export AWS_ACCESS_KEY_ID=" + .Credentials.AccessKeyId, "export AWS_SECRET_ACCESS_KEY=" + .Credentials.SecretAccessKey, "export AWS_SESSION_TOKEN=" + .Credentials.SessionToken')"
+
+RESULTS=$(aws emr list-clusters --active --query Clusters[*].ClusterArn --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'

modules/util/resource-list/list-kafka.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+eval "$(jq -r '@sh "asrolearn=\(.asrolearn)"')"
+eval "$(aws sts assume-role --role-arn $asrolearn --role-session-name awscli | jq -cr '"export AWS_ACCESS_KEY_ID=" + .Credentials.AccessKeyId, "export AWS_SECRET_ACCESS_KEY=" + .Credentials.SecretAccessKey, "export AWS_SESSION_TOKEN=" + .Credentials.SessionToken')"
+
+RESULTS=$(aws kafka list-clusters --query ClusterInfoList[*].ClusterName --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'
+
+

modules/util/resource-list/list-ngw.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+RESULTS=$(aws ec2 describe-nat-gateways --query 'NatGateways[].NatGatewayId' --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'

modules/util/resource-list/list-nlb-targetgroups.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+eval "$(jq -r '@sh "export lb=\(.input) asrolearn=\(.asrolearn)"')"
+eval "$(aws sts assume-role --role-arn $asrolearn --role-session-name awscli | jq -cr '"export AWS_ACCESS_KEY_ID=" + .Credentials.AccessKeyId, "export AWS_SECRET_ACCESS_KEY=" + .Credentials.SecretAccessKey, "export AWS_SESSION_TOKEN=" + .Credentials.SessionToken')"
+
+RESULTS=$(aws elbv2 describe-target-groups --load-balancer-arn $lb --query TargetGroups[*].TargetGroupArn --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'
+

modules/util/resource-list/list-nlb.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+RESULTS=$(aws elbv2 describe-load-balancers --query 'LoadBalancers[?Type==`network`].LoadBalancerArn' --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'

modules/util/resource-list/list-opensearch.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+eval "$(jq -r '@sh "asrolearn=\(.asrolearn)"')"
+eval "$(aws sts assume-role --role-arn $asrolearn --role-session-name awscli | jq -cr '"export AWS_ACCESS_KEY_ID=" + .Credentials.AccessKeyId, "export AWS_SECRET_ACCESS_KEY=" + .Credentials.SecretAccessKey, "export AWS_SESSION_TOKEN=" + .Credentials.SessionToken')"
+
+RESULTS=$(aws opensearch list-domain-names --query DomainNames[*].DomainName --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'
+
+

modules/util/resource-list/list-rds.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+RESULTS=$(aws rds describe-db-instances --query 'DBInstances[*].DBInstanceIdentifier' --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'

modules/util/resource-list/list-redis.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+eval "$(jq -r '@sh "asrolearn=\(.asrolearn)"')"
+eval "$(aws sts assume-role --role-arn $asrolearn --role-session-name awscli | jq -cr '"export AWS_ACCESS_KEY_ID=" + .Credentials.AccessKeyId, "export AWS_SECRET_ACCESS_KEY=" + .Credentials.SecretAccessKey, "export AWS_SESSION_TOKEN=" + .Credentials.SessionToken')"
+
+RESULTS=$( aws elasticache describe-cache-clusters --query 'CacheClusters[*].CacheClusterId' --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'

modules/util/resource-list/list-tgw.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+eval "$(jq -r '@sh "asrolearn=\(.asrolearn)"')"
+eval "$(aws sts assume-role --role-arn $asrolearn --role-session-name awscli | jq -cr '"export AWS_ACCESS_KEY_ID=" + .Credentials.AccessKeyId, "export AWS_SECRET_ACCESS_KEY=" + .Credentials.SecretAccessKey, "export AWS_SESSION_TOKEN=" + .Credentials.SessionToken')"
+
+RESULTS=$(aws ec2 describe-transit-gateways --query 'TransitGateways[].TransitGatewayId' --output text --no-cli-pager | sed 's/\t/\n/g' | sort | xargs)
+jq -n --arg result "$RESULTS" '{"result":$result}'

modules/util/resource-list/main.tf

@@ -0,0 +1,13 @@
+data "external" "instances" {
+  program = ["bash", "${path.module}/list-${var.resource-type}.sh"]
+  query = {
+    input = var.query-input
+    asrolearn = var.asrolearn
+  }
+}
+
+output result-set {
+  # value = toset(split(" ", data.external.instances.result.result))
+  # prevents terraform from returning [""]
+  value = length(data.external.instances.result.result) > 0 ? toset(split(" ", data.external.instances.result.result)) : []
+}

modules/util/resource-list/variables.tf

@@ -0,0 +1,17 @@
+variable resource-type {
+  type = string
+}
+
+variable query-input {
+  type = string
+  default = null
+}
+
+variable asrolearn {
+  type = string
+
+  validation {
+    condition     = length(var.asrolearn) > 1
+    error_message = "asrolearn is too short"
+  }
+}