Class: Awscli::EC2::SecGroups

Inherits:
Object
  • Object
show all
Defined in:
lib/awscli/ec2.rb

Overview

> KP

Instance Method Summary collapse

Constructor Details

#initialize(connection) ⇒ SecGroups

Ec2-VPC: user can have 50 group per VPC



298
299
300
 
# File 'lib/awscli/ec2.rb', line 298

def initialize(connection)
  @conn = connection
end

Instance Method Details

#authorize_securitygroup(options) ⇒ Object 



317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
 
# File 'lib/awscli/ec2.rb', line 317

def authorize_securitygroup(options)
  # => Ingress regular traffic -> this action applies to both EC2 and VPC Security Groups
      # Each rule consists of the protocol, plus cidr range or a source group,
        #for TCP/UDP protocols you must also specify the dest port or port range
        #for ICMP, you must specify the icmp type and code (-1 means all types/codes)
  abort "Expecting Security group id(s) of the form: 'sg-xxxxxx'" unless options[:group_id] =~ /sg-\S{8}/
  abort "Invalid CIDR format" unless options[:cidr] =~ /^(([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])\.){3}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\/(\d|[1-2]\d|3[0-2]))$/
  sg = @conn.security_groups.get_by_id(options[:group_id])
  abort "Cannot find Security Group with Id: #{sg}" unless sg
  begin
    @conn.authorize_security_group_ingress(
      "GroupId" => options[:group_id],
      "IpProtocol" => options[:protocol_type],
      "FromPort" => options[:start_port],
      "ToPort" => options[:end_port],
      "CidrIp" => options[:cidr]
      )
    puts "Authorized rule"
  rescue Fog::Compute::AWS::Error #=> e
    abort "Error: #{$!}"
    #puts $@ #backtrace
  end
end

#create_securitygroup(options) ⇒ Object 



359
360
361
362
363
 
# File 'lib/awscli/ec2.rb', line 359

def create_securitygroup(options)
  abort "Error: Security Group => #{options[:name]} already exists" if @conn.security_groups.get(options[:name])
  @conn.security_groups.create(options)
  puts "Created Security Group: #{options[:name]}"
end

#delete_securitygroup(options) ⇒ Object 



365
366
367
368
369
370
371
372
373
374
 
# File 'lib/awscli/ec2.rb', line 365

def delete_securitygroup(options)
  sg = @conn.security_groups.get_by_id(options[:group_id])
  abort "Error: Cannot find Security Group with Id: #{sg}" unless sg
  begin
    sg.destroy
    puts "Deleted Security Group with id: #{options[:group_id]}"
  rescue Fog::Compute::AWS::Error #=> e
    abort "Error: #{$!}"
  end
end

#list_secgroups(options) ⇒ Object 



302
303
304
305
306
307
308
309
310
311
312
313
314
315
 
# File 'lib/awscli/ec2.rb', line 302

def list_secgroups(options)
  if options[:show_ip_permissions]
    # @conn.security_groups.table([:name, :group_id, :ip_permissions])
    @conn.security_groups.each do |sg|
      id = sg.group_id
      ip_permissions = sg.ip_permissions.to_yaml
      Formatador.display_line("[green]#{id}[/]")
      puts "#{ip_permissions}"
      puts '================='
    end
  else
    @conn.security_groups.table([:name, :group_id, :description])
  end
end

#revoke_securitygroup(options) ⇒ Object 



341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
 
# File 'lib/awscli/ec2.rb', line 341

def revoke_securitygroup(options)
  abort "Expecting Security group id(s) of the form: 'sg-xxxxxx'" unless options[:group_id] =~ /sg-\S{8}/
  sg = @conn.security_groups.get_by_id(options[:group_id])
  abort "Cannot find Security Group with Id: #{sg}" unless sg
  begin
    response = @conn.revoke_security_group_ingress(
      "GroupId" => options[:group_id],
      "IpProtocol" => options[:protocol_type],
      "FromPort" => options[:start_port],
      "ToPort" => options[:end_port],
      "CidrIp" => options[:cidr]
      )
    puts "Revoked rule: #{response.body['return']}"
  rescue Fog::Compute::AWS::Error #=> e
    abort "Error: #{$!}"
  end
end