aws cli + jqでパラメータ確認試験のエビデンス取り

aws cliの実行ログをエビデンスとして残す際に使えるワンライナーを書きました。

それぞれ、コマンド冒頭部の”name=”のところに試験対象の名前を入れ替えて実行します。

アクセスキー、シークレットアクセスキーの設定は行っていませんので、ワンライナー実行前に設定を済ませておく必要があります。

name=”インスタンス名“;aws ec2 describe-instances|jq ‘.Reservations[].Instances[]|select(.Tags[].Value == $name )|{AvailabilityZone:.Placement.AvailabilityZone,Name: .Tags[].Value,InstanceType,SubnetId:.NetworkInterfaces[].SubnetId,IAMrole:.IamInstanceProfile.Arn,PriveteIP:.NetworkInterfaces[].PrivateIpAddress,ElasticIP:.NetworkInterfaces[].Association.PublicIp},{SecurityGroup: .SecurityGroups[].GroupName}’ –arg name $name|sed -e s/{//g -e s/}//g|sed ‘/^ *$/d’;name2=`aws ec2 describe-instances|jq ‘.Reservations[].Instances[]|select(.Tags[].Value == $name )|.NetworkInterfaces[].SubnetId’ –arg name $name 2>/dev/null|sed -e s/”//g`;aws ec2 describe-subnets|jq ‘.Subnets[]|select(.SubnetId == $name2)|{SubnetName: .Tags[].Value}’ –arg name2 $name2 2>/dev/null|sed -e s/{//g -e s/}//g|sed ‘/^ *$/d’

name=”VPC名“;aws ec2 describe-vpcs|jq ‘.Vpcs[]|select(.Tags[].Value == $name )|{VpcId, Name: .Tags[].Value, CidrBlock}’ –arg name $name|sed -e s/{//g -e s/}//g|sed ‘/^ *$/d’

name=”サブネット名“;aws ec2 describe-subnets|jq ‘.Subnets[]|select(.Tags[].Value == $name)|{Name: .Tags[].Value,VpcId,SubnetId,CidrBlock,AvailableIpAddressCount,AvailabilityZone}’ –arg name $name 2>/dev/null|sed -e s/{//g -e s/}//g|sed ‘/^ *$/d’;name2=`aws ec2 describe-subnets|jq ‘.Subnets[]|select(.Tags[].Value == $name)|.SubnetId’ –arg name $name 2>/dev/null|sed -e s/”//g`;aws ec2 describe-route-tables|jq ‘.RouteTables[]|select(.Associations[].SubnetId == $name2 )|{RouteTableName: .Tags[].Value}’ –arg name2 $name2|sed -e s/{//g -e s/}//g|sed ‘/^ *$/d’;aws ec2 describe-network-acls|jq ‘.NetworkAcls[]|select(.Associations[].SubnetId == $name2 )|{NACLName: .Tags[].Value}’ –arg name2 $name2|sed -e s/{//g -e s/}//g|sed ‘/^ *$/d’

name=”ルートテーブル名“;aws ec2 describe-route-tables|jq ‘.RouteTables[]|select(.Tags[].Value == $name )|{Routes, Name: .Tags[].Value, RouteTableId}’ –arg name $name|sed -e s/{//g -e s/}//g|sed ‘/^ *$/d’

name=”ネットワークACL名”;aws ec2 describe-network-acls|jq ‘.NetworkAcls[]|select(.Tags[].Value == $name )|{VpcId, Name: .Tags[].Value, Entries}’ –arg name $name|sed -e s/{//g -e s/}//g|sed ‘/^ *$/d’

name=”セキュリティグループ名“;aws ec2 describe-security-groups|jq ‘.SecurityGroups[]|select(.Tags[].Value == $name )|{GroupId,Name: .Tags[].Value,IpPermissions,IpPermissionsEgress}’ –arg name $name 2>/dev/null|sed -e s/{//g -e s/}//g|sed ‘/^ *$/d’