�
�Udac @ s� d d l Z d d l Z d d l Z d d l m Z d d l m Z m Z d d l m Z m
Z
d d l m Z d d l
m Z m Z m Z d d l m Z m Z m Z m Z d Z y" d d l Z d d l Z e Z Wn# e k
r� e j � Z e Z n Xd Z y" d d l Z d d l! Z! e Z" Wn# e# k
rIe j � Z e Z" n Xy d d l$ m% Z% e Z& Wn e k
r}e Z& n Xd e# f d
� � YZ' d � Z( d e f d
� � YZ) d d d d d � Z* d d d d d � Z+ e+ Z, d � Z- d � Z. d � Z/ e d � Z0 d � Z1 d � Z2 d � Z3 d � Z4 d � Z5 d d d � Z6 d d d � Z7 d e d � Z8 d � Z9 d � Z: d � Z; d! � Z< d" � Z= e d# � Z> d S($ i����N( t __version__( t missing_required_libt env_fallback( t to_nativet to_text( t
CloudRetry( t string_typest binary_typet text_type( t camel_dict_to_snake_dictt snake_dict_to_camel_dictt _camel_to_snaket _snake_to_camel( t
cmp_to_keyt AnsibleAWSErrorc B s e Z RS( ( t __name__t
__module__( ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyR F s c C s t r t j j St d � S( s�
Allow for boto3 not being installed when using these utils by wrapping
botocore.exceptions instead of assigning from it directly.
N( t HAS_BOTO3t botocoret
exceptionst ClientErrort typet None( ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt _botocore_exception_maybeJ s
t AWSRetryc B s2 e Z e � Z e d � � Z e d d � � Z RS( c C s | j d d S( Nt Errort Code( t response( t error( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt status_code_from_exceptionW s c C sY d d d d d d d g } | r1 | j | � n t j d � } | | k pX | j | � S( Nt RequestLimitExceededt Unavailablet ServiceUnavailablet InternalFailuret
InternalErrort TooManyRequestsExceptiont
Throttlings
^\w+.NotFound( t extendt ret compilet search( t
response_codet catch_extra_error_codest retry_ont not_found( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt found[ s
N( R R R t
base_classt staticmethodR R R- ( ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyR T s c
K s� y& t d | d | d | d | | � SWn� t k
rU } | j d d t | � � n| t j j t j j t j j t j j f k
r� } | j d t | � � n0 t j j
k
r� } | j d d | j � n Xd S( Nt conn_typet resourcet regiont endpointt msgs Couldn't connect to AWS: %sso The %s module requires a region and none was found in configuration, environment variables or module parameters( t _boto3_connt
ValueErrort fail_jsonR R R t ProfileNotFoundt PartialCredentialsErrort NoCredentialsErrort ConfigParseErrort
NoRegionErrort _name( t moduleR0 R1 R2 R3 t paramst e( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt
boto3_conns s & c K s9 | j d d � } | d k r- t d � � n | j d � r` | j d � } d j t � | _ n t j j d d j t � � } t
j j d | � } | d k r� | j
| d | d | d
| | �S| d k r� | j | d | d | d
| | �S| j | d | d
| | �} | j
| d | d
| | �} | | f Sd S( Nt profile_namet bothR1 t clients� There is an issue in the calling code. You must specify either both, resource, or client to the conn_type parameter in the boto3_conn function callt configs Ansible/{0}t user_agent_extrat region_namet endpoint_url( RC s resources client( t popR R6 t gett formatR RF R RE t Configt boto3t sessiont SessionR1 RD ( R0 R1 R2 R3 R? t profileRE RN RD ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyR5 � s" " " c C sr t | d � r | j } nS t | d � r^ t | j � d t | � d t t | � � } n d t | f } | S( s{
Extracts the error message from a boto exception.
:param err: Exception from boto
:return: Error message
t
error_messaget messaget s - s %s: %s( t hasattrRQ t strRR R t Exception( t errR ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt boto_exception� s 4c C s� t d t d t d g f d t d d � d t � d t d d
d g d t � d
t d d d g � d t d t d d � d t d d g d t � d t � � S( Nt debug_botocore_endpoint_logst fallbackt ANSIBLE_DEBUG_BOTOCORE_LOGSt defaultR t boolt ec2_urlt aws_secret_keyt aliasest ec2_secret_keyt
secret_keyt no_logt aws_access_keyt ec2_access_keyt
access_keyt validate_certst security_tokent access_tokenRP ( t dictR t Falset True( ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt aws_common_argument_spec� s $ c C s2 t � } | j t d t d d d g � � � | S( NR2 R` t
aws_regiont
ec2_region( Rm t updateRj ( t spec( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt ec2_argument_spec� s
c
C sl | j j d � } | j j d � } | j j d � } | j j d � } | j j d � } | j j d � } | j j d � } | s� d t j k r� t j d } q� d t j k r� t j d } q� n | s�t j j d
� r� t j d
} q�t j j d � rt j d } q�t j j d � r1t j d } q�t rdt j j d
d � rdt j j d
d � } q�t r�t j j d d � r�t j j d d � } q�d } n | s{t j j d � r�t j d } q{t j j d � r�t j d } q{t j j d � r t j d } q{t r?t j j d
d � r?t j j d
d � } q{t rrt j j d d � rrt j j d d � } q{d } n | s�d t j k r�t j d } q�d t j k r�t j d } q�d t j k r�t j d } q�| s?t r t j j d d � } | s<t j j d d � } q<q�| j d t d � d t
� q�t r�y" t j
j d | � j d � } Wq�t j j k
r�} q�Xq�| j d t d � d t � n | s�t j j d � r�t j d } q�t j j d � r�t j d } q�t j j d � rt j d } q�t rDt j j d
d! � rDt j j d
d! � } q�t rwt j j d d! � rwt j j d d! � } q�d } n t r�| r�t d | d | d" | � }
| |
d# <| rt d d d d d" d � }
| |
d$ <qn8 t d | d | d | � }
| r| |
d$ <n | |
d <xB |
j � D]4 \ } } t | t � r't | d% d& � |
| <q'q'W| | |
f S(' NR^ Rd R_ Rh R2 RP Rg t AWS_URLt EC2_URLt AWS_ACCESS_KEY_IDt AWS_ACCESS_KEYt EC2_ACCESS_KEYt Credentialst aws_access_key_idR\ t AWS_SECRET_ACCESS_KEYt AWS_SECRET_KEYt EC2_SECRET_KEYt aws_secret_access_keyt
AWS_REGIONt AWS_DEFAULT_REGIONt
EC2_REGIONt BotoRn Ro R4 t botot exceptionRM t AWS_SECURITY_TOKENt AWS_SESSION_TOKENt EC2_SECURITY_TOKENt aws_security_tokent aws_session_tokent verifyRB s utf-8t strict( R? RJ t ost environt HAS_BOTOR� RE R R7 R t BOTO_IMP_ERRR R RN RO t get_config_variableR R8 t
BOTO3_IMP_ERRRj t itemst
isinstanceR R (
R> RM R^ Rf Rb Rh R2 RB Rg R@ t boto_paramst paramt value( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt get_aws_connection_info� s� "
c C s- t | � \ } } } | | d | d | f S( s] for compatibility mode with old modules that don't/can't yet
use ec2_connect method Ry R} ( R� ( R> R2 R^ R� ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt
get_ec2_creds= s c C sE d | } t j j | d � rA | j j t j j | d � � n | S( s, monkey patch for boto issue boto/boto#2100 s profile R� ( R� RE t
has_optiont providert set_security_tokenRJ ( t connRB RP ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt" boto_fix_security_token_in_profileD s
"c K s� y | j | | � } Wn# t j j k
r; t d � � n X| s� | g | j � D] } | j ^ qR k r� t d | | j f � � q� t d | | j f � � n | j d � r� t | | d � } n | S( Ns; Profile given for AWS was not found. Please fix and retry.s� Region %s does not seem to be available for aws module %s. If the region definitely exists, you may need to upgrade boto or extend with endpoints_paths: Unknown problem connecting to region %s for aws module %s.RB (
t connect_to_regionR� R� t ProfileNotFoundErrorR t regionst nameR RJ R� ( t
aws_moduleR2 R? R� t aws_module_region( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt connect_to_awsL s ( c C s� t | � \ } } } | rx y t t j | | � } Wq� t j j t t j j f k
rt } | j d t
| � � q� Xnp | r� y t j | | � } Wq� t j j t t j j f k
r� } | j d t
| � � q� Xn | j d d � | S( s Return an ec2 connectionR4 s* Either region or ec2_url must be specified( R� R� R� t ec2R� t NoAuthHandlerFoundR R� R� R7 RU t connect_ec2_endpoint( R> R2 R^ R� R� R@ ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt ec2_connect\ s $ $ c C sj g } x] | j � D]O \ } } i | d 6} t | t � rK | g | d <n
| | d <| j | � q W| S( s' Convert an Ansible dict of filters to list of dicts that boto3 can use
Args:
filters_dict (dict): Dict of AWS filters.
Basic Usage:
>>> filters = {'some-aws-id': 'i-01234567'}
>>> ansible_dict_to_boto3_filter_list(filters)
{
'some-aws-id': 'i-01234567'
}
Returns:
List: List of AWS filters and their values
[
{
'Name': 'some-aws-id',
'Values': [
'i-01234567',
]
}
]
t Namet Values( R� R� R t append( t filters_dictt filters_listt kt vt filter_dict( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt! ansible_dict_to_boto3_filter_listt s
c s� | r | r i | | 6} n i d d 6d d 6} | s: i SxW | j � D]I \ � � � | d k rG � | d k rG t � � f d � | D� � SqG Wt d t | � t | � f � � d S( s Convert a boto3 list of resource tags to a flat dict of key:value pairs
Args:
tags_list (list): List of dicts representing AWS tags.
tag_name_key_name (str): Value to use as the key for all tag keys (useful because boto3 doesn't always use "Key")
tag_value_key_name (str): Value to use as the key for all tag values (useful because boto3 doesn't always use "Value")
Basic Usage:
>>> tags_list = [{'Key': 'MyTagKey', 'Value': 'MyTagValue'}]
>>> boto3_tag_list_to_ansible_dict(tags_list)
[
{
'Key': 'MyTagKey',
'Value': 'MyTagValue'
}
]
Returns:
Dict: Dict of key:value pairs representing AWS tags
{
'MyTagKey': 'MyTagValue',
}
R� t keyt Valuet Keyi c 3 s# | ] } | � | � f Vq d S( N( ( t .0t tag( R� R� ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pys <genexpr>� s s4 Couldn't find tag key (candidates %s) in tag list %sN( R� Rj R6 RU ( t tags_listt tag_name_key_namet tag_value_key_namet tag_candidates( ( R� R� s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt boto3_tag_list_to_ansible_dict� s !R� R� c C sH g } x; | j � D]- \ } } | j i | | 6t | � | 6� q W| S( s Convert a flat dict of key:value pairs representing AWS resource tags to a boto3 list of dicts
Args:
tags_dict (dict): Dict representing AWS resource tags.
tag_name_key_name (str): Value to use as the key for all tag keys (useful because boto3 doesn't always use "Key")
tag_value_key_name (str): Value to use as the key for all tag values (useful because boto3 doesn't always use "Value")
Basic Usage:
>>> tags_dict = {'MyTagKey': 'MyTagValue'}
>>> ansible_dict_to_boto3_tag_list(tags_dict)
{
'MyTagKey': 'MyTagValue'
}
Returns:
List: List of dicts containing tag keys and values
[
{
'Key': 'MyTagKey',
'Value': 'MyTagValue'
}
]
( R� R� R ( t tags_dictR� R� R� R� R� ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt ansible_dict_to_boto3_tag_list� s %c s� d � � d � } g } t | t � r3 | g } n � r� | rr i d d 6| g d 6g } | j d | � d } q� | j � d } n4 | r� i | d 6} | j d | � } n | j � } t | � j � � f d � | D� � } t t | � t | � � } t | � d
k r�d d l }
g | D] } |
j d
| � r"| ^ q"| (g | D] } |
j d
| � sN| ^ qN} t | � d
k r�t
d d j | � � � q�n | g | D]6 }
t � |
� � � | k r�t | |
� � � ^ q�7} | S( sy Return list of security group IDs from security group names. Note that security group names are not unique
across VPCs. If a name exists across multiple VPCs and no VPC ID is supplied, all matching IDs will be returned. This
will probably lead to a boto exception if you attempt to assign both IDs to a resource so ensure you wrap the call in
a try block
c S s | r | d S| j Sd S( Nt GroupName( R� ( t sgRM ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt get_sg_name� s c S s | r | d S| j Sd S( Nt GroupId( t id( R� RM ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt get_sg_id� s s vpc-idR� R� t Filterst SecurityGroupst filtersc 3 s$ | ] } t � | � � � Vq d S( N( RU ( R� t all_sg( RM R� ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pys <genexpr>
s i i����Ns sg-[a-fA-F0-9]+$s+ The following group names are not valid: %ss , (
R� R t describe_security_groupst get_all_security_groupst sett
differencet listt lenR& t matchR6 t joinRU ( t sec_group_listt ec2_connectiont vpc_idRM R� t sec_group_id_listR� t all_sec_groupst unmatchedt sec_group_name_listR& R� t still_unmatchedR� ( ( RM R� s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt% get_ec2_security_group_ids_from_names� s4
( ,+ Gc C s� t | t � r] x3| D]@ } t | g � } t | t � rI t | � } n | j | � q Wn� t | t � s{ t | t � r� t | � } | j d � r� | j d � r� | j
d � d } n | g St | t � rEt | j � � } | j
� xU | D]J } t | | g � } t | t � r+t | � } n | j | | f � q� Wn t | � d k rwt | d t � rw| d } n t | t � r�t r�| j
d t t � � q�| j
� n | S( s�
Takes a policy and returns a list, the contents of which are all hashable and sorted.
Example input policy:
{'Version': '2012-10-17',
'Statement': [{'Action': 's3:PutObjectAcl',
'Sid': 'AddCannedAcl2',
'Resource': 'arn:aws:s3:::test_policy/*',
'Effect': 'Allow',
'Principal': {'AWS': ['arn:aws:iam::XXXXXXXXXXXX:user/username1', 'arn:aws:iam::XXXXXXXXXXXX:user/username2']}
}]}
Returned value:
[('Statement', ((('Action', (u's3:PutObjectAcl',)),
('Effect', (u'Allow',)),
('Principal', ('AWS', ((u'arn:aws:iam::XXXXXXXXXXXX:user/username1',), (u'arn:aws:iam::XXXXXXXXXXXX:user/username2',)))),
('Resource', (u'arn:aws:s3:::test_policy/*',)), ('Sid', (u'AddCannedAcl2',)))),
('Version', (u'2012-10-17',)))]
s
arn:aws:iam::s :roott :i i i R� ( R� R� t _hashable_policyt tupleR� R R R t
startswitht endswitht splitRj t keyst sortR� t PY3_COMPARISONR
t py3cmp( t policyt policy_listt eacht
tupleifiedt sorted_keysR� ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyR� s4
%
c C s� y( | | k r d S| | k r# d Sd SWnu t k
r� } t | � j d � } t | � j d � } d | | f k r� | | k r� d S| | k r� d Sn � n Xd S( sh Python 2 can sort lists of mixed types. Strings < tuples. Without this function this fails on Python 3.i i����i RU R� N( t TypeErrorR t find( t at bR@ t str_indt tup_ind( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyR� M s c C s( t t | g � � t t | g � � k S( sy Compares the existing policy and the updated policy
Returns True if there is a difference between policies.
( R� R� ( t current_policyt
new_policy( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt compare_policiesc s c s� � f d � � i } xh | j � D]Z \ } } t | t � rP t | � | | <q" t | t � rr � | � | | <q" | | | <q" W| S( s1 Sort any lists in an IAM JSON policy so that comparison of two policies with identical values but
different orders will return true
Args:
policy_dict (dict): Dict representing IAM JSON policy.
Basic Usage:
>>> my_iam_policy = {'Principle': {'AWS':["31","7","14","101"]}
>>> sort_json_policy_dict(my_iam_policy)
Returns:
Dict: Will return a copy of the policy as a Dict but any List will be sorted
{
'Principle': {
'AWS': [ '7', '14', '31', '101' ]
}
}
c s� g } xe | D]] } t | t � r8 | j t | � � q
t | t � r] | j � | � � q
| j | � q
W| j d d � � | S( NR� c S s# t | t � r t | j � � S| S( N( R� Rj t sortedR� ( t x( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt <lambda>� s ( R� Rj R� t sort_json_policy_dictR� R� ( t my_listt checked_listt item( t
value_is_list( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyR� | s
( R� R� Rj R� R� ( t policy_dictt ordered_policy_dictR� R� ( ( R� s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyR� j s c C s
| d k r d St | � � } t | t � r� x� | D]i } | | k r� t | | t � r| t | | | | d � | | <q� t | | | | � | | <q5 | Sq5 Wnd t | t � r� xR t t | � � D] } | j t | | | � � q� Wn | r t � d | | � S| S( s�
Allows to cast elements within a dictionary to a specific type
Example of usage:
DEPLOYMENT_CONFIGURATION_TYPE_MAP = {
'maximum_percent': 'int',
'minimum_healthy_percent': 'int'
}
deployment_configuration = map_complex_type(module.params['deployment_configuration'],
DEPLOYMENT_CONFIGURATION_TYPE_MAP)
This ensures all keys within the root element are casted and valid integers
Ni t __builtins__(
R R R� Rj R� t map_complex_typet rangeR� R� t globals( t complex_typet type_mapt new_typeR� t i( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyR� � s,
c C s� i } g } x6 | j � D]( } | | k r | r | j | � q q WxT t | j � � t | � D]6 } t | | � | j | � k rb | | | | <qb qb W| | f S( s�
Compare two dicts of AWS tags. Dicts are expected to of been created using 'boto3_tag_list_to_ansible_dict' helper function.
Two dicts are returned - the first is tags to be set, the second is any tags to remove. Since the AWS APIs differ
these may not be able to be used out of the box.
:param current_tags_dict:
:param new_tags_dict:
:param purge_tags:
:return: tag_key_value_pairs_to_set: a dict of key value pairs that need to be set in AWS. If all tags are identical this dict will be empty
:return: tag_keys_to_unset: a list of key names (type str) that need to be unset in AWS. If no tags need to be unset this list will be empty
( R� R� R� R RJ ( t current_tags_dictt
new_tags_dictt
purge_tagst tag_key_value_pairs_to_sett tag_keys_to_unsetR� ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt compare_aws_tags� s
# (? R� R& t tracebackt$ ansible.module_utils.ansible_releaseR t ansible.module_utils.basicR R t ansible.module_utils._textR R t ansible.module_utils.cloudR t ansible.module_utils.sixR R R t0 ansible.module_utils.common.dict_transformationsR R
R R R R� R� t boto.ec2Rl R� t ImportErrort
format_excRk R� RM R R RV t functoolsR
R� R R R RA R5 t boto3_inventory_connRX Rm Rr R� R� R� R� R� R� R� R� R� R� R� R� R� R� R ( ( ( s< /usr/lib/python2.7/site-packages/ansible/module_utils/ec2.pyt <module> sj "
u $$ @ 3 . *
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell