Tom Rosenfeld AstroTom

## zfs-sg.sh
#!/bin/bash

#
# Create AWS Security Group ZFS security group named "zfs-sg"
#
#   sets ports as per https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/limit-access-security-groups.html
#
# Variables - set your VPC_ID
#

## fsx-sg.sh
#!/bin/bash

#
# Create AWS Security Group for FSx named "fsx-sg"
#   sets ports as per https://docs.aws.amazon.com/fsx/latest/WindowsGuide/limit-access-security-groups.html
#
# Variables - set your VPC_ID
#

VPC_ID=""

## sqs.sh
# Create Q

ENV=dev1
Qname=tom-test1
Q1=$(aws sqs create-queue --queue-name "$ENV-$Qname" --output text)
echo $Q1


aws sqs send-message --queue-url $Q1 --message-body "Test message 1 from Tom"

## aws-list-by-region.sh
CMD="eks list-clusters"
CMD="ec2 describe-volumes"

for item in $(aws ec2 describe-regions  --output text | awk {'print $4'})
do
    echo $item && aws --region $item $CMD
done

## aws-trail-by-region.sh
#
# This only collecting the non read-only actions. This will save a lot of time and space. If you want all events simple remove the --lookup-attributes and the arg.
#

CMD='cloudtrail lookup-events --lookup-attributes AttributeKey=ReadOnly,AttributeValue=false  --start-time "2022-03-31, 00:00" --end-time "2022-04-03, 23:59" '

for region in $(aws ec2 describe-regions  --output text | awk {'print $4'})
do

    echo $region && eval aws --region $region "$CMD"  |tee trail.$region.json.log

## ami-clean.sh
#!/bin/bash

# This script cleans up your EC2 instance before baking a new AMI.
# this works on Ubuntu (18+)
# Run the following command in a root shell:
#
# bash <(curl -s https://gist.githubusercontent.com/AstroTom/fb0f54d125d38574eae76f57c188c4f0/raw/ami-clean.sh)

function print_green {
  echo -e "\e[32m${1}\e[0m"

## send-slow-q.sh
#
# send to q a few treks at a time, then wait till Q is empty to send again
#

AWSACCNT=123456789012

Q=https://sqs.eu-west-1.amazonaws.com/$AWSACCNT/prd_navigation_q
Q=https://sqs.eu-west-1.amazonaws.com/$AWSACCNT/stg_navigation_q

QMAX=29   # do not fill Q with more than these

## fix-bucket-acl.sh
#!/bin/bash
#
# Change the ownership of anonymously owned objects in my Amazon S3 bucket
# see https://aws.amazon.com/premiumsupport/knowledge-center/s3-object-change-anonymous-ownership/
#
# The -r option passed to read command prevents backslash escapes from being interpreted.
# Add IFS= option before read command to prevent leading/trailing whitespace from being trimmed
#

echo 'NOTE: You can ignore the error:

## aws-assume-exp.sh
#!/bin/bash

# Tom R.
# based on  https://gist.github.com/dukejones/36128decdb1e003ac5d77f5c4523f1f5
# Changed to use ~/.aws/config instead
#

set -e

usage () {

## credentials.sh
#
#   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
#   You must use 'source' to run this file, otherwise it has no effect
#   Alternately, you can put it in .bashrc
#   !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
#   e.g.
#   $ source credentials.sh
#

#
	#!/bin/bash

	#
	# Create AWS Security Group ZFS security group named "zfs-sg"
	#
	# sets ports as per https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/limit-access-security-groups.html
	#
	# Variables - set your VPC_ID
	#
	#!/bin/bash

	#
	# Create AWS Security Group for FSx named "fsx-sg"
	# sets ports as per https://docs.aws.amazon.com/fsx/latest/WindowsGuide/limit-access-security-groups.html
	#
	# Variables - set your VPC_ID
	#

	VPC_ID=""
	# Create Q

	ENV=dev1
	Qname=tom-test1
	Q1=$(aws sqs create-queue --queue-name "$ENV-$Qname" --output text)
	echo $Q1


	aws sqs send-message --queue-url $Q1 --message-body "Test message 1 from Tom"
	CMD="eks list-clusters"
	CMD="ec2 describe-volumes"

	for item in $(aws ec2 describe-regions --output text \| awk {'print $4'})
	do
	echo $item && aws --region $item $CMD
	done
	#
	# This only collecting the non read-only actions. This will save a lot of time and space. If you want all events simple remove the --lookup-attributes and the arg.
	#

	CMD='cloudtrail lookup-events --lookup-attributes AttributeKey=ReadOnly,AttributeValue=false --start-time "2022-03-31, 00:00" --end-time "2022-04-03, 23:59" '

	for region in $(aws ec2 describe-regions --output text \| awk {'print $4'})
	do

	echo $region && eval aws --region $region "$CMD" \|tee trail.$region.json.log
	#!/bin/bash

	# This script cleans up your EC2 instance before baking a new AMI.
	# this works on Ubuntu (18+)
	# Run the following command in a root shell:
	#
	# bash <(curl -s https://gist.githubusercontent.com/AstroTom/fb0f54d125d38574eae76f57c188c4f0/raw/ami-clean.sh)

	function print_green {
	echo -e "\e[32m${1}\e[0m"
	#
	# send to q a few treks at a time, then wait till Q is empty to send again
	#

	AWSACCNT=123456789012

	Q=https://sqs.eu-west-1.amazonaws.com/$AWSACCNT/prd_navigation_q
	Q=https://sqs.eu-west-1.amazonaws.com/$AWSACCNT/stg_navigation_q

	QMAX=29 # do not fill Q with more than these
	#!/bin/bash
	#
	# Change the ownership of anonymously owned objects in my Amazon S3 bucket
	# see https://aws.amazon.com/premiumsupport/knowledge-center/s3-object-change-anonymous-ownership/
	#
	# The -r option passed to read command prevents backslash escapes from being interpreted.
	# Add IFS= option before read command to prevent leading/trailing whitespace from being trimmed
	#

	echo 'NOTE: You can ignore the error:
	#!/bin/bash

	# Tom R.
	# based on https://gist.github.com/dukejones/36128decdb1e003ac5d77f5c4523f1f5
	# Changed to use ~/.aws/config instead
	#

	set -e

	usage () {
	#
	# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
	# You must use 'source' to run this file, otherwise it has no effect
	# Alternately, you can put it in .bashrc
	# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
	# e.g.
	# $ source credentials.sh
	#

	#