Skip to content

Instantly share code, notes, and snippets.

View HrushikeshK's full-sized avatar

HrushikeshK HrushikeshK

View GitHub Profile
@HrushikeshK
HrushikeshK / check-login-profile.py
Created January 19, 2022 13:17
IAM deactivate dormant
def check_login_profile(userData):
created_date = datetime.now()
last_used_date = datetime.now()
user_arn = userData['Arn']
username = userData['UserName']
user = iam_resource.User(username)
login_profile = iam_resource.LoginProfile(username)
user.load()
@HrushikeshK
HrushikeshK / iam-deactivate-init.py
Created January 19, 2022 13:14
Iam deactivate dormant init
import json
import boto3
from datetime import datetime
from datetime import timedelta
from botocore.exceptions import ClientError
import requests
import os
date_now = datetime.now()
iam_client = boto3.client('iam')
@HrushikeshK
HrushikeshK / iam-get-access-key.py
Created January 19, 2022 13:13
IAM Get access key code block
def get_sensored_access_key(access_key):
first_four = access_key[:4]
last_four = access_key[-4:]
return first_four + "*********" + last_four
def check_access_keys(userData):
created_date = datetime.now()
last_used_date = datetime.now()
access_key_id = None
@HrushikeshK
HrushikeshK / iam-deactivate-cft.template
Created January 19, 2022 13:11
Deactivate IAM users Cloudformation
{
"AWSTemplateFormatVersion": "2010-09-09",
"Description": "Deploy Lambda Function to Deactivate IAM users and access keys that are inactive for more than 90 days.",
"Parameters" : {
"SlackWebhookParameter" : {
"Type" : "String",
"Default" : "",
"Description" : "Webhook for Slack Channel"
}
},
@HrushikeshK
HrushikeshK / send-alert-slack.py
Created January 19, 2022 13:10
Slack sending alert for Deactivate lambda
url = os.environ['WEBHOOK_URL']
headers = {
'Content-Type': "application/json",
'User-Agent': "PostmanRuntime/7.19.0",
'Accept': "*/*",
'Cache-Control': "no-cache",
'Postman-Token': "59df68df-XXXX-XXXX-XXXX-9a2k5q56b8gf,458sadwa-XXXX-XXXX-XXXX-p456z4564a45",
'Host': "hooks.slack.com",
'Accept-Encoding': "gzip, deflate",

Keybase proof

I hereby claim:

  • I am hrushikeshk on github.
  • I am hkh4cks (https://keybase.io/hkh4cks) on keybase.
  • I have a public key whose fingerprint is C26A F7FB 133D D68D 317C 6E58 E509 4CB6 FBE8 56D1

To claim this, I am signing this object: