Skip to content

Instantly share code, notes, and snippets.

@MattHealy
Created February 28, 2023 11:33
Show Gist options
  • Save MattHealy/3b09c854e383e7f20b4379108af4bc47 to your computer and use it in GitHub Desktop.
Save MattHealy/3b09c854e383e7f20b4379108af4bc47 to your computer and use it in GitHub Desktop.
import boto3
import csv
client = boto3.client('ec2')
regions = [region['RegionName'] for region in client.describe_regions()['Regions']]
fieldnames = [
'Certificate',
'Common Name',
'Subject Alternative Name(s)',
'Signed By (CA)',
'Issued Date',
'Expiration Date',
'Public Key Algorithm',
'Signature Algorithm',
'Key Size',
'Support Group',
'Status',
'Description',
]
outfilename = 'aws-certs.csv'
with open(outfilename, 'a', newline='') as writecsv:
writer = csv.DictWriter(writecsv, fieldnames=fieldnames, quoting=csv.QUOTE_ALL)
writer.writeheader()
for r in regions:
print(f"Checking region {r}")
client = boto3.client('acm', region_name=r)
response = client.list_certificates(
CertificateStatuses=['PENDING_VALIDATION', 'ISSUED'],
)
for item in response['CertificateSummaryList']:
response2 = client.describe_certificate(
CertificateArn=item['CertificateArn']
)
cert = response2['Certificate']
issued = 'N/A'
if 'IssuedAt' in cert:
issued = cert['IssuedAt']
row = {
'Common Name': cert['DomainName'],
'Subject Alternative Name(s)': ', '.join(cert['SubjectAlternativeNames']),
'Signed By (CA)': 'AWS',
'Issued Date': issued,
'Expiration Date': cert['NotAfter'],
'Public Key Algorithm': cert['KeyAlgorithm'],
'Signature Algorithm': cert['SignatureAlgorithm'],
'Key Size': '',
'Support Group': '',
'Status': cert['Status'],
'Description': 'AWS Region: {}. Type: {}'.format(r, cert['Type']),
}
writer.writerow(row)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment