kamgaurav

$NewIAMPolicy1 = New-IAMPolicy -PolicyName 'Policy-EBSSnapshot' -PolicyDocument (Get-Content -Raw Policy-EBSSnapshot.json) -Description 'Policy to take Snapshot of EBS volumes.'            
$NewIAMRole1 = New-IAMRole -AssumeRolePolicyDocument (Get-Content -raw AssumeRolePolicy-Lambda.json) -RoleName "Role-EBS-Snapshot" -Description 'Allows Lambda Function to call AWS services on your behalf.'       
Register-IAMRolePolicy -RoleName "Role-EBS-Snapshot" -PolicyArn $NewIAMPolicy1.arn

$NewIAMPolicy2 = New-IAMPolicy -PolicyName 'Policy-LambdaInvoke' -PolicyDocument (Get-Content -Raw Policy-LambdaInvoke.json) -Description 'Policy to Invoke Lambda Function.'            
$NewIAMRole2 = New-IAMRole -AssumeRolePolicyDocument (Get-Content -raw AssumeRolePolicy-StepFunction.json) -RoleName "Role-Lambda-Invoke" -Description 'Allows Step Function to call AWS services on your behalf.'     
Register-IAMRolePolicy -RoleName "Role-Lambda-Invoke" -PolicyArn $NewIAMPolicy2.arn

$NewIAMPolicy3 = New-IAMPolicy -PolicyName 'Policy

kamgaurav

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "VisualEditor0",
      "Effect": "Allow",
      "Action": [
        "ec2:DeleteSnapshot",
        "ec2:CreateTags",
        "ec2:CreateSnapshot"

kamgaurav

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "lambda.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }

kamgaurav

{  
  "Version":"2012-10-17",
  "Statement":[  
    {  
      "Effect":"Allow",
      "Action":[  
        "lambda:InvokeFunction"
      ],
      "Resource":[  
        "arn:aws:lambda:eu-west-1:527359538786:function:Create-EBSSnapshot",

kamgaurav

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "states.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }

kamgaurav

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "states:StartExecution"
      ],
      "Resource": [
        "arn:aws:states:eu-west-1:527359538786:stateMachine:StateMachine-ManageSnapshot"

kamgaurav

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "events.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }

kamgaurav

{
  "StartAt": "Create-EBSSnapshot",
  "States": {
    "Create-EBSSnapshot": {
      "Type": "Task",
      "Resource": "arn:aws:lambda:eu-west-1:527359538786:function:Create-EBSSnapshot",
      "Next": "Remove-EBSSnapshot"
    },
    "Remove-EBSSnapshot": {
      "Type": "Task",

kamgaurav

#Requires -Modules @{ModuleName='AWSPowerShell.NetCore';ModuleVersion='3.3.365.0'}

$Type = 'Daily'

Get-EC2Volume -Filter @{Name = "tag:BackupEnabled"; Values = "True"} |

ForEach-Object {

    If ($_.Attachment) {
        $Device = $_.Attachment[0].Device

kamgaurav

#Requires -Modules @{ModuleName='AWSPowerShell.NetCore';ModuleVersion='3.3.365.0'}

$RetentionDays = 14

$Snapshots = Get-EC2Snapshot -Filter @{Name = "tag:BackupType"; Values = "Daily"}

ForEach ($Snapshot in $Snapshots) { 
    $Retention = ([DateTime]::Now).AddDays(-$RetentionDays)
    if ([DateTime]::Compare($Retention, $Snapshot.StartTime) -gt 0) { 
        Remove-EC2Snapshot -SnapshotId $snapshot.SnapshotId -Force