chef file to attach role to itself

default.rb

ey_aws_key  = "retrieved from dna.json"
ey_aws_secret  = "retrieved from dna.json"

bash "add engine yard user to credentials" do
  user 'deploy'
  code <<-"EOH"
    echo '[engineyard]' >> /home/deploy/.aws/credentials
    echo 'aws_access_key_id=#{ey_aws_key}' >> /home/deploy/.aws/credentials    
    echo 'aws_secret_access_key=#{ey_aws_secret}' >> /home/deploy/.aws/credentials
EOH
  not_if "grep engineyard /home/deploy/.aws/credentials"
end

bash "install aws cli" do
  user 'deploy'
  code <<-EOH
    curl "https://d1vvhvl2y92vvt.cloudfront.net/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
    unzip awscliv2.zip
    sudo ./aws/install
EOH
  not_if "aws2 --version"
end

instance_id = node[:engineyard][:this]

bash "associate a role to use KMS" do
  user 'deploy'
  code <<-"EOH"
    aws ec2 associate-iam-instance-profile --instance-id #{instance_id} --iam-instance-profile Name=TBD --profile engineyard
EOH
  not_if "aws2 ec2 describe-iam-instance-profile-associations --profile engineyard | grep <????>"
end