gistfile1.txt

import boto3
import botocore
import os
import json
def spokevgw_handler(event, context):
    vpngatewayids1 = []
    vpnconnections = []
    vgwtag = []
    newvpcconnection = []
    processfilenames = []
    #-----------------------------------------------------------------------------------------------------------------------------------
    TransitS3Bucket = os.environ['TransitS3Bucket']
    S3Bucket = []
    S3Prefix = []
    FortinetEIP1 = []
    FortinetEIP2 = []
    FortinetPIP1 = []
    FortinetPIP2 = []
    FortinetPass1 = []
    FortinetPass2 = []
    FortinetUser  = []
    AutomateUser  = []
    AutomateUserPwd = []
    BGP = []
    NameTag = []
    NameValue = []
    #-----------------------------------------------------------------------------------------------------------------------------------
    s3 = boto3.resource('s3')
    exists = False
    print "The S3 bucket is %s"%TransitS3Bucket
    try:
        s3.Object(TransitS3Bucket, 'transitvpc.txt').load()
    except botocore.exceptions.ClientError as e:
        if e.response['Error']['Code'] == "404":
                exists = False
		print "-----------------------------------------------------------------------------------------------------------------------------------"
		print "1. Cannot Perform any processing of VGW poller ......"
        else:
                raise
    else:
        exists = True
        print "----------------------------------------------------------------------------------------------------------------------------------"
        print "1. 'transitvpc.txt' files exists, process of Virtual Private Connection starts ......"
    #-----------------------------------------------------------------------------------------------------------------------------------
    	boto3.client('s3').download_file( TransitS3Bucket, 'transitvpc.txt', '/tmp/transitvpc.txt' )   
    	for line in open ('/tmp/transitvpc.txt', 'r'):
    		value = line.split('|')
		S3Bucket = value[0]
		S3Prefix = value[1]
		FortinetEIP1 = value[2]
		FortinetEIP2 = value[3]
		FortinetPIP1 = value[4]
		FortinetPIP2 = value[5]
		FortinetPass1 = value[6]
		FortinetPass2 = value[7]
		FortinetUser = value[8]
		AutomateUser = value[9]
		AutomateUserPwd = value[10]
		BGP = value[11]
		NameTag = value[12]
		NameValue = value[13]
    #-------------------------------------------------------------------------------------------------------------------------------------
        client = boto3.client('ec2')
    	regions = client.describe_regions()
    	for r in regions['Regions']:
        	srcregion = r['RegionName']
        	regionclient = boto3.client('ec2', region_name=srcregion)
        	vpgw1=regionclient.describe_vpn_gateways(Filters=[{'Name':'state','Values':['available', 'attached', 'detached']},{'Name':'tag:'+NameTag+'','Values':[''+NameValue+'']}])
        	for k in vpgw1['VpnGateways']:
                	a = srcregion, k['VpnGatewayId']
                	vpngatewayids1.append(a)
    #---------------------------------------------------------------------------------------------------------------------------------------
    	for r in regions['Regions']:
        	srcregion = r['RegionName']
        	regionclient = boto3.client('ec2', region_name=srcregion)
        	vpns=regionclient.describe_vpn_connections(Filters=[{'Name':'state','Values':['available', 'attached', 'detached']},{'Name':'tag:'+NameTag+'','Values':[''+NameValue+'']}])
        	for l in vpns['VpnConnections']:
                	b = srcregion, l['VpnGatewayId']
                	vpnconnections.append(b)
    #-------------------------------------------------------------------------------------------------------------------------------------
    	if (len(vpnconnections)) == 0:
        	newvpcconnection = vpngatewayids1
    	else:
		newvpcconnection = list(set(vpngatewayids1) - set(vpnconnections))
		print (newvpcconnection)
    #-----------------------------------------------------------------------------------------------------------------------------------
    	print "-----------------------------------------------------------------------------------------------------------------------------------"
    	print "2. Listing all the Vitual Priavte Gatways with  Spoke tags: [('Region', 'VirtualPriavteGatwayID')] \n" +str(vpngatewayids1)
    	print "-----------------------------------------------------------------------------------------------------------------------------------"
    	print "3. Listing all the Vitual Priavte Gatways with  VPN Connections: [('Region', 'VirtualPriavteGatwayID')] \n" +str(vpnconnections)
    	print "-----------------------------------------------------------------------------------------------------------------------------------"
    	print "4. New VPN Connection that will be created for this Virtual Private Gateway: [('Region', 'VirtualPriavteGatwayID')])] \n" +str(newvpcconnection)
    	print "-----------------------------------------------------------------------------------------------------------------------------------"
    #----------------------------------------------------------------------------------------------------------------------------------
    	for n in newvpcconnection:
        	nr = boto3.client('ec2', region_name=n[0])
        	cg1=nr.create_customer_gateway(Type='ipsec.1',PublicIp=FortinetEIP1,BgpAsn=int(BGP))
        	nr.create_tags(Resources=[cg1['CustomerGateway']['CustomerGatewayId']], Tags=[{'Key': 'Name','Value': 'Transit VPC Endpoint1' }])
        	cg2=nr.create_customer_gateway(Type='ipsec.1',PublicIp=FortinetEIP2,BgpAsn=int(BGP))
        	nr.create_tags(Resources=[cg2['CustomerGateway']['CustomerGatewayId']], Tags=[{'Key': 'Name','Value': 'Transit VPC Endpoint2' }])
        	vpn1=nr.create_vpn_connection(Type='ipsec.1',CustomerGatewayId=cg1['CustomerGateway']['CustomerGatewayId'],VpnGatewayId=n[1],Options={'StaticRoutesOnly':False})
        	nr.create_tags(Resources=[vpn1['VpnConnection']['VpnConnectionId']],Tags=[{'Key': NameTag,'Value': NameValue }])
        	vpn_config1=nr.describe_vpn_connections(VpnConnectionIds=[vpn1['VpnConnection']['VpnConnectionId']])
        	vpn_config1=vpn_config1['VpnConnections'][0]['CustomerGatewayConfiguration']
        	s3_client = boto3.client('s3')
		s3_client.put_object(
              		Body=str.encode(vpn_config1),
              		Bucket=S3Bucket,
              		Key=''+S3Prefix+''+n[0]+'-'+vpn1['VpnConnection']['VpnConnectionId']+'.conf',
              		ACL='bucket-owner-full-control',
              		#ServerSideEncryption='aws:kms',
              		#SSEKMSKeyId=config['KMS_KEY']
              	)
		processfilenames.append(n[0]+'-'+vpn1['VpnConnection']['VpnConnectionId']+'.conf')
        	vpn2=nr.create_vpn_connection(Type='ipsec.1',CustomerGatewayId=cg2['CustomerGateway']['CustomerGatewayId'],VpnGatewayId=n[1],Options={'StaticRoutesOnly':False})
        	nr.create_tags(Resources=[vpn1['VpnConnection']['VpnConnectionId']],Tags=[{'Key': NameTag,'Value': NameValue }])
        	vpn_config2=nr.describe_vpn_connections(VpnConnectionIds=[vpn2['VpnConnection']['VpnConnectionId']])
        	vpn_config2=vpn_config2['VpnConnections'][0]['CustomerGatewayConfiguration']
        	s3_client = boto3.client('s3')
		s3_client.put_object(
              		Body=str.encode(vpn_config2),
              		Bucket=S3Bucket,
              		Key=''+S3Prefix+''+n[0]+'-'+vpn2['VpnConnection']['VpnConnectionId']+'.conf',
              		ACL='bucket-owner-full-control',
              		#ServerSideEncryption='aws:kms',
              		#SSEKMSKeyId=config['KMS_KEY']
              	)
		processfilenames.append(n[0]+'-'+vpn2['VpnConnection']['VpnConnectionId']+'.conf')
	if len(processfilenames)==0:
        	print "5. No process files available for Processing"
        	print "-----------------------------------------------------------------------------------------------------------------------------------"
    	else:
        	print "5. Uploading the 'Fortigateconfig.txt' file to S3bucket ......"
        	print "-----------------------------------------------------------------------------------------------------------------------------------"
        	boto3.client('s3').put_object(
                        Body=str.encode("|".join(processfilenames)),
                        Bucket=S3Bucket,
                        Key='Processfiles/Fortigateconfig.txt',
                        ACL='bucket-owner-full-control',
                        #ServerSideEncryption='aws:kms',
                        #SSEKMSKeyId=config['KMS_KEY']
                        )
if __name__ == '__main__':
    spokevgw_handler('event', 'handler')