Initial commit

remove_detached_igws.py

@@ -0,0 +1,91 @@
+#!/usr/bin/env python3
+# Scan all VPCs for Internet Gateways that are not attached
+# Delete them
+
+import urllib3
+import sys
+import boto3
+import botocore
+import argparse
+
+session = None
+debug = False
+
+class initArgs(object):
+
+    def __init__(self):
+        self.parser = argparse.ArgumentParser()
+        self.parser.add_argument(
+            "--no-verify-ssl", action='store_true', help="Disable SSL verification.")
+        self.parser.add_argument(
+            "--profile", type=str, help="The credential profile used to execute this job.  This configuration is not required if 'aws configure' has been run and a [default] profile is defined in ~/aws/crednetial", required=False)
+        self.parser.add_argument( "--debug", action='store_true', help="don't actually do anything")
+        self.args = self.parser.parse_args(sys.argv[1:])
+
+    def get_args(self):
+        return self.args
+
+
+def getRegions():
+    try:
+        client = session.client('ec2', verify=False)
+    except botocore.exceptions.NoRegionError as e:
+        print("Error initiating AWS client!")
+        print("Have you configured your AWS region?  (e.g. in ~/aws/config)  See 'aws configure' ")
+        print("If you are using a specific profile, use --profile")
+        exit(1)
+
+    regions = []
+
+    try:
+        for region in client.describe_regions()['Regions']:
+            regions.append(region['RegionName'])
+            # print(region['RegionName'])
+        return regions
+    except botocore.exceptions.ClientError as e:
+        print("Error executing AWS commands!")
+        print("Have you configured your AWS credentials?  (e.g. in ~/aws/crednetial)  See 'aws configure' ")
+        print("Or perhaps the access token has expired?")
+        exit(1)
+
+def detach_internet_gateways(vpcId, client):
+    igws = client.describe_internet_gateways( )
+
+    for igw in igws['InternetGateways']:
+        igwId = igw['InternetGatewayId']
+        if( len(igw['Attachments']) == 0 ):
+            if not debug:
+                client.delete_internet_gateway( InternetGatewayId=igwId )
+                print("actually ", end="")
+            else:
+                print("wanted to ", end="")
+            
+            print("delete Internet Gateway " + igwId + " from " + vpcId + "...")
+
+def scan_vpcs(regions):
+    client = None
+    count = 0
+
+    for region in regions:
+        client = session.client( 'ec2', verify=False, region_name=region )
+        response = client.describe_vpcs( )
+
+        print("[{}]: {} VPCs".format(region, len(response['Vpcs'])))
+        if( len(response['Vpcs']) > 0 ):
+            for vpcs in response['Vpcs']:
+                vpcId = vpcs['VpcId']
+                detach_internet_gateways(vpcId, client)
+                count += 1
+
+    return count
+
+if __name__ == "__main__":
+    args = initArgs().get_args()
+    if( args.debug == True ):
+        debug = True
+
+    urllib3.disable_warnings()
+    session = boto3.Session(profile_name=args.profile)
+    print("Scanning all VPCs in all regions...\n")
+    count = scan_vpcs(getRegions())
+    print("{} VPCs scanned.".format(count))