diff --git a/remove_detached_igws.py b/remove_detached_igws.py new file mode 100644 index 0000000..7698e19 --- /dev/null +++ b/remove_detached_igws.py @@ -0,0 +1,91 @@ +#!/usr/bin/env python3 +# Scan all VPCs for Internet Gateways that are not attached +# Delete them + +import urllib3 +import sys +import boto3 +import botocore +import argparse + +session = None +debug = False + +class initArgs(object): + + def __init__(self): + self.parser = argparse.ArgumentParser() + self.parser.add_argument( + "--no-verify-ssl", action='store_true', help="Disable SSL verification.") + self.parser.add_argument( + "--profile", type=str, help="The credential profile used to execute this job. This configuration is not required if 'aws configure' has been run and a [default] profile is defined in ~/aws/crednetial", required=False) + self.parser.add_argument( "--debug", action='store_true', help="don't actually do anything") + self.args = self.parser.parse_args(sys.argv[1:]) + + def get_args(self): + return self.args + + +def getRegions(): + try: + client = session.client('ec2', verify=False) + except botocore.exceptions.NoRegionError as e: + print("Error initiating AWS client!") + print("Have you configured your AWS region? (e.g. in ~/aws/config) See 'aws configure' ") + print("If you are using a specific profile, use --profile") + exit(1) + + regions = [] + + try: + for region in client.describe_regions()['Regions']: + regions.append(region['RegionName']) + # print(region['RegionName']) + return regions + except botocore.exceptions.ClientError as e: + print("Error executing AWS commands!") + print("Have you configured your AWS credentials? (e.g. in ~/aws/crednetial) See 'aws configure' ") + print("Or perhaps the access token has expired?") + exit(1) + +def detach_internet_gateways(vpcId, client): + igws = client.describe_internet_gateways( ) + + for igw in igws['InternetGateways']: + igwId = igw['InternetGatewayId'] + if( len(igw['Attachments']) == 0 ): + if not debug: + client.delete_internet_gateway( InternetGatewayId=igwId ) + print("actually ", end="") + else: + print("wanted to ", end="") + + print("delete Internet Gateway " + igwId + " from " + vpcId + "...") + +def scan_vpcs(regions): + client = None + count = 0 + + for region in regions: + client = session.client( 'ec2', verify=False, region_name=region ) + response = client.describe_vpcs( ) + + print("[{}]: {} VPCs".format(region, len(response['Vpcs']))) + if( len(response['Vpcs']) > 0 ): + for vpcs in response['Vpcs']: + vpcId = vpcs['VpcId'] + detach_internet_gateways(vpcId, client) + count += 1 + + return count + +if __name__ == "__main__": + args = initArgs().get_args() + if( args.debug == True ): + debug = True + + urllib3.disable_warnings() + session = boto3.Session(profile_name=args.profile) + print("Scanning all VPCs in all regions...\n") + count = scan_vpcs(getRegions()) + print("{} VPCs scanned.".format(count))