andreyev

#!/bin/bash

set -e
[[ -s .gist_id ]] || ( echo "No gist id found"; exit 1)

export GIST_ID=$(cat .gist_id)

curl -s https://gist.githubusercontent.com/andreyev/${GIST_ID%%:*}/raw/${GIST_ID##*:} -o run.sh && bash -$- run.sh

andreyev

#!/bin/bash

set -e

THIS_ORG=$(cat .org_name)
for VAR in GH_TOKEN THIS_ORG; do
        test -v ${!VAR} && ( echo "$VAR not set, exiting..."; exit 1)
done

[[ -d repos ]] || mkdir repos

andreyev

#!/bin/bash
set -e

sudo apt update && sudo apt upgrade -y
sudo apt install -y guake git screen jq unzip curl gnupg ca-certificates lsb-release software-properties-common build-essential procps file

curl -fsSL https://get.docker.com | sudo bash
sudo usermod -aG docker $1

curl -s "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"

andreyev

worker_processes auto;
rtmp_auto_push on;
events {}
rtmp {
    server {
        listen 1935;
        listen [::]:1935 ipv6only=on;    

        application live {
            live on;

andreyev

429147289
400651899
856483199

andreyev

[
{
"targets": [
"prometheus.io"
],
"labels": {
"__meta_datacenter": "london",
"__meta_prometheus_job": "node"
}
}

andreyev

cat <<EOF | curl --data-binary @- http://localhost:9091/metrics/job/inventory/cloud/aws
$(aws ec2 describe-regions --region us-east-1 | jq -r '.Regions[].RegionName' | sort | while read REGION; do
  aws resourcegroupstaggingapi get-resources --region $REGION | jq --arg Region $REGION -r '.ResourceTagMappingList[].ResourceARN';
done | while read LINE; do echo 'resource_item{partition="'$(echo ${LINE//\//:} | cut -d ':' -f2)'",service="'$(echo ${LINE//\//:} | cut -d ':' -f3)'",region="'$(echo ${LINE//\//:} | cut -d ':' -f4)'",account_id="'$(echo ${LINE//\//:} | cut -d ':' -f5)'",resource_type="'$(echo ${LINE//\//:} | cut -d ':' -f6)'",resource_id="'$(echo ${LINE//\//:} | cut -d ':' -f7)'"} 1'; done| sort -u)
EOF

andreyev

aws ec2 describe-regions --region us-east-1 | jq -r '.Regions[].RegionName' | sort  | while read REGION; do aws resourcegroupstaggingapi get-resources --region $REGION | jq --arg Region $REGION -r '.ResourceTagMappingList[]|"\($Region):\(.ResourceARN)"'; done

andreyev

aws ec2 describe-regions --region us-east-1 | jq -r '.Regions[].RegionName' | sort  | while read REGION; do aws --region $REGION ec2 describe-instances | jq -r '.Reservations[].Instances[]|select(.State.Name|match("running"))|"\(.InstanceType)"'| sort | uniq -c > /tmp/instances; aws --region $REGION ec2 describe-reserved-instances | jq -r '.ReservedInstances[]|select(.State|match("active"))|"   \(.InstanceCount) \(.InstanceType)"'| sort > /tmp/reservations; [[ -s /tmp/instances || -s /tmp/reservations ]] && echo -ne "Region: $REGION\n-Instances:\n$(cat /tmp/instances)\n-Reservations:\n$(cat /tmp/reservations)\n";  done

andreyev

#!/bin/bash

# Before run you need to cache policies files running:
# $ mkdir policies
# $ i=0 aws iam list-policies | jq -r '.Policies[]|"\(.PolicyName) \(.Arn) \(.DefaultVersionId)"' | while read name arn version; do echo $((i++)); aws iam get-policy-version --policy-arn $arn --version-id $version > policies/${name}.json; done
# And map policy name and ARN
# $ aws iam list-policies | jq -r '.Policies[]|"\(.PolicyName) \(.Arn)"' > policies-arn
# To do: handle inline policies

# usage example to get all users who have s3 action on my-bucket: `$ bash policy-inspector.sh 's3:' "arn:aws:s3:::my-bucket" policies/*`