Temporarily poke holes in AWS EC2 security groups!
I work from a number of different physical locations. Manually adding a cafe's / hotel's / bar's IP to a security group gets tiresome. Wouldn't it be nice to automate it?
Inspired by cli-ec2-allow-pub-ip, this tool will temporarily add your public IP (and specified ports) to one or more EC2 security groups, then revoke it when you're done doing whatever it is you need to do. Neat!
- Python 2.x
- Boto
pip install --editable .
Note: Boto requires your AWS secret key in ~/.boto or ~/.aws/credentials -- see their docs for more info.
Sesamum expects a single configuration file located in the repo root, sesamum.conf. Specify a different file with the --config flag.
Configuration options:
blacklisted_ips- comma separated list of IP addresses for which script should refuse to make changes on AWS.
List all security groups using the default region / profile
sesamum --list-groups
List all security groups for the specified region / profile
sesamum --region=us-east-2 --profile=production --list
Dryrun open port 5432 on the database security group
sesamum --dry-run database:5432
Open ports 4505 through 4506 on the sg-1123581 security group, but for reals
sesamum sg-1123581:4505-4506
Mix and match.
sesamum sg-1123581:4505-4506 database:5432 command-control:22