add-aws-s3-ips-to-nacl

This python/ansible script adds NACL rules to allow access to and from AWS S3 IP ranges

I am running this code from within a virtual env, you need to install pipenv or just use python's built in venv to create a virtual env, this os

Prerequisites:

• I'm running this code on Centos 7.

• Make sure you have an AWS Account, and it should have at least the default VPC, you will need it's id, place it in the variable: vpc_id in the file main.yml

• You will also need, the namess of the associated subnets of the vpc, these should be placed in the varaible: subnets in the file main.yml

• Configure you aws credentials (Access Key ID and Secret Key) on your computer, follow this page:

https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html#cli-quick-configuration-multi-profiles

After cloning it:

1. from the root project directory run:

pipenv --python 3.7

2. To activate run

pipenv shell

3. Install boto3, botocore and json:

pipenv install boto3 botocore json requests

4. Locate the path of your virtual environment interpreter by running:

pipenv --py

you will need this path, it will replace the value of the variable: ansible_python_interpreter in the hosts file located on the root of the project directory.

4. To run:

AWS_PROFILE=myawsprofile ansible-playbook -i hosts -e 'region=us-east-1' main.yml