Amazon Web Services (AWS)

export AWS_PROFILE=your_AWS_profile
export AWS_DEFAULT_REGION=us-east-1
export account_id=$(aws sts get-caller-identity --output json | jq -r .Account)

aws ec2 describe-snapshots --owner-ids $account_id | jq -r '.Snapshots[] | .VolumeId,.SnapshotId'
aws ec2 describe-volumes | jq -r '.Volumes[] | .VolumeId'
aws ec2 describe-volumes | jq '.Volumes[] | select(.Tags[].Value == "*mongo*")'
aws ec2 describe-snapshots --filters 'Name=status,Values=pending'
aws ec2 describe-volumes --filters 'Name=tag:Name,Values=*mongo*' --query 'Volumes[*].VolumeId'

aws s3 cp "s3://${bucket_name}/${NAME}/pki/issued/ca/" . --recursive --exclude '*' --include '*.crt'

for ssm_param in $(aws ssm describe-parameters | jq -r .Parameters[].Name); do
  aws ssm get-parameters --name "$ssm_param" --with-decryption | jq '.Parameters[] | { "Name": .Name, "Value": .Value }'
done

aws ssm get-parameters-by-path --path "/Services/pizza" --recursive --with-decryption > pizza_secrets.json

aws ec2 describe-volumes --region us-east-2 | jq '.Volumes[] | select(.Encrypted==false) | .Tags[]? | select(.Key=="kubernetes.io/created-for/pvc/name") | .Value'

aws iam list-roles | jq -r '.Roles[] | select(.RoleName|test("AWSReservedSSO")) | .Arn'

export account_id=$(aws sts get-caller-identity --output json | jq -r .Account)
export AWS_PROFILE=your_profile_name
export AWS_DEFAULT_REGION=us-east-1
export temp_dir=/tmp/delete_snapshots

#aws ec2 describe-snapshots --owner-ids $account_id | jq -r '.Snapshots[] | .VolumeId,.SnapshotId'
#aws ec2 describe-volumes | jq -r '.Volumes[] | .VolumeId'
#aws ec2 describe-volumes | jq '.Volumes[] | select(.Tags[].Value == "*mongo*")'
#aws ec2 describe-snapshots --filters 'Name=status,Values=pending'
#aws ec2 describe-volumes --filters 'Name=tag:Name,Values=*mongo*' --query 'Volumes[*].VolumeId'

for region in $(aws ec2 describe-regions | jq -r .Regions[].RegionName); do
  export AWS_REGION="${region}"
  aws ec2 describe-volumes > "${temp_dir}/volumes-${region}.json"
  cat "${temp_dir}/volumes-${region}.json" | jq -r '.Volumes[] | .VolumeId' > "${temp_dir}/volume-ids-${region}.txt"
  aws ec2 describe-snapshots --owner-ids $account_id > "${temp_dir}/snapshots-${region}.json"
  cat "${temp_dir}/snapshots-${region}.json" | jq -cr '.Snapshots[] | [ .VolumeId, .StartTime, .SnapshotId ]' > "${temp_dir}/snapshots-${region}.txt"
  while read snapshot; do
    volume_id=$(echo $snapshot | cut -d\" -f 2)
    start_time=$(date +%s -d $(echo $snapshot | cut -d\" -f 4))
    snapshot_id=$(echo $snapshot | cut -d\" -f 6)
    if ! (grep -q "$volume_id" "${temp_dir}/volume-ids-${region}.txt"); then
      echo "aws ec2 delete-snapshot --snapshot-id $snapshot_id # original volume no longer exists"
    elif [[ $start_time -lt $(date +%s -d '3 months ago') ]]; then
      echo "aws ec2 delete-snapshot --snapshot-id $snapshot_id # snapshot is older than 3 months"
    fi
  done < "${temp_dir}/snapshots-${region}.txt" | tee "${temp_dir}/delete-snapshots-${region}.sh"
done