Merge pull request #119 from tremble/launch_template

Support for EC2 Launch Templates
mattclay · Dec 14, 2020 · 0095d5e · 0095d5e
2 parents a578710 + 5d7a74f
commit 0095d5e
Show file tree

Hide file tree

Showing 3 changed files with 34 additions and 3 deletions.
diff --git a/aws/policy/compute.yaml b/aws/policy/compute.yaml
@@ -56,10 +56,14 @@ Statement:
       - ec2:AttachVolume
       - ec2:CreateImage
       - ec2:CreateKeyPair
+      - ec2:CreateLaunchTemplate
+      - ec2:CreateLaunchTemplateVersion
       - ec2:CreateSnapshot
       - ec2:CreateTags
       - ec2:CreateTransitGateway
       - ec2:DeleteKeyPair
+      - ec2:DeleteLaunchTemplate
+      - ec2:DeleteLaunchTemplateVersions
       - ec2:DeleteSnapshot
       - ec2:DeleteTags
       - ec2:DeleteTransitGateway
@@ -72,15 +76,19 @@ Statement:
       - ec2:DescribeInstances
       - ec2:DescribeInstanceStatus
       - ec2:DescribeKeyPairs
+      - ec2:DescribeLaunchTemplates
+      - ec2:DescribeLaunchTemplateVersions
       - ec2:DescribeRegions
       - ec2:DescribeSnapshots
       - ec2:DescribeTags
       - ec2:DescribeVolumes
       - ec2:DetachVolume
       - ec2:DisassociateIamInstanceProfile
+      - ec2:GetLaunchTemplateData
       - ec2:ImportKeyPair
       - ec2:ModifyImageAttribute
       - ec2:ModifyInstanceAttribute
+      - ec2:ModifyLaunchTemplate
       - ec2:ModifyVolume
       - ec2:RegisterImage
       - ec2:ReplaceIamInstanceProfileAssociation

diff --git a/aws/terminator/compute.py b/aws/terminator/compute.py
@@ -462,3 +462,29 @@ def terminate(self):
         except botocore.exceptions.ClientError as ex:
             if not ex.response['Error']['Code'] == 'ResourceInUseFault':
                 raise
+
+
+class LaunchTemplate(Terminator):
+    @staticmethod
+    def create(credentials):
+        return Terminator._create(
+            credentials,
+            LaunchTemplate,
+            'ec2',
+            lambda client: client.describe_launch_templates()['LaunchTemplates']
+        )
+
+    @property
+    def id(self):
+        return self.instance['LaunchTemplateId']
+
+    @property
+    def name(self):
+        return self.instance['LaunchTemplateName']
+
+    @property
+    def created_time(self):
+        return self.instance['CreateTime']
+
+    def terminate(self):
+        self.client.delete_launch_template(LaunchTemplateId=self.id)
diff --git a/hacking/aws_config/test_policies/compute.yaml b/hacking/aws_config/test_policies/compute.yaml
@@ -19,9 +19,6 @@ Statement:
   - Sid: AllowGlobalUnrestrictedResourceActionsWhichIncurFees
     Effect: Allow
     Action:
-      - ec2:*LaunchTemplate
-      - ec2:*LaunchTemplateVersion
-      - ec2:*LaunchTemplateVersions
       - ec2:ReportInstanceStatus
       - SNS:ListSubscriptions
       - SNS:SetTopicAttributes