[M07] Automatyczne wykonanie scryptu tworzącego użytkownika DB

[pnowosie]

Skrypt
Dokumentacja AWS - Run a Python script from GitHub

Polecenie które działa. Należy wykonać z jumphost-a nie z app

aws ssm send-command --document-name "AWS-RunRemoteScript" \
  --instance-ids "i-01...6c" \
  --parameters file://memes-generator/data/parameters/create-db-user.json

• parameters/create-db-user.json
• Wykonane z jumphost: "CommandId": "d8e35759-83c3-4af5-a2d5-7fbae6b69060"

         "GRANT\n\n----------ERROR-------\nERROR:  role \"appuser\" already exists\n",

Check which instances are ready to receive command [docs]

aws ssm describe-instance-information \
  --output text --query "InstanceInformationList[*]"

[pnowosie]

Wyświetlenie wykonywanych poleceń:

• aws ssm list-command-invocations

Szczegóły

aws ssm list-command-invocations \
  --command-id <COMMAND_ID> \
  --details

Przykład wykonania

{
    "CommandInvocations": [
        {
            "CommandId": "f0d9c272-a886-4126-b5ab-19e88b626b9c",
            "InstanceId": "i-01c...6c",
            "InstanceName": "",
            "Comment": "",
            "DocumentName": "AWS-RunRemoteScript",
            "DocumentVersion": "$DEFAULT",
            "RequestedDateTime": "2021-07-16T14:45:17.244000+02:00",
            "Status": "Failed",
            "StatusDetails": "Failed",
            "StandardOutputUrl": "",
            "StandardErrorUrl": "",
            "CommandPlugins": [
                {
                    "Name": "downloadContent",
                    "Status": "Success",
                    "StatusDetails": "Success",
                    "ResponseCode": 0,
                    "ResponseStartDateTime": "2021-07-16T14:45:17.810000+02:00",
                    "ResponseFinishDateTime": "2021-07-16T14:45:18.087000+02:00",
                    "Output": "Content downloaded to /var/lib/amazon/ssm/i-01c...6c/document/orchestration/f0d9c272-a886-4126-b5ab-19e88b626b9c/downloads/",
                    "StandardOutputUrl": "",
                    "StandardErrorUrl": "",
                    "OutputS3Region": "eu-west-1",
                    "OutputS3BucketName": "",
                    "OutputS3KeyPrefix": ""
                },
                {
                    "Name": "runPowerShellScript",
                    "Status": "Success",
                    "StatusDetails": "Success",
                    "ResponseCode": 0,
                    "ResponseStartDateTime": "2021-07-16T14:45:18.087000+02:00",
                    "ResponseFinishDateTime": "2021-07-16T14:45:18.087000+02:00",
                    "Output": "Step execution skipped due to unsatisfied preconditions: '\"StringEquals\": [platformType, Windows]'. Step name: runPowerShellScript",
                    "StandardOutputUrl": "",
                    "StandardErrorUrl": "",
                    "OutputS3Region": "eu-west-1",
                    "OutputS3BucketName": "",
                    "OutputS3KeyPrefix": ""
                },
                {
                    "Name": "runShellScript",
                    "Status": "Failed",
                    "StatusDetails": "Failed",
                    "ResponseCode": 127,
                    "ResponseStartDateTime": "2021-07-16T14:45:18.087000+02:00",
                    "ResponseFinishDateTime": "2021-07-16T14:45:19.227000+02:00",
                    "Output": "\n----------ERROR-------\n\nAn error occurred (AccessDeniedException) when calling the GetSecretValue operation: User: arn:aws:sts::508447575528:assumed-role/memes-generator-application-applicati-InstanceRole-1DDIHUZMYUXRH/i-01c00938316481b6c is not authorized to perform: secretsmanager:GetSecretValue on resource: memes-generator/dev/data/rds/masteruser-secret\n/var/lib/amazon/ssm/i-01c00938316481b6c/document/orchestration/f0d9c272-a886-4126-b5ab-19e88b626b9c/downloads/create-db-app-user.sh: line 23: psql: command not found\n/var/lib/amazon/ssm/i-01c...6c/document/orchestration/f0d9c272-a886-4126-b5ab-19e88b626b9c/downloads/create-db-app-user.sh: line 24: psql: command not found\nfailed to run commands: exit status 127",
                    "StandardOutputUrl": "",
                    "StandardErrorUrl": "",
                    "OutputS3Region": "eu-west-1",
                    "OutputS3BucketName": "",
                    "OutputS3KeyPrefix": ""
                }
            ],
            "ServiceRole": "",
            "NotificationConfig": {
                "NotificationArn": "",
                "NotificationEvents": [],
                "NotificationType": ""
            },
            "CloudWatchOutputConfig": {
                "CloudWatchLogGroupName": "",
                "CloudWatchOutputEnabled": false
            }
        }
    ]
}