search

ansible-collections / community.aws

Ansible Collection for Community AWS
GNU General Public License v3.0
188 stars 396 forks source link

Add support for AWS Organization Units #203

Open tremble opened 4 years ago

tremble commented 4 years ago
SUMMARY

Revival of https://github.com/ansible/ansible/issues/48795 Possible PR to revive: https://github.com/ansible/ansible/pull/63052

We use AWS Organizations to separate concerns when using AWS. E.g. one project or customer may get a separate AWS Account in our organization. This helps separate billing and isolate users access.

Once the account is set up, we create users, S3 buckets and so on in this account as required.

Initially proposed by @kbakk +1-ed by @ayaffe @jimsmith @webminster

ISSUE TYPE
COMPONENT NAME

plugin/modules/aws_organization_units.py

ADDITIONAL INFORMATION

The original PR was really close and looks like it just needs a little nit-cleaning. Unfortunately testing is a little difficult due to the nature of OUs.

Also mentioned by https://github.com/redhat-cop/agnosticd/issues/466

ansibullbot commented 4 years ago

Files identified in the description:

If these files are inaccurate, please update the component name section of the description or use the !component bot command.

click here for bot help

ansibullbot commented 4 years ago

cc @Akasurde @BobBoldin @Constantin07 @Deepakkothandan @Etherdaemon @Java1Guy @Madhura-CSI @MichaelBaydoun @Shaps @Sodki @Zeekin @aidan- @akazakov @alachaum @aljazkosir @amir343 @anryko @axc450 @bekelchik @brandond @captainkerk @chenl87 @defunctio @dennisconrad @dkhenry @fiunchinho @fivethreeo @flowerysong @garethr @gobins @gurumaia @hsingh @hyperized @iiibrad @infectsoldier @j-carl @jarv @jillr @jimbydamonk @joelthompson @jonhadfield @jonmer85 @jsdalton @kaczynskid @leedm777 @linuxdynasty @loia @markuman @matt-telstra @michaeljs1990 @miha-plesko @mikedlr @minichate @mjschultz @mmochan @mmoyle @mpechner @mtraynham @nand0p @naslanidis @nathanwebsterdotme @nerzhul @nickball @orthanc @ozbillwang @piontas @pjodouin @prasadkatti @psykotox @ptux @pwnall @raags @rafaeldriutti @rickmendes @rrey @ruimoreira @ryansydnor @s-hertel @sbj-ss @scottanderson42 @shepdelacreme @slapula @stefanhorning @steynovich @tastychutney @tdekeyser @timmahoney @tomislacker @tsiganenok @viper233 @willricardo @willthames @wilvk @wimnat @xlab-si @yaakov-github @zacblazic @zimbatm click here for bot help

ansibullbot commented 3 years ago

Files identified in the description:

If these files are inaccurate, please update the component name section of the description or use the !component bot command.

click here for bot help

ansibullbot commented 3 years ago

cc @vorotech @zeekin click here for bot help

gravesm commented 3 years ago

@p0tr3c Would you be interested in resubmitting your old PR for this feature in this repository?

ansibullbot commented 3 years ago

Files identified in the description:

If these files are inaccurate, please update the component name section of the description or use the !component bot command.

click here for bot help

tremble commented 3 years ago

I have some half written code in https://github.com/tremble/community.aws/tree/organization/scps (for handling SCPs and OUs) I hope to complete it, but it may be a while

alinabuzachis commented 5 months ago

@tremble Are you still interested in working on a PR for these new modules? Thanks.

tremble commented 5 months ago

@alinabuzachis I've not actively worked on it for a good while, the code I did write is there if anyone wants to take over.

There's a mostly written Inventory plugin: https://github.com/tremble/community.aws/tree/inventory/organization and some half written code for OUs and SCPs: https://github.com/tremble/community.aws/tree/organization/scps

Main blocker has been avoiding a lack of desire to write unit tests (and a shift in what I've been working on for $dayjob)