sys_user_management: cleanup

sosw / sosw-master-classes

Agenda and materials for master classes

MIT License

2 stars 7 forks source link

sys_user_management: cleanup #2

Open ngr opened 6 months ago

ngr commented 6 months ago

Implement a custom method that will be able to do the following if Lambda is called with a {"job": "cleanup"} event.

Go Region by Region and delete all Lambda functions except ones in config['cleanup_exclude_list_lambda']
Delete all IAM Users
Delete all IAM UserGroups
Delete all IAM Customer Managed policies
Delete all IAM Roles except the cleanup_exclude_list_role

Return stats of what is has removed.

ngr commented 6 months ago

Exclude Roles:

AWSServiceRoleForComputeOptimizer 
AWSServiceRoleForOrganizations
AWSServiceRoleForSupport
AWSServiceRoleForTrustedAdvisor
OrganizationAccountAccessRole

the Role of the Lambda itself.