AWS Identity and Access Management (IAM)

The action should not fail nor stop a playbook execution:

• if successful (few usernames were valid):print "Successfully added the following users to IAM: <User names>"
• If error - users already exists:Print "Could not add the following users to IAM: <Usernames>. Names must be unique within an account.
• If error (few usernames were invalid):Print "Could not add the following users to IAM: <Usernames>. Usernames must contain only alphanumeric characters and/or the following: +=,.@ -.
• If error (raise limitation. Max 5000 users per account):Print "Could not add the following users to IAM: <Usernames>. Reach to Users limitation in your aws account.

Note:If nothing happened: all users are invalid/exists/limit → action should failed

The action should fail and stop a playbook execution:

• If not successful (all usernames were invalid, wrong creds, no connection, other error):print "Error executing action 'Create a User'. Reason: {exception.stacktrace}

Note:In case of all usernames were invalid, print " "Error executing action 'Create a User'. Reason: {invalid usernames}: Usernames must contain only alphanumeric characters and/or the following: +=,.@-. {existing usernames}: Names must be unique within an account.

The action should not fail nor stop a playbook execution:

• if successful:print "Successfully added the user <User name> to the IAM group: <Group name>"
• If error - Group not exist or/and User not exist:
  group not exist: Print "Could not add <UserName> to <Group name>. The Group <group name> cannot be found.
  user not exist/both:Print "Could not add <UserName> to <Group name>. The user <user name> cannot be found.
• If error
  User limitation - IAM user can be a member of 10 groups
  Group limitation - 5000 users can be in a group
  Print "Could not add <UserName> to <Group name> because it attempted to create resources beyond the current AWS account limits."

The action should fail and stop a playbook execution:

• If not successful (wrong creds, no connection, other sdk error):print "Error executing action 'Add a User to a Group. Reason: {exception.stacktrace}

The action should not fail nor stop a playbook execution:

• if successful:print "<User name> has been removed from group: <Group name>"
• If error - Group not exist or/and User not exist:
  group not exist: Print "Could not remove <UserName> from <Group name>. The Group <group name> cannot be found.
  user not exist/both:Print "Could not remove <UserName> from <Group name>. The user <user name> cannot be found.
• If error
  User limitation - IAM user can be a member of 10 groups
  Group limitation - 5000 users can be in a group
  Print "Could not remove <UserName> from <Group name> because it attempted to create resources beyond the current AWS account limits."

The action should fail and stop a playbook execution:

• If not successful (wrong creds, no connection, other sdk error):print "Error executing action 'Remove a User from a Group. Reason: {exception.stacktrace}

The action should not fail nor stop a playbook execution:

• if successful:print "<Policy name> policy was successfully created"

The action should fail and stop a playbook execution:

• If error - Policy already exists:Print "Could not create <policy name> policy. Policy names must be unique within an account.
• If error - policy name was invalid:Print "Could not create <policy name> policy. Policy names must contain only alphanumeric characters and/or the following: +=,.@_-.
• If error - Policy doc was malformed :Print "Could not create <policy name> policy. The policy document was malformed.Reason: {exception.stacktrace}

if not successful (LimitExceededException, wrong creds, no connection, other error):print "Error executing action 'Create a Policy'. Reason: {exception.stacktrace}

The action should not fail nor stop a playbook execution:

• if successful (few/all group names were valid):print "Successfully added the following groups to IAM: <Group names>"
• If error - group already exists:Print "Could not add the following groups to IAM: <Group names>. Names must be unique within an account.
• If error (few group names were invalid):Print "Could not add the following groups to IAM: <Group names>. Group names must contain only alphanumeric characters and/or the following: +=,.@_-.
• If error (raise limitation. Max 500 groups per account):Print "Could not add the following groups to IAM: <Group names>. Reach to Groups limitation in your aws account.

The action should fail and stop a playbook execution:

• if not successful (all names were invalid, wrong creds, no connection, other error):print "Error executing action 'Create a Group. Reason: {exception.stacktrace}

The action should not fail nor stop a playbook execution:

• if successful:print "Successfully listed available policies in AWS IAM"
• If 'Max Policies' value < matched policies based on the filter:Print "Successfully listed available policies in AWS IAM. Please note, there are additional policies that match the provided filter."
• If no data:Print "No Policies were found in AWS IAM"

The action should fail and stop a playbook execution:

• if not successful (wrong credentials, no connection to server, other server error, max>1000):print "Error executing action 'List Policies. Reason: {exception.stacktrace}

Title:IAM Policies

Columns:

Policy Name

Policy ID

Create Date

Update Date

The action should not fail nor stop a playbook execution:

• if successful:print "Policy was attached to <Identity Type>: <Identity Name>"

The action should fail and stop a playbook execution:

• If error -:Print "Could not create <policy name> policy. Policy names must be unique within an account.
• If error - identity name was invalid:Print "Could not attach <policy name> to <Identity Type>: <Identity Name>. Names must contain only alphanumeric characters and/or the following: +=,.@_-.
• if not successful (wrong credentials, no connection to server, other server error):print "Error executing action 'Attach a Policy'. Reason: {exception.stacktrace}