如何使用 python boto3 从多个 AWS 账户生成 EC2 清单

所以，这里我写了一个python boto3脚本来生成ec2库存；

它在单个 AWS 配置文件中按预期工作。下面的脚本;

import boto3

session = boto3.Session(profile_name='dev')
ec2 = session.clIEnt('ec2',region_name='ap-south-1')
response = ec2.describe_instances()

import datetiR_779_11845@e
import csv
time = datetiR_779_11845@e.datetiR_779_11845@e.Now().strftime ('%Y-%m-%d-%H-%M-%s')
filename_describe_instances = ('ec2_inventory_me-south-1_' + time + '.csv')
fIEldnames = ['Instance_name','ImagEID','InstancEID','InstanCEType','Availability_Zone','Platform','PrivateIpaddress','PublicIpaddress','State','subnetID','VpcID','Environment','AccountID']



with open(filename_describe_instances,'w',newline='') as csvfile:
    writer = csv.writer(csvfile,dialect='excel')
    writer.writerow(fIEldnames)
    for Reserv in response['Reservations']:
        for Insta in Reserv['Instances']:
            instance_imagEID = Insta.get('ImagEID','NulL')
            instance_InstancEID = Insta.get('InstancEID','NulL')
            instance_InstanCEType = Insta.get('InstanCEType','NulL')
            instance_Availability_Zone = Insta['Placement'].get('AvailabilityZone','NulL')
            instance_Platform = Insta.get('Platform','linux')
            instance_Private_IP = Insta.get('PrivateIpaddress','NulL')
            instance_Public_IP = Insta.get('PublicIpaddress','NulL')
            instance_State = Insta['State'].get('name','NulL')
            instance_subnet = Insta.get('subnetID','NulL')
            instance_VPCID = Insta.get('VpcID','NulL')
            instance_ownerID = Reserv.get('ownerID','NulL')

            Tags_List = []
            for n in Insta.get('Tags','NulL'):
                if n.get('Key','NulL') == 'name':
                    instance_name = n.get('Value','NulL')
                if n.get('Key','NulL') == 'Environment':
                    instance_Environment = n.get('Value','NulL')

            raw = [instance_name,instance_imagEID,instance_InstancEID,instance_InstanCEType,instance_Availability_Zone,instance_Platform,instance_Private_IP,instance_Public_IP,instance_State,instance_subnet,instance_VPCID,instance_Environment,instance_ownerID]

            writer.writerow(raw)
            for o in raw:
                o = 'NulL'
            raw = []

csvfile.close()
@H_944_10@

# set up your .csv writer,etc outside the loop

# iterate over your profiles
profiles = ['Dev','Test','DevOps','Prepared','Prod']

for name in profiles:
    session = boto3.Session(profile_name=Name)
    ec2 = session.client('ec2')
    response = ec2.describe_instances()
    #format your row and write to the .csv
@H_944_10@

[management]
region=us-West-2
aws_access_key_id=...
aws_secret_access_key=...
@H_944_10@

[profile foo-account]
source_profile=management
role_arn=arn:aws:iam::[foo-account-id]:role/Inventory
@H_944_10@

{
    "Version": "2012-10-17","Statement": [
        {
            "Effect": "Allow","Principal": {
                "AWS": "arn:aws:iam::[foo-account-id]:user/[your-user]"
            },"Action": "sts:AssumeRole"
        }
    ]
}
@H_944_10@

{
    "Version": "2012-10-17","Action": "sts:AssumeRole","resource": "*"
        }
    ]
}
@H_944_10@

accounts = ['123...789','234...890',]
sts = boto3.client('sts') #assumes you have a default profile set
for id in accounts:
    role_arn = f'arn:aws:iam::{iD}:role/Inventory'
    creds = sts.assume_role(role_arn=role_arn,role_session_name='some-name')
    session = boto3.Session(aws_access_key_id=creds['AccessKeyId'],...)
    ec2 = session.client('ec2')
@H_944_10@