How to use AWS PowerShell cmdlets with Filter

March 23, 2017 by Saugata

I personally can’t imagine supporting a big infrastructure without introducing automation and to automate something you have to use command line. If you are more into Windows and started working on AWS for your clients, then I assume that you would love to start managing AWS using AWS PowerShell Module like I do. AWS Console is really good and informative but when it comes to bulk activity I am always depending on PowerShell.

There is a very good documentation created by Amazon for AWS PowerShell, you will get the basic help for all the available PowerShell cmdlet from here. It will be very much helpful for you to start working on AWS PowerShell, but unfortunately when it comes to using filter available for those cmdlet, you won’t be able to find any good example. Using filter on a AWS cmdlet will be a smart move and it also reduce the total execution time. Initially I also struggled to get this working due to lack of examples, but later I figured it out, and now I always try to utilize filter and I am writing this to you help you understand how easily we could use this.

Some of the sample, hope this will help you.

Extract the list of the snapshots under your ownership.

$Filter.Name = "owner-id"
$Filter.Value = "XXXXXXXXXXXX"
Get-EC2Snapshot -Filter $Filter -Region AWS-REGION

$Filter.Name = "owner-id"

$Filter.Value = "XXXXXXXXXXXX"

Get-EC2Snapshot -Filter $Filter -Region AWS-REGION

This script, I am using filter to identify the snapshots mapping with instance

$GetAllRegions = (Get-AWSRegion).Region
#or Specific Region
#$GetAllRegions = "us-east-1","us-west-2","ap-southeast-2"
$GetAllSnapshots=@()
$GetAllRegions | % {
    $getSnaps = $null
    $RG = $_
    $SFilter = new-object Amazon.EC2.Model.Filter
    $SFilter.Name = "owner-id"
    $SFilter.Value = "XXXXXXXXXXXX "    
    $getSnaps = Get-EC2Snapshot -Filter $SFilter -Region $RG
    foreach ($getSnap in $getSnaps){  
        $IFilter = new-object Amazon.EC2.Model.Filter
        $IFilter.Name = "block-device-mapping.volume-id"
        $IFilter.Value = "$($getSnap.VolumeId)"
        $getInstanceID = (Get-EC2Instance -Filter $IFilter -Region $RG).Instances.InstanceID        
        if ($getInstanceID){
            $getSnap | Add-Member @{LinkedInstanceID=$getInstanceID}
        }else{
            $getSnap | Add-Member @{LinkedInstanceID="Missing"}
        }
        $getSnap | select Description, SnapshotID, VolumeID, LinkedInstanceID
        $GetAllSnapshots += $getSnap
    }
}
$GetAllSnapshots | select Description, SnapshotID, VolumeID, VolumeSize, LinkedInstanceID | Export-Csv $env:USERPROFILE\Desktop\SnapR.csv -NoTypeInformation

$GetAllRegions = (Get-AWSRegion).Region

#or Specific Region

#$GetAllRegions = "us-east-1","us-west-2","ap-southeast-2"

$GetAllSnapshots=@()

$GetAllRegions | % {

$getSnaps = $null

$RG = $_

$SFilter = new-object Amazon.EC2.Model.Filter

$SFilter.Name = "owner-id"

$SFilter.Value = "XXXXXXXXXXXX "

$getSnaps = Get-EC2Snapshot -Filter $SFilter -Region $RG

foreach ($getSnap in $getSnaps){

$IFilter = new-object Amazon.EC2.Model.Filter

$IFilter.Name = "block-device-mapping.volume-id"

$IFilter.Value = "$($getSnap.VolumeId)"

$getInstanceID = (Get-EC2Instance -Filter $IFilter -Region $RG).Instances.InstanceID

if ($getInstanceID){

$getSnap | Add-Member @{LinkedInstanceID=$getInstanceID}

}else{

$getSnap | Add-Member @{LinkedInstanceID="Missing"}

}

$getSnap | select Description, SnapshotID, VolumeID, LinkedInstanceID

$GetAllSnapshots += $getSnap

}

$GetAllSnapshots | select Description, SnapshotID, VolumeID, VolumeSize, LinkedInstanceID | Export-Csv $env:USERPROFILE\Desktop\SnapR.csv -NoTypeInformation

Continue reading →

Migrated this blog to Amazon LightSail from GoDaddy

February 20, 2017 by Saugata

Finally, I managed to migrate my blog from GoDaddy to Amazon Lightsail, and everything looks good so far. Thanks to Amazon Lightsail for providing a static public IP (34.198.110.82).

It’s really simple to migrate your blogs from any other hosting Amazon Lightsail, details information can be found here.

They have very attractive pricing, which is one of the reason I moved from GoDaddy to Amazon (recently GoDaddy started charging additional TAX). I am currently using $5 plan which is also free for first month.

Continue reading →

Cleanup disabled users from AD Group/s

January 3, 2017 by Saugata

Cleanup disabled accounts from groups is one of the most boring job, and also take lots of time. Manually it’s almost impossible to maintain. Recently I had a request to perform such task for many groups, so, I wrote a script to do it automatically on behalf of me. I am now sharing this script, hoping this might help you as well.

This script will do following task automatically.

Get the members of a group.
Identify only users.
Identify disabled users.
Check every disabled users group memberships.
Remove the disabled users from that group.
Generate a report with status (success / failure).
Keep the report on your desktop.

$GroupSamName = "You-AD-Group-Name"
$ErrorReport=@()
foreach ($member in (Get-ADObject -Filter {(SamAccountName -eq $GroupSamName)} -Properties *).Member)
{
    $GetADUser=$null
    $DServer = $null
    $DServer=$(($member.Split(",") | Select-String DC= | % {$_.ToString()}).Replace("DC=","") -join ".")
    if ($(Get-ADObject -Filter {(DistinguishedName -eq $member)} -Server $DServer | ? {$_.ObjectClass -ne "group" -AND $_.ObjectClass -ne "computer"}).DistinguishedName){$GetADUser = Get-ADUser $member -Properties Enabled -Server $DServer}
    #$GetADUser
    if (($GetADUser).Enabled -eq $false) {
        $GetUserGroups = (Get-ADObject -Filter {(DistinguishedName -eq $member)} -Properties Memberof).Memberof
        foreach($Group in $GetUserGroups)
        {
            try{
                #"$($Group.Split(",")[0].Split("=")[1])"
                Remove-ADGroupMember -Identity $Group -Members $GetADUser -Server $(($Group.Split(",") | Select-String DC= |% {$_.ToString()}).Replace("DC=","") -join ".") -Confirm:$false
                $MyObject = New-Object PSObject -Property @{ 
                UserName="$member"            
                GroupName="$($Group.Split(",")[0].Split("=")[1])"
                RemovalStatus = "Removed"
                }
                $ErrorReport += $MyObject
            $MyObject
            }catch{
                $MyObject = New-Object PSObject -Property @{ 
                UserName="$member"            
                GroupName="$($Group.Split(",")[0].Split("=")[1])"
                RemovalStatus = "$($_.Exception.ToString().Split("-")[0].Split(":")[1].Trim())"
                }
                $ErrorReport += $MyObject
            $MyObject
            }
        }
    }
}
$ErrorReport | Export-Csv -NoTypeInformation $env:USERPROFILE\Desktop\Report.csv

$GroupSamName = "You-AD-Group-Name"

$ErrorReport=@()

foreach ($member in (Get-ADObject -Filter {(SamAccountName -eq $GroupSamName)} -Properties *).Member)

{

$GetADUser=$null

$DServer = $null

$DServer=$(($member.Split(",") | Select-String DC= | % {$_.ToString()}).Replace("DC=","") -join ".")

if ($(Get-ADObject -Filter {(DistinguishedName -eq $member)} -Server $DServer | ? {$_.ObjectClass -ne "group" -AND $_.ObjectClass -ne "computer"}).DistinguishedName){$GetADUser = Get-ADUser $member -Properties Enabled -Server $DServer}

#$GetADUser

if (($GetADUser).Enabled -eq $false) {

$GetUserGroups = (Get-ADObject -Filter {(DistinguishedName -eq $member)} -Properties Memberof).Memberof

foreach($Group in $GetUserGroups)

{

try{

#"$($Group.Split(",")[0].Split("=")[1])"

Remove-ADGroupMember -Identity $Group -Members $GetADUser -Server $(($Group.Split(",") | Select-String DC= |% {$_.ToString()}).Replace("DC=","") -join ".") -Confirm:$false

$MyObject = New-Object PSObject -Property @{

UserName="$member"

GroupName="$($Group.Split(",")[0].Split("=")[1])"

RemovalStatus = "Removed"

}

$ErrorReport += $MyObject

$MyObject

}catch{

$MyObject = New-Object PSObject -Property @{

UserName="$member"

GroupName="$($Group.Split(",")[0].Split("=")[1])"

RemovalStatus = "$($_.Exception.ToString().Split("-")[0].Split(":")[1].Trim())"

}

$ErrorReport += $MyObject

$MyObject

}

$ErrorReport | Export-Csv -NoTypeInformation $env:USERPROFILE\Desktop\Report.csv

Techno Chat|Tech Blog!!

Chat with style.. :P

Category Archives: Windows

How to use AWS PowerShell cmdlets with Filter

Migrated this blog to Amazon LightSail from GoDaddy

Cleanup disabled users from AD Group/s