Address ENG-10243.
The script:
- Uses Terraform account to log in
- Assumes IAM role on prod account
- Performs DDB actions on target account, they're described in bottom part of this comment.
Depends on D14403
Details
Details
Made a copy of the target account DDB rows, with different userID. Ran the script and verified in AWS Console that all actions were successful
Diff Detail
Diff Detail
- Repository
- rCOMM Comm
- Lint
No Lint Coverage - Unit
No Test Coverage
Event Timeline
| scripts/aws-reset-keyserver-owner.sh | ||
|---|---|---|
| 12–16 ↗ | (On Diff #47241) | Not sure if we need this check |
| 18–22 ↗ | (On Diff #47241) | Nix environment sets these values, and AWS errors are sometimes misleading because of them, so added a clearer message |
| 26–27 ↗ | (On Diff #47241) | I didn't want to publish the full value here |
| 48–57 ↗ | (On Diff #47241) | Alternatively, these could be merged |
| 111–117 ↗ | (On Diff #47241) | Reading https://stackoverflow.com/a/1885534 - perhaps I should use the first form (non-negated) because it's safer, at the cost of nesting |
| scripts/aws-reset-keyserver-owner.sh | ||
|---|---|---|
| 12–16 ↗ | (On Diff #47241) | Sorry, missed the parent diff. Up to you, but probably fine to remove |
| scripts/aws-reset-keyserver-owner.sh | ||
|---|---|---|
| 48–57 ↗ | (On Diff #47241) | Merging these causes Shellcheck to complain. It suggests separating them again |