def add_users_to_group(self, users=False):
## Assumes you just declared a bunch of users with credentials (saved in self.users, to be added. otherwise, users given as argument will be added. )
if users is False:
users_t = self.template.add_resource(
UserToGroupAddition('Users',
GroupName=Ref(self.usergroup),
Users=[Ref(u) for u in self.users]))
def add_affiliate_usernet(self,affiliatedict):
## Four steps here:
## 1. Customize a user policy for this particular pipeline.
## 2. Generate a user group with that policy.
## 3. Attach users with credentials.
## 4. Add users to group.
## A method that customizes the json policy (see attached) to the particular affiliation name.
## 1 and 2
group = self.generate_usergroup(affiliatedict)
## 3
## Note: this filters in the case where users are predefined elsewhere.
users,usernames = self.attach_users(affiliatedict)
## 4
users_attached = self.template.add_resource(UserToGroupAddition(affiliatedict['AffiliateName']+'UserNet',GroupName = Ref(group),Users = usernames))
def add_affiliate_usernet(self, affiliatedict):
## Four steps here:
## 1. Customize a user policy for this particular pipeline.
## 2. Generate a user group with that policy.
## 3. Generate users with credentials.
## 4. Add users to group.
## A method that customizes the json policy (see attached) to the particular affiliation name.
## 1 and 2
group = self.generate_usergroup(affiliatedict)
## 3
users = self.generate_users(affiliatedict)
## 4
users_attached = self.template.add_resource(
UserToGroupAddition(affiliatedict['AffiliateName'] + 'UserNet',
GroupName=Ref(group),
Users=[Ref(u) for u in users]))
t.set_description("AWS CloudFormation Sample Template: This template "
"demonstrates the creation of IAM User/Group.")
cfnuser = t.add_resource(
User("CFNUser", LoginProfile=LoginProfile(Password="******")))
cfnusergroup = t.add_resource(Group("CFNUserGroup"))
cfnadmingroup = t.add_resource(Group("CFNAdminGroup"))
cfnkeys = t.add_resource(
AccessKey("CFNKeys", Status="Active", UserName=Ref(cfnuser)))
users = t.add_resource(
UserToGroupAddition(
"Users",
GroupName=Ref(cfnusergroup),
Users=[Ref(cfnuser)],
))
admins = t.add_resource(
UserToGroupAddition(
"Admins",
GroupName=Ref(cfnadmingroup),
Users=[Ref(cfnuser)],
))
t.add_resource(
PolicyType(
"CFNUserPolicies",
PolicyName="CFNUsers",
Groups=[Ref(cfnadmingroup)],
cfnuser = t.add_resource(User(
"CFNUser",
LoginProfile=LoginProfile("Password"))
)
cfnusergroup = t.add_resource(Group("CFNUserGroup"))
cfnadmingroup = t.add_resource(Group("CFNAdminGroup"))
cfnkeys = t.add_resource(AccessKey(
"CFNKeys",
UserName=Ref(cfnuser))
)
users = t.add_resource(UserToGroupAddition(
"Users",
GroupName=Ref(cfnusergroup),
Users=Ref(cfnuser),
))
admins = t.add_resource(UserToGroupAddition(
"Admins",
GroupName=Ref(cfnadmingroup),
Users=Ref(cfnuser),
))
t.add_resource(PolicyType(
"CFNUserPolicies",
PolicyName="CFNUsers",
PolicyDocument={
"Statement": [{
"Effect": "Allow",