From 2007345c4b1b061f904155ac02b49a8efa4c3dca Mon Sep 17 00:00:00 2001
From: Rick Mendes <rick.mendes4@gmail.com>
Date: Mon, 4 May 2015 14:38:43 -0700
Subject: [PATCH] ec2_win_password module for windows ec2 instances
---
cloud/amazon/ec2_win_password.py | 96 ++++++++++++++++++++++++++++++++
1 file changed, 96 insertions(+)
create mode 100644 cloud/amazon/ec2_win_password.py
diff --git a/cloud/amazon/ec2_win_password.py b/cloud/amazon/ec2_win_password.py
new file mode 100644
index 00000000000..ee795d5b62a
--- /dev/null
+++ b/cloud/amazon/ec2_win_password.py
@@ -0,0 +1,96 @@
+#!/usr/bin/python
+
+DOCUMENTATION = '''
+---
+module: ec2_win_password
+short_description: gets the default administrator password for ec2 windows instances
+description:
+ - Gets the default administrator password from any EC2 Windows instance. The instance is referenced by its id (e.g. i-XXXXXXX). This module has a dependency on python-boto.
+version_added: "2.0"
+author: Rick Mendes
+options:
+ instance_id:
+ description:
+ - The instance id to get the password data from.
+ required: true
+ default: null
+ aliases: []
+ key_file:
+ description:
+ - path to the file containing the key pair used on the instance
+ required: true
+ default: null
+ aliases: []
+ region:
+ description:
+ - The AWS region to use. Must be specified if ec2_url is not used. If not specified then the value of the EC2_REGION environment variable, if any, is used.
+ required: false
+ default: null
+ aliases: [ 'aws_region', 'ec2_region' ]
+
+extends_documentation_fragment: aws
+'''
+
+EXAMPLES = '''
+# Example of getting a password
+tasks:
+- name: get the Administrator password
+ ec2_win_password:
+ profile: my-boto-profile
+ instance_id: i-XXXXXX
+ region: us-east-1
+ key_file: "~/aws-creds/my_test_key.pem"
+'''
+
+import sys
+from base64 import b64decode
+from os.path import expanduser
+from Crypto.Cipher import PKCS1_v1_5
+from Crypto.PublicKey import RSA
+
+try:
+ import boto.ec2
+ HAS_BOTO = True
+except ImportError:
+ HAS_BOTO = False
+
+def main():
+ argument_spec = ec2_argument_spec()
+ argument_spec.update(dict(
+ instance_id = dict(required=True),
+ key_file = dict(required=True),
+ )
+ )
+ module = AnsibleModule(argument_spec=argument_spec)
+
+ if not HAS_BOTO:
+ module.fail_json(msg='Boto required for this module.')
+
+ instance_id = module.params.get('instance_id')
+ key_file = expanduser(module.params.get('key_file'))
+
+ ec2 = ec2_connect(module)
+
+ data = ec2.get_password_data(instance_id)
+ decoded = b64decode(data)
+
+ f = open(key_file, 'r')
+ key = RSA.importKey(f.read())
+ cipher = PKCS1_v1_5.new(key)
+ sentinel = 'password decryption failed!!!'
+
+ try:
+ decrypted = cipher.decrypt(decoded, sentinel)
+ except ValueError as e:
+ decrypted = None
+
+ if decrypted == None:
+ module.exit_json(win_password='', changed=False)
+ else:
+ module.exit_json(win_password=decrypted, changed=True)
+
+# import module snippets
+from ansible.module_utils.basic import *
+from ansible.module_utils.ec2 import *
+
+main()