do.sh

#!/bin/bash

set -euo pipefail

### Configuration

AWS_NUKE_VERSION=$(cat aws-nuke-version)
export AWS_NUKE_VERSION
export AWS_NUKE_EXE=./bin/aws-nuke
export AWS_NUKE_WAIT_SECONDS=3 # aws-nuke minimum is 3 seconds
export AWS_NUKE_MAX_RETRIES=10

### Functions

function specify_version () {
  OS_ID="$(uname -a)"
  MACOS_ALIAS=Darwin
  if [[ $OS_ID == *"$MACOS_ALIAS"* ]]; then
    export OS=darwin
  else
    export OS=linux
  fi

  export ARCH=amd64
  export AWS_NUKE_FILE=aws-nuke-v$AWS_NUKE_VERSION-$OS-$ARCH
  export AWS_NUKE_URL=https://github.com/rebuy-de/aws-nuke/releases/download/v$AWS_NUKE_VERSION/$AWS_NUKE_FILE.tar.gz
}

function require_config () {
  if [ ! "${AWS_NUKE_CONFIG:-}" ]; then 
    echo "Specify a configuration file."
    exit 1
  fi
}

function set_timestamp () {
  if [ ! "${TIMESTAMP:-}" ]; then
    TIMESTAMP=$(date -u +"%Y%m%dT%H%M%SZ")
    export TIMESTAMP
  fi
}

### Main

if [ ! "${1:-}" ]; then 
  echo "Specify a subcommand."
  exit 1
fi

if [ "${2:-}" ]; then 
  export AWS_NUKE_CONFIG=./config/aws-nuke/"$2".yml
fi

if [ "${3:-}" ]; then 
  export TIMESTAMP=$3
fi

case $1 in
  info)
    ./$AWS_NUKE_EXE version
  ;;
  clean)
   [ -d "bin" ] && rm -r bin 
   [ -d "log" ] && rm -r log 
   [ -d "tmp" ] && rm -r tmp
  ;;
  dryrun)
    require_config
    ./$AWS_NUKE_EXE --config "$AWS_NUKE_CONFIG"
  ;;
  nuke)
    require_config
    ./$AWS_NUKE_EXE --config "$AWS_NUKE_CONFIG" --no-dry-run
  ;;
  headless:dryrun)
    require_config
    set_timestamp
    ./$AWS_NUKE_EXE --config "$AWS_NUKE_CONFIG" --force --force-sleep $AWS_NUKE_WAIT_SECONDS --max-wait-retries $AWS_NUKE_MAX_RETRIES > log/aws-nuke-"$TIMESTAMP"-full.log 2>&1
  ;;
  headless:nuke)
    require_config
    set_timestamp
    ./$AWS_NUKE_EXE --config "$AWS_NUKE_CONFIG" --force --force-sleep $AWS_NUKE_WAIT_SECONDS --max-wait-retries $AWS_NUKE_MAX_RETRIES --no-dry-run > log/aws-nuke-"$TIMESTAMP"-full.log 2>&1
  ;;
  setup)
    specify_version
    [ -d "bin" ] || mkdir bin
    [ -d "tmp" ] || mkdir tmp
    if [ ! -x "$AWS_NUKE_EXE" ]; then 
      curl -L $AWS_NUKE_URL > ./tmp/$AWS_NUKE_FILE.tar.gz 
      tar xvzf ./tmp/$AWS_NUKE_FILE.tar.gz -C ./tmp
      mv ./tmp/$AWS_NUKE_FILE $AWS_NUKE_EXE 
      chmod +x $AWS_NUKE_EXE
      rm -r ./tmp
    fi
    [ -d "log" ] || mkdir log
  ;;
  summarize)
    set_timestamp
    declare -A MARKERS
    MARKERS[targets]="would remove"
    MARKERS[deletions]="removed"
    for MARKER in "${!MARKERS[@]}"
    do
      grep "${MARKERS[$MARKER]}" log/aws-nuke-"$TIMESTAMP"-full.log > log/aws-nuke-"$TIMESTAMP"-$MARKER.log || :
      grep '\- S3Object \-\|\- DynamoDBTableItem \-' log/aws-nuke-"$TIMESTAMP"-$MARKER.log > log/aws-nuke-"$TIMESTAMP"-$MARKER-dataobj.log || :
      grep -v '\- S3Object \-\|\- DynamoDBTableItem \-' log/aws-nuke-"$TIMESTAMP"-$MARKER.log > log/aws-nuke-"$TIMESTAMP"-$MARKER-nodataobj.log || :
      grep '\- SSMParameter \-\|\- SecretsManagerSecret \-\|\- EC2KeyPair \-' log/aws-nuke-"$TIMESTAMP"-$MARKER-nodataobj.log > log/aws-nuke-"$TIMESTAMP"-$MARKER-secrets.log || :
      grep -v '\- SSMParameter \-\|\- SecretsManagerSecret \-\|\- EC2KeyPair \-' log/aws-nuke-"$TIMESTAMP"-$MARKER-nodataobj.log > log/aws-nuke-"$TIMESTAMP"-$MARKER-notsecrets.log || :
      grep '\- CloudFormationStack \-\|\- EC2InstanceECSCluster \-\|\- ECSCluster \-\|\- DynamoDBTable \-\|\- S3Bucket \-\|\- SNSTopic \-' log/aws-nuke-"$TIMESTAMP"-$MARKER-nodataobj.log > log/aws-nuke-"$TIMESTAMP"-$MARKER-keytargets.log || :
    done
  ;;
  timestamp)
    set_timestamp
    echo "$TIMESTAMP"
  ;;
  *)
    echo "$1 is not a valid command"
  ;;
esac