Page |0
https://linkedin.com/in/prafulpatel16
https://github.com/
Date: June 10, 2022
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
Project:
AWS IAM USERS & GROUPS CREATION & DESTROY USING ANSIBLE 100%
AUTOMATION
Project Description:
Solution: IAM Automation Solution using Ansible Tool
Cloud: AWS Cloud
Cloud Services: Identity & Access Management (IAM)
Automation Tool: Ansible
An IT services provider, PRAfect Systems Inc., is engaged in providing Cloud/DevOps & software
development solutions. The company recently migrated its entire workload to the AWS Cloud. So
Along with all the application and database servers, there was a challenge that they had to create
1000 users who needed to assign to the relevant groups and roles and it’s a challenge to create
manually and time-consuming tasks which could be error-prone.
Solution:
This project demonstrates an experience of creating an automation solution using an Ansible
playbooks for AWS IAM users and group creation on AWS cloud.
Project Cost Estimation:
(Note: This cost is Not any actual cost, it’s just an estimation based on high level requirement. Price may be vary
based on adding and removing services based on requirement.)
Tools & Technologies covered:
AWS Cloud
AWS Identity & Access Management (IAM)
Ansible (Configuration Management Automation Tool)
Visual studio code IDE
GitHub
GitBash
Draw.io
Solution Architecture:
1
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
This project will be completed in following implementation phases.
Project implementation Phase:
Phase 1: Development IDE configuration
Phase 2: AWS CLI and Ansible configuration
Phase 3: Create an IAM group and users in AWS using Ansible
Phase 4: Remove an IAM group and users in AWS using Ansible
2
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
Implementation in an Action:
Phase 1: Development IDE configuration
Install AWS cli in VS code Ubuntu WSL
Sudo apt install awscli
Pip install boto
Configure aws credentials in to vscode
Sudo apt install ansible
Configure Aws Profile
3
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
Source: https://github.com/xchangebit/ansible-aws-cli
Phase 2: AWS cli and Ansible configuration
4
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
Install ansible
Verify ansible
5
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
https://docs.ansible.com/ansible/latest/collections/community/aws/iam_user_module.html
Create Ansible IAM user
Attach permission
Copy secret key and access key
6
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
AWS configure from vs code
https://github.com/xchangebit/ansible-aws-cli
Install
Pip install boto
7
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
Configure Inventory
Cd /etc/ansible
Vi hosts
Add this line to locahost
[localhost]
8
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
localhost ansible_connection=local ansible_python_interpreter=python
Create vars directory for aws credentials
Create main.yml
---
aws_system_user: root
aws_profile: default
aws_access_key: "<aws-accesss-key>"
aws_secret_key: "<aws-secret-key>"
aws_region: eu-west-2
aws_format: table
Export aws credentials
export AWS_ACCESS_KEY_ID={access key id}
export AWS_SECRET_ACCESS_KEY={secret access key}
Test the sample script and connection between Ansible local with AWS
Group Creation: SecurityAdmin
9
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
Run ansible playbook
Ansible-playbook –I hosts iam_group.yml
Playbook execution successful
Verify that User Group has been created in AWS
Error
10
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
Test 2
Test 3 Create Users and Groups
11
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
Verify in AWS console if user and group created successfully
12
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
Note: The above solution was just a research and experiment for the particular use case
Phase 3: Create IAM group and users in AWS using Ansible
Final Working Solution:
Solution 1: Create IAM group and users in AWS using Ansible
Implementation steps:
1.Create main working directory
2.Prepare groups.csv and users.csv data files
3.Create sub directory ‘tasks’
4.Create two separate tasks file inside ‘tasks’ folder
1. create iam_group.yml
2. create iam_users.yml
5.Create main playbook file & include tasks folders file
Playbook.yml
6.Run Playbook
7.Verify that users and group are created in aws cloud
1.Create a main working directory: 01-aws-ansible-iam-create
13
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
2.Prepare groups.csv and users.csv data files
Prepare CSV files:
1.groups.csv
2.users.csv
14
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
3.Create sub directory ‘tasks’
Folder: tasks ;
01-aws-ansible-iam-create/tasks/
4.Create two separate tasks file inside ‘tasks’ folder
1. iam_group,yml
2. iam_users.yml
3. iam_group_policy.yml
1.Iam_group.yml
2.iam_users.yml
15
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
5.Create main playbook file & include tasks folders file
Playbook.yml
Main Playbook file: Playbook.yml
6.Run Playbook
$ansible-playbook –I hosts playbook.yml
16
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
7.Verify that users and group are created in aws cloud
Groups: Groups successfully created automated way
Users: Users successfully created automated way
17
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
Phase 4: Remove IAM group and users in AWS using Ansible
-------------------------------------------------------------------------------------------------------------------------------------
Solution 2: Create IAM group and users in AWS using Ansible
Source: GitHub: https://github.com/prafulpatel16/aws-ansible.git
Implementation steps:
1.Create main working directory
2.Prepare groups.csv and users.csv data files
3.Create sub directory ‘tasks’
4.Create two separate tasks file inside ‘tasks’ folder
1. create iam_group.yml
2. create iam_users.yml
5.Create main playbook file & include tasks folders file
Playbook.yml
6.Run Playbook
7.Verify that users and group are created in aws cloud
1.Create a main working directory: 02-aws-ansible-iam-delete
18
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
2.Prepare groups.csv and users.csv data files
Prepare CSV files:
1.groups.csv
2.users.csv
19
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
3.Create sub directory ‘tasks’
Folder: tasks ;
02-aws-ansible-iam-delete/tasks/
4.Create two separate tasks file inside ‘tasks’ folder
1. create iam_group,yml
2. create iam_users.yml
1.Iam_group.yml
20
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
2. create iam_users.yml
5.Create main playbook file & include tasks folders file
Playbook.yml
Main Playbook file: Playbook.yml
6.Run Playbook
$ansible-playbook –I hosts playbook.yml
21
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
7.Verify that users and group are deleted from AWS cloud
Groups: Groups are successfully removed from aws
22
AWS - ansible AUTOMATION PROJECT CHALLENGE: AWS IAM USERS &
GROUP CREATION & DESTroY USING ANSIBLE 100% AUTOMATION SOLUTION DESIGN &
IMPLEMENTATION BY: PRAFUL PATEL
Users: users are successfully removed from aws
Congratulations!!!! 🔥🚀
23
