acct=`$AWS sts get-caller-identity | jq .Account | tr -d '"'` cmd[0]="$AWS s3control list-access-points --account-id $acct" pref[0]="AccessPointList" tft[0]="aws_s3_access_point" idfilt[0]="Name" #rm -f ${tft[0]}.tf for c in `seq 0 0`; do cm=${cmd[$c]} ttft=${tft[(${c})]} #echo $cm awsout=`eval $cm 2> /dev/null` if [ "$awsout" == "" ];then echo "$cm : You don't have access for this resource" exit fi count=`echo $awsout | jq ".${pref[(${c})]} | length"` if [ "$count" -gt "0" ]; then count=`expr $count - 1` for i in `seq 0 $count`; do #echo $i cname=`echo $awsout | jq ".${pref[(${c})]}[(${i})].${idfilt[(${c})]}" | tr -d '"'` echo "$ttft $cname" fn=`printf "%s__%s.tf" $ttft $cname` if [ -f "$fn" ] ; then echo "$fn exists already skipping" continue fi printf "resource \"%s\" \"%s\" {" $ttft $cname > $ttft.$cname.tf printf "}" >> $ttft.$cname.tf terraform import $ttft.$cname $acct:$cname | grep Importing terraform state show -no-color $ttft.$cname > t1.txt tfa=`printf "%s.%s" $ttft $cname` terraform show -json | jq --arg myt "$tfa" '.values.root_module.resources[] | select(.address==$myt)' > data/$tfa.json #echo $awsj | jq . rm -f $ttft.$cname.tf file="t1.txt" vpcid="" echo $aws2tfmess > $fn while IFS= read line do skip=0 # display $line or do something with $line t1=`echo "$line"` if [[ ${t1} == *"="* ]];then tt1=`echo "$line" | cut -f1 -d'=' | tr -d ' '` tt2=`echo "$line" | cut -f2- -d'='` if [[ ${tt1} == "arn" ]];then skip=1; fi if [[ ${tt1} == "id" ]];then skip=1; fi if [[ ${tt1} == "role_arn" ]];then skip=1;fi if [[ ${tt1} == "alias" ]];then skip=1;fi if [[ ${tt1} == "network_origin" ]];then skip=1;fi if [[ ${tt1} == "domain_name" ]];then skip=1;fi #if [[ ${tt1} == "availability_zone" ]];then skip=1;fi if [[ ${tt1} == "has_public_access_policy" ]];then skip=1;fi if [[ ${tt1} == "vpc_id" ]]; then vpcid=`echo $tt2 | tr -d '"'` t1=`printf "%s = aws_vpc.%s.id" $tt1 $vpcid` fi # skip endpoints block if [[ ${tt1} == "endpoints" ]];then #echo "dns block" tt2=`echo $tt2 | tr -d '"'` skip=1 while [ "$t1" != "}" ] && [ "$tt2" != "{}" ] ;do read line t1=`echo "$line"` #echo $t1 done fi fi if [ "$skip" == "0" ]; then #echo $skip $t1 echo "$t1" >> $fn fi done <"$file" if [ "$vpcid" != "" ]; then ../../scripts/100-get-vpc.sh $vpcid fi done fi done rm -f t*.txt