#!/bin/bash
if [ "$1" != "" ]; then
        cmd[0]="$AWS wafv2 list-web-acls --scope REGIONAL"
else
    cmd[0]="$AWS wafv2 list-web-acls --scope=CLOUDFRONT --region=us-east-1"
fi

pref[0]="WebACLs"
tft[0]="aws_wafv2_web_acl"
idfilt[0]="Id"

#rm -f ${tft[0]}.tf

for c in `seq 0 0`; do
    
    cm=${cmd[$c]}
	ttft=${tft[(${c})]}
	echo $cm
    awsout=`eval $cm 2> /dev/null`
    if [ "$awsout" == "" ];then
        echo "$cm : You don't have access for this resource"
        exit
    fi
    #echo $awsout | jq .
    count=`echo $awsout | jq ".${pref[(${c})]} | length"`
    
    if [ "$count" -gt "0" ]; then
        count=`expr $count - 1`
        for i in `seq 0 $count`; do
            #echo $i
            cname=$(echo $awsout | jq -r ".${pref[(${c})]}[(${i})].${idfilt[(${c})]}")
            wname=$(echo $awsout | jq -r ".${pref[(${c})]}[(${i})].Name")
            rname=${cname//:/_} && rname=${rname//./_} && rname=${rname//\//_}
            cname2=$(printf "%s/%s/CLOUDFRONT" $cname $wname)
            echo "$ttft $cname2 import"
            fn=`printf "%s__%s.tf" $ttft $rname`
            if [ -f "$fn" ] ; then echo "$fn exists already skipping" && continue; fi
            #echo "calling import sub"

            printf "resource \"%s\" \"%s\" {" $ttft $cname > $ttft.$cname.tf
            #printf "region=\"us-est-1\"" >> $ttft.$cname.tf
            printf "}" >> $ttft.$cname.tf
            
            ### apparent bug on import
            ## Error: WAFInvalidParameterException: Error reason: The scope is not valid., field: SCOPE_VALUE, parameter: CLOUDFRONT
            
            
            
            terraform import $ttft.$cname "$cname2"
            #terraform import $ttft.$cname "$cname2" | grep Importing
            
            terraform state show -no-color $ttft.$cname > t1.txt
            tfa=`printf "%s.%s" $ttft $cname`
            terraform show  -json | jq --arg myt "$tfa" '.values.root_module.resources[] | select(.address==$myt)' > data/$tfa.json
            #echo $awsj | jq . 
            rm -f $ttft.$cname.tf

            file="t1.txt"
            echo $aws2tfmess > $fn


            while IFS= read line
            do
				skip=0
                # display $line or do something with $line
                t1=`echo "$line"` 
                if [[ ${t1} == *origin* ]];then allowdn=1; fi
                if [[ ${t1} == *"="* ]];then
                    tt1=`echo "$line" | cut -f1 -d'=' | tr -d ' '` 
                    tt2=`echo "$line" | cut -f2- -d'='`
                    if [[ ${tt1} == "arn" ]];then skip=1; fi                
                    if [[ ${tt1} == "id" ]];then skip=1; fi          
                    if [[ ${tt1} == "role_arn" ]];then skip=1;fi
                    if [[ ${tt1} == "owner_id" ]];then skip=1;fi
                    if [[ ${tt1} == "caller_reference" ]];then skip=1;fi
                    if [[ ${tt1} == "hosted_zone_id" ]];then skip=1;fi
                    if [[ ${tt1} == "in_progress_validation_batches" ]];then skip=1;fi
                    if [[ ${tt1} == "status" ]];then skip=1; fi
                    if [[ ${tt1} == "last_modified_time" ]];then skip=1; fi                   
                    if [[ ${tt1} == "caller_reference" ]];then skip=1; fi
                    if [[ ${tt1} == "domain_name" ]];then 
                        if [[ $allowdn == "0" ]]; then  
                            skip=1
                        else
                            skip=0
                        fi
                    fi
                    if [[ ${tt1} == "etag" ]];then skip=1;fi
                    if [[ ${tt1} == "map_customer_owned_ip_on_launch" ]];then skip=1;fi


                    if [[ ${tt1} == "trusted_signers" ]];then 
                        tt2=`echo $tt2 | tr -d '"'` 
                        skip=1
                        while [ "$t1" != "]" ] && [ "$tt2" != "[]" ] ;do
                        #while [[ "$t1" != "]" ]] ;do

                            read line
                            t1=`echo "$line"`
                            #echo $t1
                        done
                    fi



                # else
                    #
                fi
                if [ "$skip" == "0" ]; then
                    #echo $skip $t1
                    echo "$t1" >> $fn
                fi
                
            done <"$file"

            if [ "$vpcid" != "" ]; then
                #echo "subnet vpc call with vpcid=$vpcid"
                ../../scripts/100-get-vpc.sh $vpcid
            fi


            dfn=`printf "data/data_%s__%s.tf" $ttft $rname`
            printf "data \"%s\" \"%s\" {\n" $ttft $rname > $dfn
            printf "id = \"%s\"\n" "$cname" >> $dfn
            printf "}\n" >> $dfn
            
        done
    fi
done


rm -f *.backup