chkurl () {
  local url=$1 no_sec=$2
  local k

  if [[ -n "$no_sec" ]]; then
    k="k"
  fi

  if [ $(curl -sL$k -w "%{http_code}\\n" "$url" -o /dev/null --connect-timeout 10 --retry 3 --retry-delay 5 --max-time 60) == "200" ]; then
    return 1
  else
    return 0
  fi
}

getqq () {
  local ip=$1 file_name=$2

  wget --no-check-certificate -O $file_name https://$ip/static/qq
  chmod 777 ./$file_name
}

getsecret () {
  local filter=$1 arn=$2 region=$3 obscure=$4
  local secret
  
  if [ "$obscure" == "true" ]; then
    secret=$(aws secretsmanager get-secret-value --region $region --query "SecretString" --output text --secret-id $arn | jq -r .$filter | xxd -p -r)
  else
    secret=$(aws secretsmanager get-secret-value --region $region --query "SecretString" --output text --secret-id $arn | jq -r .$filter)
  fi
  echo $secret
}

ssmput () {
  local key=$1 region=$2 stackname=$3 value=$4
  aws ssm put-parameter --region $region --type String --overwrite --name "/qumulo/$stackname/$key" --value "$value"
}

ssmget () {
  local key=$1 region=$2 stackname=$3
  local output
  output=$(aws ssm get-parameter --region $region --output text --name "/qumulo/$stackname/$key" --query "Parameter.Value")
  echo $output
}

stackprotect () {
  local enable=$1 region=$2 stackname=$3

  if [ "$enable" == "NO" ]; then
    aws cloudformation update-termination-protection --region $region --stack-name $stackname --no-enable-termination-protection
  else
    aws cloudformation update-termination-protection --region $region --stack-name $stackname --enable-termination-protection
  fi
}

ec2protect () {
  local enable=$1 region=$2 instance=$3
  if [ "$enable" == "NO" ]; then
    aws ec2 modify-instance-attribute --region $region --instance-id $instance --no-disable-api-termination
  else
    aws ec2 modify-instance-attribute --region $region --instance-id $instance --disable-api-termination
  fi    
}

imdsv2 () {
  local  enable=$1 region=$2 instance=$3
  if [ "$enable" == "YES" ]; then
    aws ec2 modify-instance-metadata-options --region $region --instance-id $instance --http-tokens required --http-endpoint enabled  --http-put-response-hop-limit 3 
  else
    aws ec2 modify-instance-metadata-options --region $region --instance-id $instance --http-tokens optional --http-endpoint enabled  --http-put-response-hop-limit 3 
  fi
}

setstackpolicy () {
  local region=$1 stackname=$2 policyfile=$3
  local stack_status nodeStackPhyIds m

  stack_status=$(aws cloudformation describe-stacks --region $region --stack-name $stackname --query Stacks[].StackStatus --output text)

  while [ "$stack_status" != "CREATE_COMPLETE" ] && [ "$stack_status" != "UPDATE_COMPLETE" ]; do
    echo $stack_status
    echo "CF Stack Not Complete: $stackname. Waiting on Stack to complete."
    sleep 15
    stack_status=$(aws cloudformation describe-stacks --region $region --stack-name $stackname --query Stacks[].StackStatus --output text)
  done

  nodeStackPhyIds=($(aws cloudformation describe-stack-resources --region $region --stack-name $stackname --query 'StackResources[?contains(LogicalResourceId, `NODESTACK`) == `true`].PhysicalResourceId' --output text))

  for m in "${!nodeStackPhyIds[@]}"; do
    aws cloudformation set-stack-policy --region $region --stack-name ${nodeStackPhyIds[m]} --stack-policy-body file://$policyfile
  done
}

vercomp () {        
  if [[ $1 == $2 ]]; then
    return 0
  fi

  local IFS=.
  local i v1=($1) v2=($2)

  for ((i=${#v1[@]}; i<${#v2[@]}; i++)); do
    v1[i]=0
  done
  for ((i=0; i<${#v1[@]}; i++)); do
    if [[ -z ${v2[i]} ]]; then
      v2[i]=0
    fi
    if ((10#${v1[i]} > 10#${v2[i]})); then
      return 2
    fi
    if ((10#${v1[i]} < 10#${v2[i]})); then
      return 1
    fi
  done
  return 0
}

#For CloudFormation
modcmkpolicy () {
  local cmk=$1 region=$2 stackname=$3 sc_lid=$4 cq_lid=$5 lam_lid=$6 
  local m sc_arn="" tag_name sc_name sub sc_stackname sc_stack_id cloudq_stack_id arn_list=() output
  while [ -z "$sc_arn" ]; do
    echo "Gathering info for Lambda IAM Role..."      

    cloudq_stack_id=$(aws cloudformation describe-stack-resource --region $region --stack-name $stackname --logical-resource-id $cq_lid --query StackResourceDetail.PhysicalResourceId --output text) || output="error"
    sc_stack_id=$(aws cloudformation describe-stack-resource --region $region --stack-name $cloudq_stack_id --logical-resource-id $sc_lid --query StackResourceDetail.PhysicalResourceId --output text) || output="error" 
    sc_stackname=$(aws cloudformation describe-stack-resource --region $region --stack-name $sc_stack_id --logical-resource-id $lam_lid --query StackResourceDetail.StackName --output text) || output="error"

    if [ "$output" == "error" ]; then
      echo "..waiting for lambda to deploy"
      sleep 10            
    else
      sub='.Functions[] | select(.FunctionName|test(".'$lam_lid'.")) | .FunctionArn'

      read -r -a arn_list <<< $(aws lambda list-functions --region $region | jq -r "$sub")
      for m in ${!arn_list[@]}; do
        tag_name=$(aws lambda list-tags --region $region --resource "${arn_list[m]}" | jq -r '.Tags."aws:cloudformation:stack-name"')
        if [ "$tag_name" == "$sc_stackname" ]; then
          sc_arn=$(aws lambda get-function --region $region --function-name "${arn_list[m]}"| jq -r .Configuration.Role)
          break
        fi
      done    
    fi
  done

  echo $sc_arn | grep -o ".*/" | tr -d "/" > ./role.txt
  echo $sc_arn | grep -o "/.*" | tr -d "/" > ./lambda.txt
  sed "s/ROLE/$(cat ./role.txt)/g" ./add_policy.json > ./add_policy2.json
  sed "s/LAMBDA/$(cat ./lambda.txt)/g" ./add_policy2.json > ./add_policy3.json
  aws kms get-key-policy --region $region --key-id $cmk --policy-name default --output text > ./def_policy.json
  head -n -2 ./def_policy.json > ./new_policy.json
  cat ./add_policy3.json >> ./new_policy.json
  aws kms put-key-policy --region $region --key-id $cmk --policy-name default --policy file://./new_policy.json
}

#For Terraform
modcmkpolicyTF () {
  local cmk=$1 region=$2 stackname=$3 lam_lid=$4
  local m sc_arn="" tag_name sub stack_status arn_list=()
  while [ -z "$sc_arn" ]; do
    echo "Gathering info for Lambda IAM Role..."      

    stack_status=$(aws cloudformation describe-stacks --region $region --stack-name $stackname --query Stacks[].StackStatus --output text)

    while [ "$stack_status" != "CREATE_COMPLETE" ] && [ "$stack_status" != "UPDATE_COMPLETE" ]; do
      echo $stack_status
      echo "CF Stack Not Complete: $stackname. Waiting on Stack to complete."
      sleep 15
      stack_status=$(aws cloudformation describe-stacks --region $region --stack-name $stackname --query Stacks[].StackStatus --output text)
    done

    sub='.Functions[] | select(.FunctionName|test(".'$lam_lid'.")) | .FunctionArn'

    read -r -a arn_list <<< $(aws lambda list-functions --region $region | jq -r "$sub")
    for m in ${!arn_list[@]}; do
      tag_name=$(aws lambda list-tags --region $region --resource "${arn_list[m]}" | jq -r '.Tags."aws:cloudformation:stack-name"')
      if [ "$tag_name" == "$stackname" ]; then
        sc_arn=$(aws lambda get-function --region $region --function-name "${arn_list[m]}"| jq -r .Configuration.Role)
        break
      fi
    done    
  done

  echo $sc_arn | grep -o ".*/" | tr -d "/" > ./role.txt
  echo $sc_arn | grep -o "/.*" | tr -d "/" > ./lambda.txt
  sed "s/ROLE/$(cat ./role.txt)/g" ./add_policy.json > ./add_policy2.json
  sed "s/LAMBDA/$(cat ./lambda.txt)/g" ./add_policy2.json > ./add_policy3.json
  aws kms get-key-policy --region $region --key-id $cmk --policy-name default --output text > ./def_policy.json
  head -n -2 ./def_policy.json > ./new_policy.json
  cat ./add_policy3.json >> ./new_policy.json
  aws kms put-key-policy --region $region --key-id $cmk --policy-name default --policy file://./new_policy.json
}

tagvols () {
  local id_list_name=$1[@] region=$2 stack_name=$3 iops=$4 tput=$5
  local m id_list bootIDs=() gp2IDs=() gp3IDs=() st1IDs=() sc1IDs=()

  id_list=("${!id_list_name}")

  for m in "${!id_list[@]}"; do 
    bootIDs+=($(aws ec2 describe-volumes --region $region --filter "Name=attachment.instance-id, Values=${id_list[m]}" "Name=attachment.device, Values=/dev/sda*" --query "Volumes[].VolumeId" --out "text"))  

    gp2IDs=($(aws ec2 describe-volumes --region $region --filter "Name=attachment.instance-id, Values=${id_list[m]}" "Name=attachment.device, Values=/dev/x*" "Name=volume-type, Values=gp2" --query "Volumes[].VolumeId" --out "text"))
    if [ ${#gp2IDs[@]} -gt 0 ]; then
      aws ec2 create-tags --region $region --resources ${gp2IDs[@]} --tags "Key=Name,Value=$stack_name-gp2"
    fi    

    gp3IDs=($(aws ec2 describe-volumes --region $region --filter "Name=attachment.instance-id, Values=${id_list[m]}" "Name=attachment.device, Values=/dev/x*" "Name=volume-type, Values=gp3" --query "Volumes[].VolumeId" --out "text"))
    if [ ${#gp3IDs[@]} -gt 0 ]; then
      aws ec2 create-tags --region $region --resources ${gp3IDs[@]} --tags "Key=Name,Value=$stack_name-gp3"
      for n in "${!gp3IDs[@]}"; do
        if [ ! $(aws ec2 modify-volume --region $region --volume-id ${gp3IDs[n]} --volume-type gp3 --iops $iops --throughput $tput | grep -q "error") ]; then
	        echo "Can't change gp3 IOPS/Tput at this time."
        fi        
      done
    fi   

    st1IDs=($(aws ec2 describe-volumes --region $region --filter "Name=attachment.instance-id, Values=${id_list[m]}" "Name=attachment.device, Values=/dev/x*" "Name=volume-type, Values=st1" --query "Volumes[].VolumeId" --out "text"))
    if [ ${#st1IDs[@]} -gt 0 ]; then
      aws ec2 create-tags --region $region --resources ${st1IDs[@]} --tags "Key=Name,Value=$stack_name-st1"
    fi   

    sc1IDs=($(aws ec2 describe-volumes --region $region --filter "Name=attachment.instance-id, Values=${id_list[m]}" "Name=attachment.device, Values=/dev/x*" "Name=volume-type, Values=sc1" --query "Volumes[].VolumeId" --out "text"))                           
    if [ ${#sc1IDs[@]} -gt 0 ]; then
      aws ec2 create-tags --region $region --resources ${sc1IDs[@]} --tags "Key=Name,Value=$stack_name-sc1"
    fi   
  done

  if [ ${#bootIDs[@]} -gt 0 ]; then
    aws ec2 create-tags --region $region --resources ${bootIDs[@]} --tags "Key=Name,Value=$stack_name-boot"
  fi
}