####Amazon Web Services EBS Snapshot Verification - Bash Script

Written by [Casey Labs Inc.] (http://www.caseylabs.com) and [Bleeding Edge Solutions] (http://www.bledsol.net) Contact us for all your Amazon Web Services Consulting needs!

===================================

How it works: check-snapshots.sh will:

• Gather a list of all running EC2 instances, and of all EBS volumes attached to those instances.
• Check the snapshots times associated with each in-use EBS volume, and alert if there are no recent snapshots.

Pull requests greatly welcomed!

===================================

REQUIREMENTS

IAM User: This script requires that a new user (e.g. ebs-snapshot) be created in the IAM section of AWS.
Here is a sample IAM policy for AWS permissions that this new user will require:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Stmt1426256275000",
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeInstances",
                "ec2:DescribeSnapshots",
                "ec2:DescribeVolumes"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}

AWS CLI: This script requires the AWS CLI tools to be installed.

Linux install instructions for AWS CLI:

• Make sure Python pip is installed (e.g. yum install python-pip, or apt-get install python-pip)
• Then run:

pip install awscli

Once the AWS CLI has been installed, you'll need to configure it with the credentials of the IAM user created above: (Note: this step can be skipped if you have an IAM Role setup for your instance to use the IAM policy listed above.)

sudo aws configure

Access Key & Secret Access Key: enter in the credentials generated above for the new IAM user.

Region Name: the region that this instance is currently in: i.e. us-east-1, eu-west-1, etc.

Output Format: enter "text"

Then copy this Bash script to /opt/aws/ebs-snapshot.sh and make it executable:

chmod +x /opt/aws/check-snapshots.sh

To manually test the script:

sudo /opt/aws/check-snapshots.sh