如何遍历所有aws区域以获取安全组信息

Question

我无法遍历我提供的AWS区域列表&我很困惑为什么列表从逆序开始？

此代码基本上连接至所有AWS地区一个接一个，然后打印安全组的详细信息：

regions = ['us-east-1','us-west-1','us-west-2','eu-west-1','sa-east-1','ap-southeast-1','ap-southeast-2','ap-northeast-1'] 
for region in regions: 
    connection=ec2.connect_to_region(region) 
    sg.extend(connection.get_all_security_groups()) 


def getTag(instanceId): 

    reservations=connection.get_all_instances(filters={'instance_id':instanceId}) 
    for res in reservations: 
     for instance in res.instances: 
      return instance.tags['Name'],instance.private_ip_address,instance.region 

try: 

    for securityGroup in sg: 
     for rule in securityGroup.rules: 
      global instanceId; 
      if rule.to_port == '22' and '0.0.0.0/0' in str(rule.grants): 
       for instanceid in securityGroup.instances(): 
        instanceId=str(instanceid) 
        print "Port 22 is open for 0.0.0.0/0:, SecurityGroupName: %s Instance Details --> : %s " %(securityGroup.name, getTag(instanceId.split(':')[1])) 

基于答案，我现在无法获得实例的详细信息，其结果是

Port 22 is open for 0.0.0.0/0:, SecurityGroupName: interview-linux Instance Details --> : None 
Port 22 is open for 0.0.0.0/0:, SecurityGroupName: interview-linux Instance Details --> : None 
Port 22 is open for 0.0.0.0/0:, SecurityGroupName: launch-wizard-mingjun Instance Details --> : None 
Port 22 is open for 0.0.0.0/0:, SecurityGroupName: SSH+HTTPS Instance Details --> : None 
Port 22 is open for 0.0.0.0/0:, SecurityGroupName: temp-engg-logi Instance Details --> : None 
Port 22 is open for 0.0.0.0/0:, SecurityGroupName: na-prod-1w-secgroup Instance Details --> : None 
Port 22 is open for 0.0.0.0/0:, SecurityGroupName: na-prod-1w-secgroup Instance Details --> : None 
Port 22 is open for 0.0.0.0/0:, SecurityGroupName: na-trial-1w-secgroup Instance Details --> : None 
Port 22 is open for 0.0.0.0/0:, SecurityGroupName: na-trial-1w-secgroup Instance Details --> : Non 

Answer 1

因为在您的for region in regions:循环中，每次迭代都会覆盖sg。你可能想要的是

sg = list() 
for region in regions: 
    connection=ec2.connect_to_region(region) 
    sg.extend(connection.get_all_security_groups()) 

编辑：（实例详细信息 - >：无）

这里的问题是，在我前面提到的循环，要覆盖connection也即connection=ec2.connect_to_region(region)。

因此，当您在您的getTag方法中做connection.get_all_instances(filters={'instance_id':instanceId})时，instanceId只能在最后一个区域查找，即ap-northeast-1。由于实例不属于这个区域，所以你得到None。

您需要重新安排你的代码像

def getTag(connection, instanceId): 
    reservations=connection.get_all_instances(filters={'instance_id':instanceId}) 
    for res in reservations: 
     for instance in res.instances: 
      return instance.tags['Name'],instance.private_ip_address,instance.region 

regions = ['us-east-1','us-west-1','us-west-2','eu-west-1','sa-east-1','ap-southeast-1','ap-southeast-2','ap-northeast-1'] 
for region in regions: 
    connection=ec2.connect_to_region(region) 
    sg = connection.get_all_security_groups() 
    try: 
     for securityGroup in sg: 
      for rule in securityGroup.rules: 
       if rule.to_port == '22' and '0.0.0.0/0' in str(rule.grants): 
        for instanceid in securityGroup.instances(): 
         instanceId=str(instanceid) 
         print "Port 22 is open for 0.0.0.0/0:, SecurityGroupName: %s Instance Details --> : %s " %(securityGroup.name, getTag(connection, instanceId.split(':')[1]))