ansible-aws-snapshot-tool for Debian/Ubuntu

Ansible role for installing aws-snapshot-tool on the system.

Overwrite Default Variables

The vars/main.yml file should contain your list of packages you want to install in order to override defaults found in defaults/main.yml.

Setting up AWS access

Create a policy

Create permissions policy to allow use to action backups. Use the iam.policy.sample to create the policy.

Create a user for the policy

Create a user and assign to it the policy from previous step.

SNS Permissions

If you are planning to use SNS for notifications, don't forget to add permissions to the user.

Assign write or AmazonSNSFullAccess permissions.

If you fail to do this, the script will fail like so:

Traceback (most recent call last):
  File "/opt/aws-snapshot-tool/makesnapshots.py", line 235, in <module>
    sns.publish(sns_arn, message, 'Finished AWS snapshotting')
  File "/usr/local/lib/python2.7/dist-packages/boto/sns/connection.py", line 290, in publish
    return self._make_request('Publish', params, '/', 'POST')
  File "/usr/local/lib/python2.7/dist-packages/boto/sns/connection.py", line 765, in _make_request
    raise self.ResponseError(response.status, response.reason, body)
boto.exception.BotoServerError: BotoServerError: 403 Forbidden
{"Error":{"Code":"AuthorizationError","Message":"User: arn:aws:iam::104767170405:user/aws-snapshot-tool is not authorized to perform: SNS:Publish on resource: arn:aws:sns:ap-southeast-2:104767170405:aws_automatic_snapshots","Type":"Sender"},"RequestId":"0de5fb3b-5ef2-575c-b009-a97a219bc70f"}

Post Cron Tasks

It's always a good idea to keep track of important cron tasks being executed. What's more important than backups? This is a trick question.

For this we have some variables that are can be overwritten to perform tasks after the cron task runs and is successful.

NOTE: Make sure to add && in front of the command.

ast__daily_post_cron_action: "&& curl -s https://hchk.io/some_id"
ast__weekly_post_cron_action: "&& curl -s https://hchk.io/some_id"
ast__monthly_post_cron_action: "&& curl -s https://hchk.io/some_id"