Convert to boto3 and python3

1 files changed, 56 insertions, 13 deletions

diff --git a/ddns/ddns.py b/ddns/ddns.py
index 5ec92da..0bde4f7 100755
--- a/ddns/ddns.py
+++ b/ddns/ddns.py
@@ -1,18 +1,38 @@
 #!/usr/bin/env python
 
 import os
+import json
+import boto3
 import flask
 import hashlib
 import functools
-from boto.route53.record import ResourceRecordSets
-from boto.route53.connection import Route53Connection
+
+# pip install flask boto3
+
+# This is purely for documentation purposes
+__REQUIRED_IAM_POLICY__ = """
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": "ssm:GetParameter",
+            "Resource": "arn:aws:ssm:us-west-2::parameter/DDNS_CLIENTS"
+        },
+        {
+            "Effect": "Allow",
+            "Action": [
+                "route53:ListHostedZones",
+                "route53:ChangeResourceRecordSets"
+            ],
+            "Resource": "*"
+        }
+    ]
+}
+"""
 
 
 app = flask.Flask(__name__)
-app.config.from_pyfile("/etc/ddns.cfg", silent=True)
-app.config.from_pyfile("ddns.cfg", silent=True)
-if "AMAZON_KEY_ID" not in app.config:
-    raise Exception("Not configured")
 
 
 def returns_plain_text(f):
@@ -31,11 +51,25 @@ def get_ip():
 
 
 def update_record(zone, record, ip):
-    conn = Route53Connection(app.config["AMAZON_KEY_ID"],
-            app.config["AMAZON_SECRET_KEY"])
-    change_set = ResourceRecordSets(conn, conn.get_zone(zone).id)
-    change_set.add_change("UPSERT", record, type="A", ttl=60).add_value(ip)
-    change_set.commit()
+    client = boto3.client("route53")
+    zones = client.list_hosted_zones()["HostedZones"]
+
+    client.change_resource_record_sets(
+        HostedZoneId=[z["Id"] for z in zones if z["Name"] == zone][0],
+        ChangeBatch={
+            "Changes": [{
+                "Action": "UPSERT",
+                "ResourceRecordSet": {
+                    "Name": ".".join((record, zone)),
+                    "Type": "A",
+                    "TTL": 60,
+                    "ResourceRecords": [{
+                        "Value": ip,
+                    }]
+                }
+            }]
+        }
+    )
 
 
 @app.errorhandler(404)
@@ -53,16 +87,25 @@ def new_secret():
     return hashlib.sha256(os.urandom(100)).hexdigest()
 
 
+def get_client_config(client):
+    ssm = boto3.client("ssm")
+    clients = ssm.get_parameter(Name="DDNS_CLIENTS", WithDecryption=True)
+    config = json.loads(clients["Parameter"]["Value"])
+    return config.get(client)
+
+
 @app.route("/update", methods=["POST"])
 def update_ip():
     key = flask.request.form.get("key")
-    config = app.config["CLIENTS"].get(key)
+    config = get_client_config(key)
 
     if not config:
         flask.abort(404)
 
+    resource, zone = config.split(".", 1)
+
     try:
-        update_record(config["zone"], config["resource"], get_ip())
+        update_record(zone, resource, get_ip())
         return "OK"
     except:
         flask.abort(500)