Reference Silex old version in readme · romibuzi/majordome@d181081

Majordome

Majordome is both a command line tool and a web interface looking for unused resources on your AWS cloud based on a set of defined rules.

Majordome has been highly inspired by Netflix's Janitor Monkey, a monkey part of the Simian Army which has the same goal in mind.

This is an overview of what Majordome can detect with existing rules:

Detect an AMI not used by any EC2 instance
Detect an EBS Volume not attached to any EC2 instance
Detect a Snapshot of an EBS Volume that doesn't or no more exists
Detect an unused Elastic IP
Detect an unused Security Group
Detect a LoadBalancer without EC2 instances attached behind it

Table of Contents

Configuration

Install and Run Majordome

Manually

Prerequisites

Run

Run the web interface

Docker

Tests

FAQ

License

Credits

Table of Contents

Configuration

Make sure your authentication on AWS is set, either by exporting your AWS access key and secret:

export AWS_ACCESS_KEY_ID='...'
export AWS_SECRET_ACCESS_KEY='...'

Or put them in ~/.aws/credentials file:

[default]
aws_access_key_id = '...'
aws_secret_access_key = '...'

Finally, you have to copy .env.example to .env and edit AWS_REGION and AWS_ACCOUNT. AWS_ACCOUNT must not include - ex:63383838383, so get rid of them from your typical accountId format.

Note : Majordome should have extensible read access to different AWS resources like EC2 instances, security groups, Snapshots, Volumes and Elastic Load Balancers

This is the policy Majordome should have:

{
   "Version": "2012-10-17",
   "Statement": [{
      "Effect": "Allow",
      "Action": [
         "ec2:DescribeInstances",
         "ec2:DescribeImages",
         "ec2:DescribeVolumes",
         "ec2:DescribeSnapshots",
         "ec2:DescribeAddresses",
         "ec2:DescribeSecurityGroups",
         "elb:DescribeLoadBalancers",
         "rds:DescribeDBInstances",
         "elasticache:DescribeCacheClusters"
      ],
      "Resource": "*"
   }]
}

Check the aws doc for more informations about it.

Install and Run Majordome

Manually

Prerequisites

PHP >=8.2 with curl and sqlite3 extensions
Sqlite3
Composer

make install
make install-db

Run

make run

This will run the Majordome process, which will crawl different AWS resources and run each of them against the rule engine to decide if the resource is valid or not.

Majordome will save the run and its violations (a violation is when a resource is identified as invalid by a rule) under a sqlite database located at var/majordome.db.

Run the web interface

make run-web

The interface will be available at http://localhost:8080. It will display the list of Majordome runs and display details and associated violations for each of them.

Docker

First build the majordome docker image:

make docker-build

Then you are able to launch the majordome process:

make docker-run

Finally, launch the web interface that will be accessible at http://localhost:8080:

make docker-run-web

Tests

make install-dev
make test

Silex

To switch on the previous implementation based on Silex framework:

git checkout tags/silex

FAQ

I want to implement a new rule, is it possible ?

Yes ! The core of Majordome was designed for extensibility. There is a RuleInterface which each rule should implement, you can get a look to existing rules.

License

Licensed under the MIT license. See LICENSE for the full details.

Credits

www.freefavicon.com for the favicon

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Commit

There are no files selected for viewing

Majordome

Configuration

Install and Run Majordome

Manually

Prerequisites

Run

Run the web interface

Docker

Tests

Silex

FAQ

I want to implement a new rule, is it possible ?

License

Credits

0 comments on commit `d181081`

Commit

There are no files selected for viewing

Majordome

Configuration

Install and Run Majordome

Manually

Prerequisites

Run

Run the web interface

Docker

Tests

Silex

FAQ

I want to implement a new rule, is it possible ?

License

Credits

0 comments on commit d181081

0 comments on commit `d181081`