AWS SDK Automation

Python boto3 scripts for EC2 snapshots, S3 lifecycle, and IAM auditing.

A collection of Python automation scripts using boto3 to handle common AWS operational tasks: scheduled EC2 volume snapshots with retention, S3 intelligent-tiering lifecycle policy deployment, and IAM role auditing to surface unused permissions.

Tech Stack

Features

• EC2 snapshot scheduler with configurable retention window
• S3 lifecycle rule deployment across multiple buckets
• IAM role last-used audit with CSV export
• Dry-run mode for all destructive operations
• SNS alerts on snapshot failure or IAM anomaly

EC2 Snapshot Scheduler

The snapshot Lambda runs on an EventBridge schedule (default: daily at 02:00 UTC). It snapshots all volumes tagged `Backup=true`, applies a Name tag with the date, and deletes snapshots older than the configured retention window (default 14 days).

IAM Audit

The audit script iterates all IAM roles and checks the `LastUsedDate` field. Roles not used within the threshold (default 90 days) are listed in a CSV report and optionally tagged for decommission review.

Configuration

All scripts read configuration from environment variables or a `config.yaml` file. Deploy to Lambda using the included SAM template, or run locally with `python snapshot.py --dry-run` after configuring AWS credentials.

File Structure