// the find
swoodford/aws
A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.
A collection of standalone bash scripts for AWS operations that you'd otherwise have to click through the console to do: EBS snapshots, CloudWatch alarm setup, S3 security audits, VPC security group management, WAF IP set updates. It's for ops people who live in the terminal and want something to run right now, not a Terraform module to wire up.
The script coverage is genuinely broad — CloudFront invalidation polling, CloudWatch alarm creation across all regions, S3 content-type metadata fixes, and WAF IP set management are all tasks that have no clean one-liner in the raw CLI. The security audit script (ACL, CORS, policy, website config exported as JSON) is particularly useful for compliance work. Scripts like vpc-sg-import-rules-cloudflare.sh that pull live IP ranges and sync them to security groups are the kind of thing you'd otherwise write yourself once every year and lose. The IP-to-CIDR conversion utility is a small but handy piece that shows up in real infra work.
The README still references Python 2 (2.6.5+) for the AWS CLI and pip install patterns that AWS deprecated years ago — the CLI is now a standalone binary. This is a maintenance red flag. The scripts have no --dry-run mode, so running something like ec2-ebs-delete-snapshots.sh or cloudwatch-logs-delete-groups.sh is destructive with no preview. Most scripts hardcode region behavior or assume a single AWS profile, which breaks in multi-account setups without editing the script itself. The Travis CI badge goes nowhere useful and the copyright notice stops at 2018, which, combined with the last push being early 2026, suggests this gets occasional fixes but no active development.