AWS IAM Python 脚本 - 将新用户添加到现有组

Question

上下文： 我有一个 Python 脚本可以创建用户，决定是否进行编程访问，列出用户的当前组。 我的问题是我希望将新用户添加到显示的现有组之一。

我尝试了下面的代码，但出现以下错误：

python ec2-play.py
Please enter your e-mail address: 1@1.com
Do you require programmatic access?(y/n): n
Console access only
[...list of Groups...]
1: admin-short-term
2: aws-admin
3: aws-admin-mfa
4: aws-training
Please pick a Group number: 4
You selected option 4: arn:aws:iam::xxxxxxxxxxxx:group/aws-training
Traceback (most recent call last):
  File "ec2-play.py", line 41, in <module>
    final = grp.add_user_to_group(GroupName=g, UserName=mail)
  File "/opt/axe/local/python/local/lib/python2.7/site-packages/botocore/client.py", line 314, in _api_call
    return self._make_api_call(operation_name, kwargs)
  File "/opt/axe/local/python/local/lib/python2.7/site-packages/botocore/client.py", line 612, in _make_api_call
    raise error_class(parsed_response, operation_name)
botocore.errorfactory.NoSuchEntityException: An error occurred (NoSuchEntity) when calling the AddUserToGroup operation: The group with name r cannot be found.

这是产生该错误输出的代码：

import boto3

iam = boto3.resource('iam')
iam_keys = boto3.resource('iam')
group_list = boto3.client('iam')
attach_group = boto3.client('iam')
grp = boto3.client("iam")

mail = raw_input("Please enter your e-mail address: ")
response = iam.create_user(UserName=mail)

prog = raw_input("Do you require programmatic access?(y/n): ") 
if prog == "y":
        iam_keys.create_access_key(UserName=mail)
        print("Make sure awscli is installed on your machine")
elif prog == "n":
        print("Console access only")

list = group_list.list_groups()
groups = list['Groups']
print(groups)
index = 1

for group in groups:
        print("%d: %s" % (index, group["GroupName"]))
        index +=1

option = int(input("Please pick a Group number: "))
arn = groups[option-1]["Arn"]
print("You selected option %d: %s" % (option, arn))

var = "%s" % (arn)
var.split(":group/")[1]

g = var[1]

final = grp.add_user_to_group(GroupName=g, UserName=mail)

print("User has been added to Group %s you selected" % (g))

预期行为：新用户附加到所选组。
实际行为： Python 崩溃说找不到组 r。

Answer 1

您已经计算出选择了哪个组 - 它是 groups 列表中的第 option-1 个元素。您可以通过正常方式检索其任何属性，例如：

group = groups[option-1]
group_name = group["GroupName"]
group_arn = group["Arn"]

不要计算和使用 g，只需使用 groups[option-1][“GroupName”] 作为组名（或如上计算的 group_name）。

这里的大局是您将需要学习如何调试代码。边走边打印值（例如 var 和 g）并将它们与您期望看到的值进行比较是一种方法。 source-level 调试器是另一种方式。

AWS IAM Python 脚本 - 将新用户添加到现有组

AWS IAM Python script - Add new User to existing Group

amazon-web-services

python-2.7

aws-sdk

boto3