Package: controltowerlib
A library to provide access to AWS service catalog provided by Control Tower and basic functionality with interfacing with it.Documentation:https://controltowerlib.readthedocs.org/en/latestDevelopment WorkflowThe workflow supports the following stepslinttestbuilddocumentuploadgraphThese actions are supported out of the box by the corresponding scripts under _CI/scripts directory with sane defaults based on best practices.
Sourcing setup_aliases.ps1 for windows powershell or setup_aliases.sh in bash on Mac or Linux will provide with handy aliases for the shell of all those commands prepended with an underscore.The bootstrap script creates a .venv directory inside the project directory hosting the virtual environment. It uses pipenv for that.
It is called by all other scripts before they do anything. So one could simple start by calling _lint and that would set up everything before it tried to actually lint the projectOnce the code is ready to be delivered the _tag script should be called accepting one of three arguments, patch, minor, major following the semantic versioning scheme.
So for the initial delivery one would call$ _tag –minorwhich would bump the version of the project to 0.1.0 tag it in git and do a push and also ask for the change and automagically update HISTORY.rst with the version and the change provided.So the full workflow after git is initialized is:repeat as necessary (of course it could be test - code - lint :) )codelinttestcommit and pushdevelop more through the code-lint-test cycletag (with the appropriate argument)buildupload (if you want to host your package in pypi)document (of course this could be run at any point)Important InformationThis template is based on pipenv. In order to be compatible with requirements.txt so the actual created package can be used by any part of the existing python ecosystem some hacks were needed.
So when building a package out of thisdo notsimple call$ python setup.py sdist bdist_eggas this will produce an unusable artifact with files missing.Instead use the provided build and upload scripts that create all the necessary files in the artifact.Project FeaturesLists accounts and OUs under Control TowerLists OUs under OrganizationCreate and delete and OU under Control Tower and register in Control Tower an OU created under OrganizationsCreate and terminate accounts under Control Tower(Accounts terminated are deleted from control tower and service catalog and moved under Organizations in an OU calledSuspended. The OU needs to exist and it should have a completely restrictive SCP applied to it)Some other stuff…History0.0.1 (18-02-2020)First code creation0.1.0 (12-01-2021)First public release.0.1.1 (19-01-2021)Working around the OU pagination until the implementation fixes that properly.0.1.2 (19-01-2021)Fixed pagination bug properly.0.2.0 (28-01-2021)Implemented control tower versions and account update capabilites.0.3.0 (26-02-2021)Implemented control tower update, identifying the deployment status and locking when busy, along with exposing some more data like guard rails and drift messages.0.4.0 (11-03-2021)Made account deletion not depending on the suspended OU existance and account factory retrieval checking for CT being deployed.0.5.0 (01-04-2021)Implemented (not properly functioning still) decommissioning of control tower.