github-collaborator-manager | A tool to manage GitHub repo collaborators with files

Provision a GitHub personal token with repo scope permissions.
Provision a GitHub personal token with repo scope permissions.
Create a config.yaml with GitHub personal token. The file would look like this: github_token: 0123456789abcdef0123456789abcdef01234567
Zip up github_collaborator_manager, it's dependencies and the config.yaml tmpdir=`mktemp -d` pip install agithub PyYAML python-dateutil --target "$tmpdir" cwd=`pwd` pushd "$tmpdir" zip -r "${cwd}/github_collaborator_manager.zip" * popd rm -rf "$tmpdir" zip --junk-paths github_collaborator_manager.zip github_collaborator_manager/__init__.py chmod 644 github_collaborator_manager/config.yaml;zip --junk-paths github_collaborator_manager.zip github_collaborator_manager/config.yaml;chmod 600 github_collaborator_manager/config.yaml
Create an AWS IAM role to be used by a AWS Lambda function with LambdaBasicExecution echo '{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":{"Service":["lambda.amazonaws.com"]},"Action":["sts:AssumeRole"]}]}' | aws iam create-role --role-name github-collaborator-manager --assume-role-policy-document file:///dev/stdin aws iam attach-role-policy --role-name github-collaborator-manager --policy-arn arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
Deploy the zip artifact to Lambda role_arn="`aws iam get-role --role-name github-collaborator-manager --output text --query 'Role.Arn'`" lambda_arn="`aws lambda create-function --function-name github-collaborator-manager --runtime python2.7 --timeout 30 --role $role_arn --handler __init__.lambda_handler --zip-file fileb://github_collaborator_manager.zip --query 'FunctionArn' --output text`" echo "Created Lambda function $lambda_arn"
Create SNS Topic topic_arn=`aws sns create-topic --name GithubWebhookTopic --output text --query 'TopicArn'` aws sns create-topic --name GithubWebhookTopic --output table --query '{"Sns topic":TopicArn}' a=(${topic_arn//:/ });echo "Sns region : ${a[3]}"
Update Lambda function resource policy to grant SNS rights to invoke it aws lambda add-permission --function-name github-collaborator-manager --statement-id GiveSNSPermissionToInvokeFunction --action lambda:InvokeFunction --principal sns.amazonaws.com --source-arn $topic_arn
Subscribe the Lambda function to the SNS topic aws sns subscribe --topic-arn $topic_arn --protocol lambda --notification-endpoint $lambda_arn
Create IAM User to be used by GitHub aws iam create-user --user-name github-sns-publisher echo "{\"Version\": \"2012-10-17\",\"Statement\": [{\"Action\": [\"sns:Publish\"],\"Resource\": [\"${topic_arn}\"],\"Effect\": \"Allow\"}]}" | aws iam put-user-policy --user-name github-sns-publisher --policy-name PublishToSNS --policy-document file:///dev/stdin aws iam create-access-key --user-name github-sns-publisher --output table --query 'AccessKey.{"Aws Key":AccessKeyId, "Aws secret":SecretAccessKey}'