limn.py 文件源码

def main(event, context):
  response = {
    "statusCode": 200,
    "body": 'Usage: curl -XPOST --data-urlencode "identity=$(curl -s http://169.254.169.254/latest/dynamic/instance-identity/pkcs7)" https://limn.company.com/'
  }
  logger.debug("event: {}".format(json.dumps(event)))
  if 'body' in event:
    identity = event['body']
    if identity.startswith('identity='):
      identity = identity[9:]
    try:
      identity = urllib.unquote(identity).decode('utf8')
      trusted_doc = awstrust.verify_pkcs7(identity)
      instance = Instance(
        trusted_doc['accountId'],
        trusted_doc['region'],
        trusted_doc['instanceId'])
      response['body'] = json.dumps(instance.__dict__)
    except Exception as e:
      response['statusCode'] = 401
      response['body'] = "Error: {}".format(e)
      raise
  logger.info("response: {}".format(json.dumps(response)))
  return response