execute_imagebuilder.sh

#!/bin/bash
# "AVAILABLE" is desired end state for the image builder pipeline
yum install -y git python3-pip
pip3 install git-remote-codecommit
git config --global credential.helper '!aws codecommit credential-helper $@'
git config --global credential.UseHttpPath true
export CURRENT_BRANCH=$(git branch --show-current)
export CI_CD_USERNAME="CI/CD TekPossible GEM"
export CI_CD_EMAIL="ci-cd@tekpossible.com"
export CDK_STACK_BASE_NAME_LOWER="tekpossible-stratagem"
export IMAGE_PIPELINE_ARN=$(aws ssm get-parameter --name $CDK_STACK_BASE_NAME_LOWER-imagebuilder-arn --query 'Parameter.Value' | sed 's/"//g')
export IMAGE_VERSION_ARN=$(aws imagebuilder start-image-pipeline-execution --image-pipeline-arn $IMAGE_PIPELINE_ARN --query 'imageBuildVersionArn' | sed 's/"//g')
export IMAGE_STATE=$(aws imagebuilder get-image --image-build-version-arn $IMAGE_VERSION_ARN --query 'image.state.status'  | sed 's/"//g')
export INFRA_REPO_URL=$(aws ssm get-parameter --name $CDK_STACK_BASE_NAME_LOWER-infrastructure-repo --query 'Parameter.Value' | sed 's/"//g')
export REGION=$(aws ssm get-parameter --name $CDK_STACK_BASE_NAME_LOWER-region --query 'Parameter.Value' | sed 's/"//g')
export BUCKET_NAME=$(aws ssm get-parameter --name $CDK_STACK_BASE_NAME_LOWER-s3-bucket --query 'Parameter.Value' | sed 's/"//g')
echo "The Image Builder Pipeline started. Please go to the imagebuilder pipeline console if you wish to see more about this build"
echo "The image version ARN is $IMAGE_VERSION_ARN"

while [ "$IMAGE_STATE" != "AVAILABLE" ]
do 
	if [ "$IMAGE_STATE" = 'FAILED' ]; then 
		echo "Failure in image builder pipeline. Please look at the image builder logs"  
		exit 1 
	fi
	export IMAGE_STATE=$(aws imagebuilder get-image --image-build-version-arn $IMAGE_VERSION_ARN --query 'image.state.status'  | sed 's/"//g')
done

echo "Image builder succeeded. Working on commiting the AMI ID to the infrastructure repo..."
export AMI_IMAGE_ID=$(aws ec2 describe-images --filters "Name=tag:Ec2ImageBuilderArn,Values=$IMAGE_VERSION_ARN" --query 'Images[0].ImageId' | sed 's/"//g')
echo "The following AMI ID will be used: $AMI_IMAGE_ID"

# GRAB the Generated Artifacts and Stage them in our current directory
aws s3 cp s3://$BUCKET_NAME/artifact-os-security.zip ./artifact-os-security.zip

cd /tmp
git clone $INFRA_REPO_URL
cd /tmp/*infrastructure*
git checkout $CURRENT_BRANCH
python3 ./ami_config_modifier.py $REGION $AMI_IMAGE_ID
git config --global user.email "$CI_CD_EMAIL"
git config --global user.name "$CI_CD_USERNAME"
git commit -am "Automated CI/CD Commit from AMI Repo. Added updated AMI ID to the infrastructure configuration."
git push