dev_delete_vpc.py

#!/usr/bin/env python

import sys
import boto3
from pprint import pprint
import vars_dev

"""
THIS CODE NEEDS TO BE FIXED FOR AWS CLI 2 AND NEW BOTO3 TO TERMINATE EC2 INSTANCES
https://boto3.amazonaws.com/v1/documentation/api/latest/guide/quickstart.html

To delete a VPC, it is necessary to handle the following preliminary items
    # Terminate all instances
    # Delete all subnets
    # Delete custom security groups 
    # and custom route tables
    # Detach any internet gateways 
    # or virtual private gateways

This code should get any necessary information for that purpose
"""

def vpc_cleanup(vpcid):
    """Remove VPC from AWS
    Set your region/access-key/secret-key from env variables or boto config.

    :param vpcid: id of vpc to delete
    """
# THIS SCRIPT CURRENTLY HAS TO BE RUN TWICE TO COMPLETE THE DELETION OF THE VPC
# IT FAILS ON FIRST ATTEMPT

    # TODO:  Throw a valid error here
    if not vpcid:
        return

    ec2client = boto3.client('ec2')
    ec2 = boto3.resource('ec2')
    
    # identify the VPC    
    vpc_response = ec2client.describe_vpcs(
        VpcIds = [vpcid]
    )
    pprint(vpc_response)

    print('Start Removing VPC ({}) from AWS'.format(vpcid))

    vpc = ec2.Vpc(vpc_response['Vpcs'][0]['VpcId'])

    # TODO this is not complete
    # get endpoints for deletion
    vpc_endpoints = ec2client.describe_vpc_endpoints()
    for vpce in vpc_endpoints:
        pprint(vpce)

    # detach and delete all gateways associated with the vpc
    for gw in vpc.internet_gateways.all():
        print("detatching and deleting ({})".format(gw))
        vpc.detach_internet_gateway(InternetGatewayId=gw.id)
        gw.delete()

    # delete any vpc peering connections
    for vpcpeer in ec2client.describe_vpc_peering_connections(
            Filters=[{
                'Name': 'requester-vpc-info.vpc-id',
                'Values': [vpcid]
            }])['VpcPeeringConnections']:
        ec2client.VpcPeeringConnection(vpcpeer['VpcPeeringConnectionId']).delete()

    # delete our security groups
    for sg in vpc.security_groups.all():
        if sg.group_name != 'default':
            sg.delete()

    # delete all route table associations
    for rt in vpc.route_tables.all():
        pprint(rt.id)
        for rta in rt.associations:
            pprint(rta)
            if not rta.main:
                print("detatching and deleting ({})".format(rta))
                rta.delete()
            else:
                rta_sr = rta.get_available_subresources()
                pprint(rta_sr)
        print("Deleting route table {}".format(rt.id))
        if not rt.associations: rt.delete()

    # delete any subnets
    for subnet in vpc.subnets.all():
        for instance in subnet.instances.all():
            print("detatching and deleting ({})".format(instance))
            instance.terminate()

    # delete our endpoints
    for ep in ec2client.describe_vpc_endpoints(
            Filters=[{
                'Name': 'vpc-id',
                'Values': [vpcid]
            }])['VpcEndpoints']:
        ec2client.delete_vpc_endpoints(VpcEndpointIds=[ep['VpcEndpointId']])

    # delete non-default network acls
    for netacl in vpc.network_acls.all():
        if not netacl.is_default:
            netacl.delete()

    # delete network interfaces
    for subnet in vpc.subnets.all():
        for interface in subnet.network_interfaces.all():
            interface.delete()
        subnet.delete()

    # finally, delete the vpc
    print("Deleting VPC {}".format(vpcid))
    try:
        ec2client.delete_vpc(VpcId=vpcid)
    except Exception as e:
        print('VPC DELETE FAILED!')
        pprint(e)
        pprint(ec2client._exception_[1]['operation_name'])
        exit(1)

def main():
    vpc_id = vars_dev.dev_vpc_id
    vpc_cleanup(vpc_id)


if __name__ == '__main__':
    main()