From 33489ba41526a6287e753b6bb2b52c8a35087ac0 Mon Sep 17 00:00:00 2001
From: Rick Mendes <rick.mendes4@gmail.com>
Date: Mon, 4 May 2015 14:38:43 -0700
Subject: [PATCH] ec2_win_password module for windows ec2 instances

---
 .../extras/cloud/amazon/ec2_win_password.py   | 96 +++++++++++++++++++
 1 file changed, 96 insertions(+)
 create mode 100644 lib/ansible/modules/extras/cloud/amazon/ec2_win_password.py

diff --git a/lib/ansible/modules/extras/cloud/amazon/ec2_win_password.py b/lib/ansible/modules/extras/cloud/amazon/ec2_win_password.py
new file mode 100644
index 0000000000..ee795d5b62
--- /dev/null
+++ b/lib/ansible/modules/extras/cloud/amazon/ec2_win_password.py
@@ -0,0 +1,96 @@
+#!/usr/bin/python
+
+DOCUMENTATION = '''
+---
+module: ec2_win_password
+short_description: gets the default administrator password for ec2 windows instances
+description:
+    - Gets the default administrator password from any EC2 Windows instance.  The instance is referenced by its id (e.g. i-XXXXXXX). This module has a dependency on python-boto.
+version_added: "2.0"
+author: Rick Mendes
+options:
+  instance_id:
+    description:
+      - The instance id to get the password data from. 
+    required: true
+    default: null 
+    aliases: []
+  key_file:
+    description:
+      - path to the file containing the key pair used on the instance
+    required: true
+    default: null
+    aliases: []
+  region:
+    description:
+      - The AWS region to use.  Must be specified if ec2_url is not used. If not specified then the value of the EC2_REGION environment variable, if any, is used.
+    required: false
+    default: null
+    aliases: [ 'aws_region', 'ec2_region' ]
+
+extends_documentation_fragment: aws
+'''
+
+EXAMPLES = '''
+# Example of getting a password
+tasks:
+- name: get the Administrator password
+  ec2_win_password:
+    profile: my-boto-profile
+    instance_id: i-XXXXXX
+    region: us-east-1
+    key_file: "~/aws-creds/my_test_key.pem"
+'''
+
+import sys
+from base64 import b64decode
+from os.path import expanduser
+from Crypto.Cipher import PKCS1_v1_5
+from Crypto.PublicKey import RSA
+
+try:
+    import boto.ec2
+    HAS_BOTO = True
+except ImportError:
+    HAS_BOTO = False
+
+def main():
+    argument_spec = ec2_argument_spec()
+    argument_spec.update(dict(
+            instance_id = dict(required=True),
+            key_file = dict(required=True),
+        )
+    )
+    module = AnsibleModule(argument_spec=argument_spec)
+
+    if not HAS_BOTO:
+        module.fail_json(msg='Boto required for this module.')
+
+    instance_id = module.params.get('instance_id')
+    key_file = expanduser(module.params.get('key_file'))
+
+    ec2 = ec2_connect(module)
+
+    data = ec2.get_password_data(instance_id)
+    decoded = b64decode(data)
+
+    f = open(key_file, 'r')
+    key = RSA.importKey(f.read())
+    cipher = PKCS1_v1_5.new(key)
+    sentinel = 'password decryption failed!!!'
+
+    try:
+      decrypted = cipher.decrypt(decoded, sentinel)
+    except ValueError as e:
+      decrypted = None
+
+    if decrypted == None:
+        module.exit_json(win_password='', changed=False)
+    else:
+        module.exit_json(win_password=decrypted, changed=True)
+
+# import module snippets
+from ansible.module_utils.basic import *
+from ansible.module_utils.ec2 import *
+
+main()