golden hour

/opt/saltstack/salt/lib/python3.10/site-packages/salt/states

File/Folder	Size	Actions
__init__.py	25 B
__pycache__	-
acme.py	5.08 KB
alias.py	2.49 KB
alternatives.py	6.75 KB
ansiblegate.py	7.93 KB
apache.py	3.95 KB
apache_conf.py	2.72 KB
apache_module.py	2.73 KB
apache_site.py	2.66 KB
aptpkg.py	1.42 KB
archive.py	68.24 KB
artifactory.py	6.84 KB
at.py	7.48 KB
augeas.py	10.57 KB
aws_sqs.py	2.59 KB
azurearm_compute.py	11.78 KB
azurearm_dns.py	26.05 KB
azurearm_network.py	89.12 KB
azurearm_resource.py	28.23 KB
beacon.py	7.58 KB
bigip.py	96.63 KB
blockdev.py	5.13 KB
boto3_elasticache.py	48.01 KB
boto3_elasticsearch.py	32.58 KB
boto3_route53.py	37.54 KB
boto3_sns.py	12.69 KB
boto_apigateway.py	82.83 KB
boto_asg.py	31.93 KB
boto_cfn.py	11.53 KB
boto_cloudfront.py	6.01 KB
boto_cloudtrail.py	13.18 KB
boto_cloudwatch_alarm.py	6.4 KB
boto_cloudwatch_event.py	12.33 KB
boto_cognitoidentity.py	13.69 KB
boto_datapipeline.py	18.5 KB
boto_dynamodb.py	29.32 KB
boto_ec2.py	71.98 KB
boto_elasticache.py	16.75 KB
boto_elasticsearch_domain.py	12.27 KB
boto_elb.py	55.1 KB
boto_elbv2.py	12.19 KB
boto_iam.py	69.16 KB
boto_iam_role.py	27.12 KB
boto_iot.py	25.33 KB
boto_kinesis.py	16.69 KB
boto_kms.py	12.11 KB
boto_lambda.py	35.52 KB
boto_lc.py	11.04 KB
boto_rds.py	26 KB
boto_route53.py	19.49 KB
boto_s3.py	9.32 KB
boto_s3_bucket.py	24.67 KB
boto_secgroup.py	32.62 KB
boto_sns.py	8.92 KB
boto_sqs.py	7.97 KB
boto_vpc.py	62.23 KB
bower.py	8.26 KB
btrfs.py	10.34 KB
cabal.py	5.73 KB
ceph.py	1.9 KB
chef.py	3.76 KB
chocolatey.py	16.15 KB
chronos_job.py	4.6 KB
cimc.py	14.32 KB
cisconso.py	3.14 KB
cloud.py	14.4 KB
cmd.py	40.92 KB
composer.py	8.38 KB
consul.py	5.4 KB
cron.py	23.39 KB
cryptdev.py	6.17 KB
csf.py	9.98 KB
cyg.py	7.05 KB
ddns.py	4.2 KB
debconfmod.py	6.33 KB
dellchassis.py	24.49 KB
disk.py	6.49 KB
docker_container.py	85.27 KB
docker_image.py	16.7 KB
docker_network.py	36.78 KB
docker_volume.py	6.72 KB
drac.py	4.17 KB
dvs.py	26.29 KB
elasticsearch.py	20.38 KB
elasticsearch_index.py	3.25 KB
elasticsearch_index_template.py	3.67 KB
environ.py	5.81 KB
eselect.py	2.27 KB
esxcluster.py	22.4 KB
esxdatacenter.py	4.44 KB
esxi.py	63.07 KB
esxvm.py	20.11 KB
etcd_mod.py	11 KB
ethtool.py	9.88 KB
event.py	2.48 KB
file.py	316.7 KB
firewall.py	1.33 KB
firewalld.py	26.08 KB
gem.py	7.13 KB
git.py	123.85 KB
github.py	27.25 KB
glance_image.py	2.26 KB
glassfish.py	21.47 KB
glusterfs.py	12.21 KB
gnomedesktop.py	7.47 KB
gpg.py	5.28 KB
grafana.py	12.11 KB
grafana4_dashboard.py	17.31 KB
grafana4_datasource.py	6.15 KB
grafana4_org.py	7.73 KB
grafana4_user.py	5.52 KB
grafana_dashboard.py	17.74 KB
grafana_datasource.py	5.31 KB
grains.py	15.57 KB
group.py	9.84 KB
heat.py	9.69 KB
helm.py	10.39 KB
hg.py	6.33 KB
highstate_doc.py	1.41 KB
host.py	8.64 KB
http.py	7.46 KB
icinga2.py	9.07 KB
idem.py	3.91 KB
ifttt.py	2.12 KB
incron.py	5.71 KB
influxdb08_database.py	2.85 KB
influxdb08_user.py	3.39 KB
influxdb_continuous_query.py	2.83 KB
influxdb_database.py	2.11 KB
influxdb_retention_policy.py	4.82 KB
influxdb_user.py	4.84 KB
infoblox_a.py	4.24 KB
infoblox_cname.py	4.19 KB
infoblox_host_record.py	6.59 KB
infoblox_range.py	6.85 KB
ini_manage.py	12.67 KB
ipmi.py	8.42 KB
ipset.py	9.66 KB
iptables.py	27.65 KB
jboss7.py	23.95 KB
jenkins.py	3.36 KB
junos.py	17.78 KB
kapacitor.py	6.46 KB
kernelpkg.py	6.42 KB
keyboard.py	2.01 KB
keystone.py	27.12 KB
keystone_domain.py	2.81 KB
keystone_endpoint.py	4.69 KB
keystone_group.py	3.25 KB
keystone_project.py	3.36 KB
keystone_role.py	2.33 KB
keystone_role_grant.py	4.08 KB
keystone_service.py	2.89 KB
keystone_user.py	3.47 KB
keystore.py	5.67 KB
kmod.py	8.59 KB
kubernetes.py	24.87 KB
layman.py	2.44 KB
ldap.py	19.78 KB
libcloud_dns.py	5.7 KB
libcloud_loadbalancer.py	5.66 KB
libcloud_storage.py	5.13 KB
linux_acl.py	24.42 KB
locale.py	2.52 KB
logadm.py	4.67 KB
logrotate.py	3.86 KB
loop.py	7.74 KB
lvm.py	13.33 KB
lvs_server.py	6.28 KB
lvs_service.py	4.38 KB
lxc.py	22.17 KB
lxd.py	7.88 KB
lxd_container.py	22.25 KB
lxd_image.py	10.59 KB
lxd_profile.py	7.11 KB
mac_assistive.py	1.55 KB
mac_keychain.py	5.59 KB
mac_xattr.py	3.15 KB
macdefaults.py	2.65 KB
macpackage.py	6.76 KB
makeconf.py	6.87 KB
marathon_app.py	4.45 KB
mdadm_raid.py	6.41 KB
memcached.py	3.95 KB
modjk.py	2.84 KB
modjk_worker.py	6.49 KB
module.py	18.64 KB
mongodb_database.py	1.65 KB
mongodb_user.py	6.26 KB
monit.py	2.68 KB
mount.py	50.32 KB
mssql_database.py	3 KB
mssql_login.py	3.64 KB
mssql_role.py	2.37 KB
mssql_user.py	3.51 KB
msteams.py	2.53 KB
mysql_database.py	6.05 KB
mysql_grants.py	8.49 KB
mysql_query.py	13.07 KB
mysql_user.py	9.51 KB
net_napalm_yang.py	9.15 KB
netacl.py	31.92 KB
netconfig.py	33.42 KB
netntp.py	12.51 KB
netsnmp.py	11.33 KB
netusers.py	16.1 KB
network.py	23.97 KB
neutron_network.py	3.96 KB
neutron_secgroup.py	4 KB
neutron_secgroup_rule.py	4.75 KB
neutron_subnet.py	4.29 KB
nexus.py	4.97 KB
nfs_export.py	4.92 KB
nftables.py	19.5 KB
npm.py	11.21 KB
ntp.py	2.12 KB
nxos.py	10.37 KB
nxos_upgrade.py	3.5 KB
openstack_config.py	3.26 KB
openvswitch_bridge.py	4.36 KB
openvswitch_db.py	2.24 KB
openvswitch_port.py	17.24 KB
opsgenie.py	4.07 KB
pagerduty.py	1.89 KB
pagerduty_escalation_policy.py	5.42 KB
pagerduty_schedule.py	6.09 KB
pagerduty_service.py	3.93 KB
pagerduty_user.py	1.18 KB
panos.py	48.13 KB
pbm.py	20.46 KB
pcs.py	36.46 KB
pdbedit.py	3.43 KB
pecl.py	3.65 KB
pip_state.py	38.55 KB
pkg.py	138.08 KB
pkgbuild.py	11.37 KB
pkgng.py	685 B
pkgrepo.py	27.53 KB
portage_config.py	5.01 KB
ports.py	5.65 KB
postgres_cluster.py	4.19 KB
postgres_database.py	6.08 KB
postgres_extension.py	5.68 KB
postgres_group.py	8.52 KB
postgres_initdb.py	2.84 KB
postgres_language.py	3.94 KB
postgres_privileges.py	7.86 KB
postgres_schema.py	4.34 KB
postgres_tablespace.py	6.62 KB
postgres_user.py	9.49 KB
powerpath.py	2.34 KB
probes.py	15.06 KB
process.py	1.32 KB
proxy.py	4.94 KB
pushover.py	3.13 KB
pyenv.py	6.07 KB
pyrax_queues.py	2.97 KB
quota.py	1.4 KB
rabbitmq_cluster.py	1.84 KB
rabbitmq_plugin.py	2.77 KB
rabbitmq_policy.py	4.59 KB
rabbitmq_upstream.py	7.9 KB
rabbitmq_user.py	8.89 KB
rabbitmq_vhost.py	3.04 KB
rbac_solaris.py	6.67 KB
rbenv.py	7.36 KB
rdp.py	1.28 KB
redismod.py	4.76 KB
reg.py	19.22 KB
restconf.py	6.41 KB
rsync.py	4.45 KB
rvm.py	6.56 KB
salt_proxy.py	1.34 KB
saltmod.py	33.12 KB
saltutil.py	8.91 KB
schedule.py	12.47 KB
selinux.py	18.61 KB
serverdensity_device.py	6.41 KB
service.py	37.89 KB
slack.py	4.98 KB
smartos.py	44.83 KB
smtp.py	2.3 KB
snapper.py	7.24 KB
solrcloud.py	4.48 KB
splunk.py	4.32 KB
splunk_search.py	3.17 KB
sqlite3.py	14.7 KB
ssh_auth.py	19.57 KB
ssh_known_hosts.py	7.92 KB
stateconf.py	494 B
status.py	2.21 KB
statuspage.py	17.29 KB
supervisord.py	10.48 KB
svn.py	8.14 KB
sysctl.py	4.11 KB
sysfs.py	2.13 KB
syslog_ng.py	2.97 KB
sysrc.py	2.82 KB
telemetry_alert.py	7.04 KB
test.py	13.09 KB
testinframod.py	1.35 KB
timezone.py	3.42 KB
tls.py	1.81 KB
tomcat.py	9.72 KB
trafficserver.py	8.82 KB
tuned.py	3.32 KB
uptime.py	1.87 KB
user.py	38.63 KB
vagrant.py	11.4 KB
vault.py	3.28 KB
vbox_guest.py	4.05 KB
victorops.py	3.32 KB
virt.py	80.41 KB
virtualenv_mod.py	11.21 KB
webutil.py	3.89 KB
win_certutil.py	4.8 KB
win_dacl.py	7.96 KB
win_dism.py	14.97 KB
win_dns_client.py	8.32 KB
win_firewall.py	6.87 KB
win_iis.py	31.56 KB
win_lgpo.py	24.99 KB
win_lgpo_reg.py	10.96 KB
win_license.py	1.6 KB
win_network.py	14.18 KB
win_path.py	6.39 KB
win_pki.py	5.56 KB
win_powercfg.py	3.79 KB
win_servermanager.py	10.4 KB
win_shortcut.py	7.81 KB
win_smtp_server.py	10.01 KB
win_snmp.py	6.64 KB
win_system.py	13.78 KB
win_wua.py	16.27 KB
win_wusa.py	3.53 KB
winrepo.py	2.74 KB
wordpress.py	4.82 KB
x509.py	27.86 KB
x509_v2.py	64.78 KB
xml.py	1.75 KB
xmpp.py	2.61 KB
zabbix_action.py	9.35 KB
zabbix_host.py	27.25 KB
zabbix_hostgroup.py	5.64 KB
zabbix_mediatype.py	16.89 KB
zabbix_template.py	35.14 KB
zabbix_user.py	17.6 KB
zabbix_usergroup.py	9.64 KB
zabbix_usermacro.py	9.69 KB
zabbix_valuemap.py	8.11 KB
zcbuildout.py	5.16 KB
zenoss.py	2.89 KB
zfs.py	34.48 KB
zk_concurrency.py	5.81 KB
zone.py	46.48 KB
zookeeper.py	11.55 KB
zpool.py	13.4 KB

Edit: boto3_elasticache.py

"""
Manage Elasticache with boto3
=============================

.. versionadded:: 2017.7.0

Create, destroy and update Elasticache clusters. Be aware that this interacts
with Amazon's services, and so may incur charges.

This module uses boto3 behind the scenes - as a result it inherits any limitations
it boto3's implementation of the AWS API.  It is also designed to as directly as
possible leverage boto3's parameter naming and semantics.  This allows one to use
http://boto3.readthedocs.io/en/latest/reference/services/elasticache.html as an
excellent source for details too involved to reiterate here.

Note:  This module is designed to be transparent ("intentionally ignorant" is the
phrase I used to describe it to my boss) to new AWS / boto options - since all
AWS API params are passed directly through both the state and executions modules,
any new args to existing functions which become available after this documentation
is written should work immediately.

Brand new API calls, of course, would still require new functions to be added :)

This module accepts explicit elasticache credentials but can also utilize IAM
roles assigned to the instance through Instance Profiles. Dynamic credentials are
then automatically obtained from AWS API and no further configuration is necessary.
More information is available
`here <http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_.

If IAM roles are not used you need to specify them either in a pillar file or
in the minion's config file:

.. code-block:: yaml

elasticache.keyid: GKTADJGHEIQSXMKKRBJ08H
    elasticache.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs

It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile, either
passed in as a dict, or as a string to pull from pillars or minion config:

.. code-block:: yaml

myprofile:
      keyid: GKTADJGHEIQSXMKKRBJ08H
      key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
        region: us-east-1

.. code-block:: yaml

Ensure myelasticache exists:
      boto3_elasticache.present:
        - name: myelasticache
        - engine: redis
        - cache_node_type: cache.t1.micro
        - num_cache_nodes: 1
        - notification_topic_arn: arn:aws:sns:us-east-1:879879:my-sns-topic
        - region: us-east-1
        - keyid: GKTADJGHEIQSXMKKRBJ08H
        - key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs

.. code-block:: yaml

# Using a profile from pillars
    Ensure myelasticache exists:
      boto3_elasticache.present:
        - name: myelasticache
        - engine: redis
        - cache_node_type: cache.t1.micro
        - num_cache_nodes: 1
        - notification_topic_arn: arn:aws:sns:us-east-1:879879:my-sns-topic
        - region: us-east-1
        - profile: myprofile

.. code-block:: yaml

# Passing in a profile
    Ensure myelasticache exists:
      boto3_elasticache.present:
        - name: myelasticache
        - engine: redis
        - cache_node_type: cache.t1.micro
        - num_cache_nodes: 1
        - notification_topic_arn: arn:aws:sns:us-east-1:879879:my-sns-topic
        - region: us-east-1
        - profile:
            keyid: GKTADJGHEIQSXMKKRBJ08H
            key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
"""

def __virtual__():
    """
    Only load if boto is available.
    """
    if "boto3_elasticache.cache_cluster_exists" in __salt__:
        return "boto3_elasticache"
    return (False, "boto3_elasticcache module could not be loaded")

def _diff_cache_cluster(current, desired):
    """
    If you need to enhance what modify_cache_cluster() considers when deciding what is to be
    (or can be) updated, add it to 'modifiable' below.  It's a dict mapping the param as used
    in modify_cache_cluster() to that in describe_cache_clusters().  Any data fiddlery that
    needs to be done to make the mappings meaningful should be done in the munging section
    below as well.

This function will ONLY touch settings that are explicitly called out in 'desired' - any
    settings which might have previously been changed from their 'default' values will not be
    changed back simply by leaving them out of 'desired'.  This is both intentional, and
    much, much easier to code :)
    """
    ### The data formats are annoyingly (and as far as I can can tell, unnecessarily)
    ### different - we have to munge to a common format to compare...
    if current.get("SecurityGroups") is not None:
        current["SecurityGroupIds"] = [
            s["SecurityGroupId"] for s in current["SecurityGroups"]
        ]
    if current.get("CacheSecurityGroups") is not None:
        current["CacheSecurityGroupNames"] = [
            c["CacheSecurityGroupName"] for c in current["CacheSecurityGroups"]
        ]
    if current.get("NotificationConfiguration") is not None:
        current["NotificationTopicArn"] = current["NotificationConfiguration"][
            "TopicArn"
        ]
        current["NotificationTopicStatus"] = current["NotificationConfiguration"][
            "TopicStatus"
        ]
    if current.get("CacheParameterGroup") is not None:
        current["CacheParameterGroupName"] = current["CacheParameterGroup"][
            "CacheParameterGroupName"
        ]

modifiable = {
        "AutoMinorVersionUpgrade": "AutoMinorVersionUpgrade",
        "AZMode": "AZMode",
        "CacheNodeType": "CacheNodeType",
        "CacheNodeIdsToRemove": None,
        "CacheParameterGroupName": "CacheParameterGroupName",
        "CacheSecurityGroupNames": "CacheSecurityGroupNames",
        "EngineVersion": "EngineVersion",
        "NewAvailabilityZones": None,
        "NotificationTopicArn": "NotificationTopicArn",
        "NotificationTopicStatus": "NotificationTopicStatus",
        "NumCacheNodes": "NumCacheNodes",
        "PreferredMaintenanceWindow": "PreferredMaintenanceWindow",
        "SecurityGroupIds": "SecurityGroupIds",
        "SnapshotRetentionLimit": "SnapshotRetentionLimit",
        "SnapshotWindow": "SnapshotWindow",
    }

need_update = {}
    for m, o in modifiable.items():
        if m in desired:
            if not o:
                # Always pass these through - let AWS do the math...
                need_update[m] = desired[m]
            else:
                if m in current:
                    # Equivalence testing works fine for current simple type comparisons
                    # This might need enhancement if more complex structures enter the picture
                    if current[m] != desired[m]:
                        need_update[m] = desired[m]
    return need_update

def cache_cluster_present(
    name,
    wait=900,
    security_groups=None,
    region=None,
    key=None,
    keyid=None,
    profile=None,
    **args
):
    """
    Ensure a given cache cluster exists.

name
        Name of the cache cluster (cache cluster id).

wait
        Integer describing how long, in seconds, to wait for confirmation from AWS that the
        resource is in the desired state.  Zero meaning to return success or failure immediately
        of course.  Note that waiting for the cluster to become available is generally the
        better course, as failure to do so will often lead to subsequent failures when managing
        dependent resources.

security_groups
        One or more VPC security groups (names and/or IDs) associated with the cache cluster.

.. note::
            This is additive with any sec groups provided via the
            SecurityGroupIds parameter below.  Use this parameter ONLY when you
            are creating a cluster in a VPC.

CacheClusterId
        The node group (shard) identifier. This parameter is stored as a lowercase string.

Constraints:

- A name must contain from 1 to 20 alphanumeric characters or hyphens.
        - The first character must be a letter.
        - A name cannot end with a hyphen or contain two consecutive hyphens.

.. note::
            In general this parameter is not needed, as 'name' is used if it's
            not provided.

ReplicationGroupId
        The ID of the replication group to which this cache cluster should belong. If this
        parameter is specified, the cache cluster is added to the specified replication
        group as a read replica; otherwise, the cache cluster is a standalone primary that
        is not part of any replication group.  If the specified replication group is
        Multi-AZ enabled and the Availability Zone is not specified, the cache cluster is
        created in Availability Zones that provide the best spread of read replicas across
        Availability Zones.

.. note:
            This parameter is ONLY valid if the Engine parameter is redis. Due
            to current limitations on Redis (cluster mode disabled), this
            parameter is not supported on Redis (cluster mode enabled)
            replication groups.

AZMode
        Specifies whether the nodes in this Memcached cluster are created in a single
        Availability Zone or created across multiple Availability Zones in the cluster's
        region. If the AZMode and PreferredAvailabilityZones are not specified,
        ElastiCache assumes single-az mode.

.. note::
            This parameter is ONLY supported for Memcached cache clusters.

PreferredAvailabilityZone
        The EC2 Availability Zone in which the cache cluster is created.  All nodes
        belonging to this Memcached cache cluster are placed in the preferred Availability
        Zone. If you want to create your nodes across multiple Availability Zones, use
        PreferredAvailabilityZones.

Default:  System chosen Availability Zone.

PreferredAvailabilityZones
        A list of the Availability Zones in which cache nodes are created. The order of
        the zones in the list is not important.  The number of Availability Zones listed
        must equal the value of NumCacheNodes.  If you want all the nodes in the same
        Availability Zone, use PreferredAvailabilityZone instead, or repeat the
        Availability Zone multiple times in the list.

Default:  System chosen Availability Zones.

.. note::
            This option is ONLY supported on Memcached.

If you are creating your cache cluster in an Amazon VPC
            (recommended) you can only locate nodes in Availability Zones that
            are associated with the subnets in the selected subnet group.

NumCacheNodes
        The initial (integer) number of cache nodes that the cache cluster has.

.. note::
            For clusters running Redis, this value must be 1.

For clusters running Memcached, this value must be between 1 and 20.

CacheNodeType
        The compute and memory capacity of the nodes in the node group (shard).
        Valid node types (and pricing for them) are exhaustively described at
        https://aws.amazon.com/elasticache/pricing/

.. note::
            All T2 instances must be created in a VPC

Redis backup/restore is not supported for Redis (cluster mode
           disabled) T1 and T2 instances. Backup/restore is supported on Redis
           (cluster mode enabled) T2 instances.

Redis Append-only files (AOF) functionality is not supported for T1
           or T2 instances.

Engine
        The name of the cache engine to be used for this cache cluster.  Valid values for
        this parameter are:  memcached | redis

EngineVersion
        The version number of the cache engine to be used for this cache cluster. To view
        the supported cache engine versions, use the DescribeCacheEngineVersions operation.

.. note::
            You can upgrade to a newer engine version but you cannot downgrade
            to an earlier engine version. If you want to use an earlier engine
            version, you must delete the existing cache cluster or replication
            group and create it anew with the earlier engine version.

CacheParameterGroupName
        The name of the parameter group to associate with this cache cluster. If this
        argument is omitted, the default parameter group for the specified engine is used.
        You cannot use any parameter group which has cluster-enabled='yes' when creating
        a cluster.

CacheSubnetGroupName
        The name of the Cache Subnet Group to be used for the cache cluster.  Use this
        parameter ONLY when you are creating a cache cluster within a VPC.

.. note::
            If you're going to launch your cluster in an Amazon VPC, you need
            to create a subnet group before you start creating a cluster.

CacheSecurityGroupNames
        A list of Cache Security Group names to associate with this cache cluster.  Use
        this parameter ONLY when you are creating a cache cluster outside of a VPC.

SecurityGroupIds
        One or more VPC security groups associated with the cache cluster.  Use this
        parameter ONLY when you are creating a cache cluster within a VPC.

Tags
        A list of tags to be added to this resource.  Note that due to shortcomings in the
        AWS API for Elasticache, these can only be set during resource creation - later
        modification is not (currently) supported.

SnapshotArns
        A single-element string list containing an Amazon Resource Name (ARN) that
        uniquely identifies a Redis RDB snapshot file stored in Amazon S3. The snapshot
        file is used to populate the node group (shard). The Amazon S3 object name in
        the ARN cannot contain any commas.

.. note::
            This parameter is ONLY valid if the Engine parameter is redis.

SnapshotName
        The name of a Redis snapshot from which to restore data into the new node group
        (shard). The snapshot status changes to restoring while the new node group (shard)
        is being created.

.. note::
            This parameter is ONLY valid if the Engine parameter is redis.

PreferredMaintenanceWindow
        Specifies the weekly time range during which maintenance on the cache cluster is
        permitted.  It is specified as a range in the format ddd:hh24:mi-ddd:hh24:mi
        (24H Clock UTC).  The minimum maintenance window is a 60 minute period.
        Valid values for ddd are:  sun, mon, tue, wed, thu, fri, sat

Example:  sun:23:00-mon:01:30

Port
        The port number on which each of the cache nodes accepts connections.

Default:  6379

NotificationTopicArn
        The Amazon Resource Name (ARN) of the Amazon Simple Notification Service (SNS)
        topic to which notifications are sent.

.. note::
            The Amazon SNS topic owner must be the same as the cache cluster
            owner.

AutoMinorVersionUpgrade
        This (boolean) parameter is currently disabled.

SnapshotRetentionLimit
        The number of days for which ElastiCache retains automatic snapshots before
        deleting them.

Default:  0 (i.e., automatic backups are disabled for this cache cluster).

.. note::
            This parameter is ONLY valid if the Engine parameter is redis.

SnapshotWindow
        The daily time range (in UTC) during which ElastiCache begins taking a daily
        snapshot of your node group (shard).  If you do not specify this parameter,
        ElastiCache automatically chooses an appropriate time range.

Example:  05:00-09:00

.. note::
            This parameter is ONLY valid if the Engine parameter is redis.

AuthToken
        The password used to access a password protected server.

Password constraints:

- Must be only printable ASCII characters.
        - Must be at least 16 characters and no more than 128 characters in length.
        - Cannot contain any of the following characters: '/', '"', or "@".

CacheNodeIdsToRemove
        A list of cache node IDs to be removed. A node ID is a numeric identifier (0001, 0002,
        etc.).  This parameter is only valid when NumCacheNodes is less than the existing number of
        cache nodes.  The number of cache node IDs supplied in this parameter must match the
        difference between the existing number of cache nodes in the cluster or pending cache nodes,
        whichever is greater, and the value of NumCacheNodes in the request.

NewAvailabilityZones
        The list of Availability Zones where the new Memcached cache nodes are created.
        This parameter is only valid when NumCacheNodes in the request is greater than the sum of
        the number of active cache nodes and the number of cache nodes pending creation (which may
        be zero).  The number of Availability Zones supplied in this list must match the cache nodes
        being added in this request.
        Note:  This option is only supported on Memcached clusters.

NotificationTopicStatus
        The status of the SNS notification topic.  Notifications are sent only if the status is active.

Valid values:  active | inactive

region
        Region to connect to.

key
        Secret key to be used.

keyid
        Access key to be used.

profile
        A dict with region, key and keyid, or a pillar key (string) that
        contains a dict with region, key and keyid.
    """
    ret = {"name": name, "result": True, "comment": "", "changes": {}}
    args = {k: v for k, v in args.items() if not k.startswith("_")}
    current = __salt__["boto3_elasticache.describe_cache_clusters"](
        name, region=region, key=key, keyid=keyid, profile=profile
    )
    if current:
        check_update = True
    else:
        check_update = False
        only_on_modify = [
            "CacheNodeIdsToRemove",
            "NewAvailabilityZones",
            "NotificationTopicStatus",
        ]
        create_args = {}
        for k, v in args.items():
            if k in only_on_modify:
                check_update = True
            else:
                create_args[k] = v
        if __opts__["test"]:
            ret["comment"] = "Cache cluster {} would be created.".format(name)
            ret["result"] = None
            return ret
        created = __salt__["boto3_elasticache.create_cache_cluster"](
            name,
            wait=wait,
            security_groups=security_groups,
            region=region,
            key=key,
            keyid=keyid,
            profile=profile,
            **create_args
        )
        if created:
            new = __salt__["boto3_elasticache.describe_cache_clusters"](
                name, region=region, key=key, keyid=keyid, profile=profile
            )
            ret["comment"] = "Cache cluster {} was created.".format(name)
            ret["changes"]["old"] = None
            ret["changes"]["new"] = new[0]
        else:
            ret["result"] = False
            ret["comment"] = "Failed to create {} cache cluster.".format(name)

if check_update:
        # Refresh this in case we're updating from 'only_on_modify' above...
        updated = __salt__["boto3_elasticache.describe_cache_clusters"](
            name, region=region, key=key, keyid=keyid, profile=profile
        )
        need_update = _diff_cache_cluster(updated["CacheClusters"][0], args)
        if need_update:
            if __opts__["test"]:
                ret["comment"] = "Cache cluster {} would be modified.".format(name)
                ret["result"] = None
                return ret
            modified = __salt__["boto3_elasticache.modify_cache_cluster"](
                name,
                wait=wait,
                security_groups=security_groups,
                region=region,
                key=key,
                keyid=keyid,
                profile=profile,
                **need_update
            )
            if modified:
                new = __salt__["boto3_elasticache.describe_cache_clusters"](
                    name, region=region, key=key, keyid=keyid, profile=profile
                )
                if ret["comment"]:  # 'create' just ran...
                    ret["comment"] += " ... and then immediately modified."
                else:
                    ret["comment"] = "Cache cluster {} was modified.".format(name)
                    ret["changes"]["old"] = current
                ret["changes"]["new"] = new[0]
            else:
                ret["result"] = False
                ret["comment"] = "Failed to modify cache cluster {}.".format(name)
        else:
            ret["comment"] = "Cache cluster {} is in the desired state.".format(name)
    return ret

def cache_cluster_absent(
    name, wait=600, region=None, key=None, keyid=None, profile=None, **args
):
    """
    Ensure a given cache cluster is deleted.

name
        Name of the cache cluster.

CacheClusterId
        The node group (shard) identifier.
        Note:  In general this parameter is not needed, as 'name' is used if it's not provided.

FinalSnapshotIdentifier
        The user-supplied name of a final cache cluster snapshot.  This is the unique name
        that identifies the snapshot.  ElastiCache creates the snapshot, and then deletes the
        cache cluster immediately afterward.

region
        Region to connect to.

key
        Secret key to be used.

keyid
        Access key to be used.

def _diff_replication_group(current, desired):
    """
    If you need to enhance what modify_replication_group() considers when deciding what is to be
    (or can be) updated, add it to 'modifiable' below.  It's a dict mapping the param as used
    in modify_replication_group() to that in describe_replication_groups().  Any data fiddlery
    that needs to be done to make the mappings meaningful should be done in the munging section
    below as well.

modifiable = {
        # Amazingly, the AWS API provides NO WAY to query the current state of most repl group
        # settings!  All we can do is send a modify op with the desired value, just in case it's
        # different.  And THEN, we can't determine if it's been changed!  Stupid?  YOU BET!
        "AutomaticFailoverEnabled": "AutomaticFailoverEnabled",
        "AutoMinorVersionUpgrade": None,
        "CacheNodeType": None,
        "CacheParameterGroupName": None,
        "CacheSecurityGroupNames": None,
        "EngineVersion": None,
        "NotificationTopicArn": None,
        "NotificationTopicStatus": None,
        "PreferredMaintenanceWindow": None,
        "PrimaryClusterId": None,
        "ReplicationGroupDescription": "Description",
        "SecurityGroupIds": None,
        "SnapshotRetentionLimit": "SnapshotRetentionLimit",
        "SnapshottingClusterId": "SnapshottingClusterId",
        "SnapshotWindow": "SnapshotWindow",
    }

def replication_group_present(
    name,
    wait=900,
    security_groups=None,
    region=None,
    key=None,
    keyid=None,
    profile=None,
    **args
):
    """
    Ensure a replication group exists and is in the given state.

name
        Name of replication group

security_groups
        One or more VPC security groups (names and/or IDs) associated with the cache cluster.

ReplicationGroupId
        The replication group identifier. This parameter is stored as a lowercase string.

Constraints:

- A name must contain from 1 to 20 alphanumeric characters or hyphens.
        - The first character must be a letter.
        - A name cannot end with a hyphen or contain two consecutive hyphens.

.. note::
            In general this parameter is not needed, as 'name' is used if it's
            not provided.

ReplicationGroupDescription
        A user-created description for the replication group.

PrimaryClusterId
        The identifier of the cache cluster that serves as the primary for this replication group.
        This cache cluster must already exist and have a status of available.  This parameter is
        not required if NumCacheClusters, NumNodeGroups, or ReplicasPerNodeGroup is specified.

AutomaticFailoverEnabled
        Specifies whether a read-only replica is automatically promoted to read/write primary if
        the existing primary fails.  If true, Multi-AZ is enabled for this replication group. If
        false, Multi-AZ is disabled for this replication group.

Default:  False

.. note::
            AutomaticFailoverEnabled must be enabled for Redis (cluster mode
            enabled) replication groups.

ElastiCache Multi-AZ replication groups is not supported on:

- Redis versions earlier than 2.8.6.
            - Redis (cluster mode disabled): T1 and T2 node types.
            - Redis (cluster mode enabled): T2 node types.

NumCacheClusters
        The number of clusters this replication group initially has.  This parameter is not used
        if there is more than one node group (shard). You should use ReplicasPerNodeGroup instead.
        If Multi-AZ is enabled , the value of this parameter must be at least 2.  The maximum
        permitted value for NumCacheClusters is 6 (primary plus 5 replicas).

PreferredCacheClusterAZs
        A list of EC2 Availability Zones in which the replication group's cache clusters are
        created. The order of the Availability Zones in the list is the order in which clusters
        are allocated. The primary cluster is created in the first AZ in the list.  This parameter
        is not used if there is more than one node group (shard).  You should use
        NodeGroupConfiguration instead.  The number of Availability Zones listed must equal the
        value of NumCacheClusters.

Default:  System chosen Availability Zones.

.. note::
            If you are creating your replication group in an Amazon VPC
            (recommended), you can only locate cache clusters in Availability
            Zones associated with the subnets in the selected subnet group.

NumNodeGroups
        An optional parameter that specifies the number of node groups (shards)
        for this Redis (cluster mode enabled) replication group. For Redis
        (cluster mode disabled) either omit this parameter or set it to 1.

Default:  1

ReplicasPerNodeGroup
        An optional parameter that specifies the number of replica nodes in
        each node group (shard). Valid values are:  0 to 5

NodeGroupConfiguration
        A list of node group (shard) configuration options. Each node group (shard) configuration
        has the following:  Slots, PrimaryAvailabilityZone, ReplicaAvailabilityZones, ReplicaCount.
        If you're creating a Redis (cluster mode disabled) or a Redis (cluster mode enabled)
        replication group, you can use this parameter to configure one node group (shard) or you
        can omit this parameter.  For fiddly details of the expected data layout of this param, see
        http://boto3.readthedocs.io/en/latest/reference/services/elasticache.html?#ElastiCache.Client.create_replication_group

CacheNodeType
        The compute and memory capacity of the nodes in the node group (shard).
        See https://aws.amazon.com/elasticache/pricing/ for current sizing, prices, and constraints.

.. note:
            All T2 instances are created in an Amazon Virtual Private Cloud
            (Amazon VPC). Backup/restore is not supported for Redis (cluster
            mode disabled) T1 and T2 instances. Backup/restore is supported on
            Redis (cluster mode enabled) T2 instances. Redis Append-only files
            (AOF) functionality is not supported for T1 or T2 instances.

Engine
        The name of the cache engine to be used for the cache clusters in this replication group.

EngineVersion
        The version number of the cache engine to be used for the cache clusters in this replication
        group. To view the supported cache engine versions, use the DescribeCacheEngineVersions
        operation.

CacheParameterGroupName
        The name of the parameter group to associate with this replication group. If this argument
        is omitted, the default cache parameter group for the specified engine is used.

.. note::
            If you are running Redis version 3.2.4 or later, only one node
            group (shard), and want to use a default parameter group, we
            recommend that you specify the parameter group by name.

To create a Redis (cluster mode disabled) replication group, use
            CacheParameterGroupName=default.redis3.2

To create a Redis (cluster mode enabled) replication group, use
            CacheParameterGroupName=default.redis3.2.cluster.on

CacheSubnetGroupName
        The name of the cache subnet group to be used for the replication group.

.. note::
            If you're going to launch your cluster in an Amazon VPC, you need
            to create a s group before you start creating a cluster. For more
            information, see Subnets and Subnet Groups.

CacheSecurityGroupNames
        A list of cache security group names to associate with this replication group.

SecurityGroupIds
        One or more Amazon VPC security groups associated with this replication group.  Use this
        parameter only when you are creating a replication group in an VPC.

SnapshotArns
        A list of ARNs that uniquely identify the Redis RDB snapshot files stored in Amazon S3.
        These snapshot files are used to populate the replication group.  The Amazon S3 object name
        in the ARN cannot contain any commas. The list must match the number of node groups (shards)
        in the replication group, which means you cannot repartition.

.. note::
            This parameter is only valid if the Engine parameter is redis.

SnapshotName
        The name of a snapshot from which to restore data into the new replication group.  The
        snapshot status changes to restoring while the new replication group is being created.
        Note:  This parameter is only valid if the Engine parameter is redis.

PreferredMaintenanceWindow
        Specifies the weekly time range during which maintenance on the cluster is performed. It is
        specified as a range in the format ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). The minimum
        maintenance window is a 60 minute period.
        Valid values for ddd are:  sun, mon, tue, wed, thu, fri, sat

Example:  sun:23:00-mon:01:30

Port
        The port number on which each member of the replication group accepts connections.

NotificationTopicArn
        The ARN of an SNS topic to which notifications are sent.

.. note::
            The SNS topic owner must be the same as the cache cluster owner.

AutoMinorVersionUpgrade
        This parameter is currently disabled.

SnapshotRetentionLimit
        The number of days for which ElastiCache will retain automatic snapshots before deleting
        them.

Default:  0 (that is, automatic backups are disabled for this cache cluster).

.. note::
            This parameter is only valid if the Engine parameter is redis.

SnapshotWindow
        The daily time range (in UTC) during which ElastiCache begins taking a daily snapshot of
        your node group (shard).  If you do not specify this parameter, ElastiCache automatically
        chooses an appropriate time range.

Example:  05:00-09:00

.. note::
            This parameter is only valid if the Engine parameter is redis.

AuthToken
        The password used to access a password protected server.
        Password constraints:

SnapshottingClusterId
        The cache cluster ID that is used as the daily snapshot source for the replication group.

NotificationTopicStatus
        The status of the SNS notification topic.  Notifications are sent only if the status is active.
        Valid values:  active | inactive

region
        Region to connect to.

key
        Secret key to be used.

keyid
        Access key to be used.

profile
        A dict with region, key and keyid, or a pillar key (string)
        that contains a dict with region, key and keyid.
    """
    ret = {"name": name, "result": True, "comment": "", "changes": {}}
    args = {k: v for k, v in args.items() if not k.startswith("_")}
    current = __salt__["boto3_elasticache.describe_replication_groups"](
        name, region=region, key=key, keyid=keyid, profile=profile
    )
    if current:
        check_update = True
    else:
        check_update = False
        only_on_modify = ["SnapshottingClusterId", "NotificationTopicStatus"]
        create_args = {}
        for k, v in args.items():
            if k in only_on_modify:
                check_update = True
            else:
                create_args[k] = v
        if __opts__["test"]:
            ret["comment"] = "Replication group {} would be created.".format(name)
            ret["result"] = None
            return ret
        created = __salt__["boto3_elasticache.create_replication_group"](
            name,
            wait=wait,
            security_groups=security_groups,
            region=region,
            key=key,
            keyid=keyid,
            profile=profile,
            **create_args
        )
        if created:
            new = __salt__["boto3_elasticache.describe_replication_groups"](
                name, region=region, key=key, keyid=keyid, profile=profile
            )
            ret["comment"] = "Replication group {} was created.".format(name)
            ret["changes"]["old"] = None
            ret["changes"]["new"] = new[0]
        else:
            ret["result"] = False
            ret["comment"] = "Failed to create {} replication group.".format(name)

if check_update:
        # Refresh this in case we're updating from 'only_on_modify' above...
        updated = __salt__["boto3_elasticache.describe_replication_groups"](
            name, region=region, key=key, keyid=keyid, profile=profile
        )[0]
        need_update = _diff_replication_group(updated, args)
        if need_update:
            if __opts__["test"]:
                ret["comment"] = "Replication group {} would be modified.".format(name)
                ret["result"] = None
                return ret
            modified = __salt__["boto3_elasticache.modify_replication_group"](
                name,
                wait=wait,
                security_groups=security_groups,
                region=region,
                key=key,
                keyid=keyid,
                profile=profile,
                **need_update
            )
            if modified:
                new = __salt__["boto3_elasticache.describe_replication_groups"](
                    name, region=region, key=key, keyid=keyid, profile=profile
                )
                if ret["comment"]:  # 'create' just ran...
                    ret["comment"] += " ... and then immediately modified."
                else:
                    ret["comment"] = "Replication group {} was modified.".format(name)
                    ret["changes"]["old"] = current[0] if current else None
                ret["changes"]["new"] = new[0]
            else:
                ret["result"] = False
                ret["comment"] = "Failed to modify replication group {}.".format(name)
        else:
            ret["comment"] = "Replication group {} is in the desired state.".format(
                name
            )
    return ret

def replication_group_absent(
    name, wait=600, region=None, key=None, keyid=None, profile=None, **args
):
    """
    Ensure a given replication group is deleted.

name
        Name of the replication group.

ReplicationGroupId
        The replication group identifier.
        Note:  In general this parameter is not needed, as 'name' is used if it's not provided.

RetainPrimaryCluster
        If set to true, all of the read replicas are deleted, but the primary node is retained.

FinalSnapshotIdentifier
        The name of a final node group (shard) snapshot.  ElastiCache creates the snapshot from
        the primary node in the cluster, rather than one of the replicas; this is to ensure that
        it captures the freshest data.  After the final snapshot is taken, the replication group is
        immediately deleted.

region
        Region to connect to.

key
        Secret key to be used.

keyid
        Access key to be used.

def _diff_cache_subnet_group(current, desired):
    """
    If you need to enhance what modify_cache_subnet_group() considers when deciding what is to be
    (or can be) updated, add it to 'modifiable' below.  It's a dict mapping the param as used
    in modify_cache_subnet_group() to that in describe_cache_subnet_group().  Any data fiddlery that
    needs to be done to make the mappings meaningful should be done in the munging section
    below as well.

def cache_subnet_group_present(
    name, subnets=None, region=None, key=None, keyid=None, profile=None, **args
):
    """
    Ensure cache subnet group exists.

name
        A name for the cache subnet group. This value is stored as a lowercase string.
        Constraints:  Must contain no more than 255 alphanumeric characters or hyphens.

subnets
        A list of VPC subnets (IDs, Names, or a mix) for the cache subnet group.

CacheSubnetGroupName
        A name for the cache subnet group. This value is stored as a lowercase string.
        Constraints:  Must contain no more than 255 alphanumeric characters or hyphens.
        Note:  In general this parameter is not needed, as 'name' is used if it's not provided.

CacheSubnetGroupDescription
        A description for the cache subnet group.

SubnetIds
        A list of VPC subnet IDs for the cache subnet group.  This is ADDITIVE with 'subnets' above.

region
        Region to connect to.

key
        Secret key to be used.

keyid
        Access key to be used.

profile
        A dict with region, key and keyid, or a pillar key (string) that
        contains a dict with region, key and keyid.
    """
    ret = {"name": name, "result": True, "comment": "", "changes": {}}
    args = {k: v for k, v in args.items() if not k.startswith("_")}
    current = __salt__["boto3_elasticache.describe_cache_subnet_groups"](
        name, region=region, key=key, keyid=keyid, profile=profile
    )
    if current:
        check_update = True
    else:
        check_update = False
        if __opts__["test"]:
            ret["comment"] = "Cache subnet group {} would be created.".format(name)
            ret["result"] = None
            return ret
        created = __salt__["boto3_elasticache.create_cache_subnet_group"](
            name,
            subnets=subnets,
            region=region,
            key=key,
            keyid=keyid,
            profile=profile,
            **args
        )
        if created:
            new = __salt__["boto3_elasticache.describe_cache_subnet_groups"](
                name, region=region, key=key, keyid=keyid, profile=profile
            )
            ret["comment"] = "Cache subnet group {} was created.".format(name)
            ret["changes"]["old"] = None
            ret["changes"]["new"] = new[0]
        else:
            ret["result"] = False
            ret["comment"] = "Failed to create {} cache subnet group.".format(name)

if check_update:
        need_update = _diff_cache_subnet_group(current, args)
        if need_update:
            if __opts__["test"]:
                ret["comment"] = "Cache subnet group {} would be modified.".format(name)
                ret["result"] = None
                return ret
            modified = __salt__["boto3_elasticache.modify_cache_subnet_group"](
                name,
                subnets=subnets,
                region=region,
                key=key,
                keyid=keyid,
                profile=profile,
                **need_update
            )
            if modified:
                new = __salt__["boto3_elasticache.describe_cache_subnet_groups"](
                    name, region=region, key=key, keyid=keyid, profile=profile
                )
                ret["comment"] = "Cache subnet group {} was modified.".format(name)
                ret["changes"]["old"] = current["CacheSubetGroups"][0]
                ret["changes"]["new"] = new[0]
            else:
                ret["result"] = False
                ret["comment"] = "Failed to modify cache subnet group {}.".format(name)
        else:
            ret["comment"] = "Cache subnet group {} is in the desired state.".format(
                name
            )
    return ret

def cache_subnet_group_absent(
    name, region=None, key=None, keyid=None, profile=None, **args
):
    """
    Ensure a given cache subnet group is deleted.

name
        Name of the cache subnet group.

CacheSubnetGroupName
        A name for the cache subnet group.
        Note:  In general this parameter is not needed, as 'name' is used if it's not provided.

region
        Region to connect to.

key
        Secret key to be used.

keyid
        Access key to be used.