golden hour

/opt/saltstack/salt/lib/python3.10/site-packages/salt/states

File/Folder	Size	Actions
__init__.py	25 B
__pycache__	-
acme.py	5.08 KB
alias.py	2.49 KB
alternatives.py	6.75 KB
ansiblegate.py	7.93 KB
apache.py	3.95 KB
apache_conf.py	2.72 KB
apache_module.py	2.73 KB
apache_site.py	2.66 KB
aptpkg.py	1.42 KB
archive.py	68.24 KB
artifactory.py	6.84 KB
at.py	7.48 KB
augeas.py	10.57 KB
aws_sqs.py	2.59 KB
azurearm_compute.py	11.78 KB
azurearm_dns.py	26.05 KB
azurearm_network.py	89.12 KB
azurearm_resource.py	28.23 KB
beacon.py	7.58 KB
bigip.py	96.63 KB
blockdev.py	5.13 KB
boto3_elasticache.py	48.01 KB
boto3_elasticsearch.py	32.58 KB
boto3_route53.py	37.54 KB
boto3_sns.py	12.69 KB
boto_apigateway.py	82.83 KB
boto_asg.py	31.93 KB
boto_cfn.py	11.53 KB
boto_cloudfront.py	6.01 KB
boto_cloudtrail.py	13.18 KB
boto_cloudwatch_alarm.py	6.4 KB
boto_cloudwatch_event.py	12.33 KB
boto_cognitoidentity.py	13.69 KB
boto_datapipeline.py	18.5 KB
boto_dynamodb.py	29.32 KB
boto_ec2.py	71.98 KB
boto_elasticache.py	16.75 KB
boto_elasticsearch_domain.py	12.27 KB
boto_elb.py	55.1 KB
boto_elbv2.py	12.19 KB
boto_iam.py	69.16 KB
boto_iam_role.py	27.12 KB
boto_iot.py	25.33 KB
boto_kinesis.py	16.69 KB
boto_kms.py	12.11 KB
boto_lambda.py	35.52 KB
boto_lc.py	11.04 KB
boto_rds.py	26 KB
boto_route53.py	19.49 KB
boto_s3.py	9.32 KB
boto_s3_bucket.py	24.67 KB
boto_secgroup.py	32.62 KB
boto_sns.py	8.92 KB
boto_sqs.py	7.97 KB
boto_vpc.py	62.23 KB
bower.py	8.26 KB
btrfs.py	10.34 KB
cabal.py	5.73 KB
ceph.py	1.9 KB
chef.py	3.76 KB
chocolatey.py	16.15 KB
chronos_job.py	4.6 KB
cimc.py	14.32 KB
cisconso.py	3.14 KB
cloud.py	14.4 KB
cmd.py	40.92 KB
composer.py	8.38 KB
consul.py	5.4 KB
cron.py	23.39 KB
cryptdev.py	6.17 KB
csf.py	9.98 KB
cyg.py	7.05 KB
ddns.py	4.2 KB
debconfmod.py	6.33 KB
dellchassis.py	24.49 KB
disk.py	6.49 KB
docker_container.py	85.27 KB
docker_image.py	16.7 KB
docker_network.py	36.78 KB
docker_volume.py	6.72 KB
drac.py	4.17 KB
dvs.py	26.29 KB
elasticsearch.py	20.38 KB
elasticsearch_index.py	3.25 KB
elasticsearch_index_template.py	3.67 KB
environ.py	5.81 KB
eselect.py	2.27 KB
esxcluster.py	22.4 KB
esxdatacenter.py	4.44 KB
esxi.py	63.07 KB
esxvm.py	20.11 KB
etcd_mod.py	11 KB
ethtool.py	9.88 KB
event.py	2.48 KB
file.py	316.7 KB
firewall.py	1.33 KB
firewalld.py	26.08 KB
gem.py	7.13 KB
git.py	123.85 KB
github.py	27.25 KB
glance_image.py	2.26 KB
glassfish.py	21.47 KB
glusterfs.py	12.21 KB
gnomedesktop.py	7.47 KB
gpg.py	5.28 KB
grafana.py	12.11 KB
grafana4_dashboard.py	17.31 KB
grafana4_datasource.py	6.15 KB
grafana4_org.py	7.73 KB
grafana4_user.py	5.52 KB
grafana_dashboard.py	17.74 KB
grafana_datasource.py	5.31 KB
grains.py	15.57 KB
group.py	9.84 KB
heat.py	9.69 KB
helm.py	10.39 KB
hg.py	6.33 KB
highstate_doc.py	1.41 KB
host.py	8.64 KB
http.py	7.46 KB
icinga2.py	9.07 KB
idem.py	3.91 KB
ifttt.py	2.12 KB
incron.py	5.71 KB
influxdb08_database.py	2.85 KB
influxdb08_user.py	3.39 KB
influxdb_continuous_query.py	2.83 KB
influxdb_database.py	2.11 KB
influxdb_retention_policy.py	4.82 KB
influxdb_user.py	4.84 KB
infoblox_a.py	4.24 KB
infoblox_cname.py	4.19 KB
infoblox_host_record.py	6.59 KB
infoblox_range.py	6.85 KB
ini_manage.py	12.67 KB
ipmi.py	8.42 KB
ipset.py	9.66 KB
iptables.py	27.65 KB
jboss7.py	23.95 KB
jenkins.py	3.36 KB
junos.py	17.78 KB
kapacitor.py	6.46 KB
kernelpkg.py	6.42 KB
keyboard.py	2.01 KB
keystone.py	27.12 KB
keystone_domain.py	2.81 KB
keystone_endpoint.py	4.69 KB
keystone_group.py	3.25 KB
keystone_project.py	3.36 KB
keystone_role.py	2.33 KB
keystone_role_grant.py	4.08 KB
keystone_service.py	2.89 KB
keystone_user.py	3.47 KB
keystore.py	5.67 KB
kmod.py	8.59 KB
kubernetes.py	24.87 KB
layman.py	2.44 KB
ldap.py	19.78 KB
libcloud_dns.py	5.7 KB
libcloud_loadbalancer.py	5.66 KB
libcloud_storage.py	5.13 KB
linux_acl.py	24.42 KB
locale.py	2.52 KB
logadm.py	4.67 KB
logrotate.py	3.86 KB
loop.py	7.74 KB
lvm.py	13.33 KB
lvs_server.py	6.28 KB
lvs_service.py	4.38 KB
lxc.py	22.17 KB
lxd.py	7.88 KB
lxd_container.py	22.25 KB
lxd_image.py	10.59 KB
lxd_profile.py	7.11 KB
mac_assistive.py	1.55 KB
mac_keychain.py	5.59 KB
mac_xattr.py	3.15 KB
macdefaults.py	2.65 KB
macpackage.py	6.76 KB
makeconf.py	6.87 KB
marathon_app.py	4.45 KB
mdadm_raid.py	6.41 KB
memcached.py	3.95 KB
modjk.py	2.84 KB
modjk_worker.py	6.49 KB
module.py	18.64 KB
mongodb_database.py	1.65 KB
mongodb_user.py	6.26 KB
monit.py	2.68 KB
mount.py	50.32 KB
mssql_database.py	3 KB
mssql_login.py	3.64 KB
mssql_role.py	2.37 KB
mssql_user.py	3.51 KB
msteams.py	2.53 KB
mysql_database.py	6.05 KB
mysql_grants.py	8.49 KB
mysql_query.py	13.07 KB
mysql_user.py	9.51 KB
net_napalm_yang.py	9.15 KB
netacl.py	31.92 KB
netconfig.py	33.42 KB
netntp.py	12.51 KB
netsnmp.py	11.33 KB
netusers.py	16.1 KB
network.py	23.97 KB
neutron_network.py	3.96 KB
neutron_secgroup.py	4 KB
neutron_secgroup_rule.py	4.75 KB
neutron_subnet.py	4.29 KB
nexus.py	4.97 KB
nfs_export.py	4.92 KB
nftables.py	19.5 KB
npm.py	11.21 KB
ntp.py	2.12 KB
nxos.py	10.37 KB
nxos_upgrade.py	3.5 KB
openstack_config.py	3.26 KB
openvswitch_bridge.py	4.36 KB
openvswitch_db.py	2.24 KB
openvswitch_port.py	17.24 KB
opsgenie.py	4.07 KB
pagerduty.py	1.89 KB
pagerduty_escalation_policy.py	5.42 KB
pagerduty_schedule.py	6.09 KB
pagerduty_service.py	3.93 KB
pagerduty_user.py	1.18 KB
panos.py	48.13 KB
pbm.py	20.46 KB
pcs.py	36.46 KB
pdbedit.py	3.43 KB
pecl.py	3.65 KB
pip_state.py	38.55 KB
pkg.py	138.08 KB
pkgbuild.py	11.37 KB
pkgng.py	685 B
pkgrepo.py	27.53 KB
portage_config.py	5.01 KB
ports.py	5.65 KB
postgres_cluster.py	4.19 KB
postgres_database.py	6.08 KB
postgres_extension.py	5.68 KB
postgres_group.py	8.52 KB
postgres_initdb.py	2.84 KB
postgres_language.py	3.94 KB
postgres_privileges.py	7.86 KB
postgres_schema.py	4.34 KB
postgres_tablespace.py	6.62 KB
postgres_user.py	9.49 KB
powerpath.py	2.34 KB
probes.py	15.06 KB
process.py	1.32 KB
proxy.py	4.94 KB
pushover.py	3.13 KB
pyenv.py	6.07 KB
pyrax_queues.py	2.97 KB
quota.py	1.4 KB
rabbitmq_cluster.py	1.84 KB
rabbitmq_plugin.py	2.77 KB
rabbitmq_policy.py	4.59 KB
rabbitmq_upstream.py	7.9 KB
rabbitmq_user.py	8.89 KB
rabbitmq_vhost.py	3.04 KB
rbac_solaris.py	6.67 KB
rbenv.py	7.36 KB
rdp.py	1.28 KB
redismod.py	4.76 KB
reg.py	19.22 KB
restconf.py	6.41 KB
rsync.py	4.45 KB
rvm.py	6.56 KB
salt_proxy.py	1.34 KB
saltmod.py	33.12 KB
saltutil.py	8.91 KB
schedule.py	12.47 KB
selinux.py	18.61 KB
serverdensity_device.py	6.41 KB
service.py	37.89 KB
slack.py	4.98 KB
smartos.py	44.83 KB
smtp.py	2.3 KB
snapper.py	7.24 KB
solrcloud.py	4.48 KB
splunk.py	4.32 KB
splunk_search.py	3.17 KB
sqlite3.py	14.7 KB
ssh_auth.py	19.57 KB
ssh_known_hosts.py	7.92 KB
stateconf.py	494 B
status.py	2.21 KB
statuspage.py	17.29 KB
supervisord.py	10.48 KB
svn.py	8.14 KB
sysctl.py	4.11 KB
sysfs.py	2.13 KB
syslog_ng.py	2.97 KB
sysrc.py	2.82 KB
telemetry_alert.py	7.04 KB
test.py	13.09 KB
testinframod.py	1.35 KB
timezone.py	3.42 KB
tls.py	1.81 KB
tomcat.py	9.72 KB
trafficserver.py	8.82 KB
tuned.py	3.32 KB
uptime.py	1.87 KB
user.py	38.63 KB
vagrant.py	11.4 KB
vault.py	3.28 KB
vbox_guest.py	4.05 KB
victorops.py	3.32 KB
virt.py	80.41 KB
virtualenv_mod.py	11.21 KB
webutil.py	3.89 KB
win_certutil.py	4.8 KB
win_dacl.py	7.96 KB
win_dism.py	14.97 KB
win_dns_client.py	8.32 KB
win_firewall.py	6.87 KB
win_iis.py	31.56 KB
win_lgpo.py	24.99 KB
win_lgpo_reg.py	10.96 KB
win_license.py	1.6 KB
win_network.py	14.18 KB
win_path.py	6.39 KB
win_pki.py	5.56 KB
win_powercfg.py	3.79 KB
win_servermanager.py	10.4 KB
win_shortcut.py	7.81 KB
win_smtp_server.py	10.01 KB
win_snmp.py	6.64 KB
win_system.py	13.78 KB
win_wua.py	16.27 KB
win_wusa.py	3.53 KB
winrepo.py	2.74 KB
wordpress.py	4.82 KB
x509.py	27.86 KB
x509_v2.py	64.78 KB
xml.py	1.75 KB
xmpp.py	2.61 KB
zabbix_action.py	9.35 KB
zabbix_host.py	27.25 KB
zabbix_hostgroup.py	5.64 KB
zabbix_mediatype.py	16.89 KB
zabbix_template.py	35.14 KB
zabbix_user.py	17.6 KB
zabbix_usergroup.py	9.64 KB
zabbix_usermacro.py	9.69 KB
zabbix_valuemap.py	8.11 KB
zcbuildout.py	5.16 KB
zenoss.py	2.89 KB
zfs.py	34.48 KB
zk_concurrency.py	5.81 KB
zone.py	46.48 KB
zookeeper.py	11.55 KB
zpool.py	13.4 KB

Edit: boto3_route53.py

"""
Manage Route53 records with Boto 3

.. versionadded:: 2017.7.0

Create and delete Route53 records. Be aware that this interacts with Amazon's
services, and so may incur charges.

This module uses ``boto3``, which can be installed via package, or pip.

This module accepts explicit route53 credentials but can also utilize
IAM roles assigned to the instance through Instance Profiles. Dynamic
credentials are then automatically obtained from AWS API and no further
configuration is necessary. More information available `here
<http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html>`_.

If IAM roles are not used you need to specify them either in a pillar file or
in the minion's config file:

.. code-block:: yaml

route53.keyid: GKTADJGHEIQSXMKKRBJ08H
    route53.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs

It's also possible to specify ``key``, ``keyid`` and ``region`` via a profile, either
passed in as a dict, or as a string to pull from pillars or minion config:

.. code-block:: yaml

myprofile:
      keyid: GKTADJGHEIQSXMKKRBJ08H
      key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs
      region: us-east-1

.. code-block:: yaml

An exciting new AWS Route 53 Hosted Zone:
      boto_route53.hosted_zone_present:
        - Name: example.com.
        - PrivateZone: true
        - VPCs:
          - VPCName: MyLittleVPC
            VPCRegion: us-east-1
          - VPCId: vpc-12345678
        - region: us-east-1
        - keyid: GKTADJGHEIQSXMKKRBJ08H
        - key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs

mycnamerecord:
      boto_route53.rr_present:
        - Name: test.example.com.
        - ResourceRecords:
          - my-elb.us-east-1.elb.amazonaws.com.
        - DomainName: example.com.
        - TTL: 60
        - Type: CNAME
        - region: us-east-1
        - keyid: GKTADJGHEIQSXMKKRBJ08H
        - key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs

"""
# keep lint from choking
# pylint: disable=W0106
# pylint: disable=E1320

import logging
import uuid

import salt.utils.data
import salt.utils.dictupdate
from salt.exceptions import SaltInvocationError

log = logging.getLogger(__name__)  # pylint: disable=W1699

def __virtual__():
    """
    Only load if boto is available.
    """
    if "boto3_route53.find_hosted_zone" in __salt__:
        return "boto3_route53"
    return (False, "boto3_route53 module could not be loaded")

def hosted_zone_present(
    name,
    Name=None,
    PrivateZone=False,
    CallerReference=None,
    Comment=None,
    VPCs=None,
    region=None,
    key=None,
    keyid=None,
    profile=None,
):
    """
    Ensure a hosted zone exists with the given attributes.

name
        The name of the state definition.

Name
        The name of the domain. This should be a fully-specified domain, and should terminate with a
        period. This is the name you have registered with your DNS registrar. It is also the name
        you will delegate from your registrar to the Amazon Route 53 delegation servers returned in
        response to this request.  If not provided, the value of name will be used.

PrivateZone
        Set True if creating a private hosted zone.  If true, then 'VPCs' is also required.

Comment
        Any comments you want to include about the hosted zone.

CallerReference
        A unique string that identifies the request and that allows create_hosted_zone() calls to be
        retried without the risk of executing the operation twice.  This helps ensure idempotency
        across state calls, but can cause issues if a zone is deleted and then an attempt is made
        to recreate it with the same CallerReference.  If not provided, a unique UUID will be
        generated at each state run, which can potentially lead to duplicate zones being created if
        the state is run again while the previous zone creation is still in PENDING status (which
        can occasionally take several minutes to clear).  Maximum length of 128.

VPCs
        A list of dicts, each dict composed of a VPCRegion, and either a VPCId or a VPCName.
        Note that this param is ONLY used if PrivateZone == True

VPCId
            When creating a private hosted zone, either the VPC ID or VPC Name to associate with is
            required.  Exclusive with VPCName.

VPCName
            When creating a private hosted zone, either the VPC ID or VPC Name to associate with is
            required.  Exclusive with VPCId.

VPCRegion
            When creating a private hosted zone, the region of the associated VPC is required.  If
            not provided, an effort will be made to determine it from VPCId or VPCName, if
            possible.  This will fail if a given VPCName exists in multiple regions visible to the
            bound account, in which case you'll need to provide an explicit value for VPCRegion.
    """
    Name = Name if Name else name

ret = {"name": name, "result": True, "comment": "", "changes": {}}

if not PrivateZone and VPCs:
        raise SaltInvocationError(
            "Parameter 'VPCs' is invalid when creating a public zone."
        )
    if PrivateZone and not VPCs:
        raise SaltInvocationError(
            "Parameter 'VPCs' is required when creating a private zone."
        )
    if VPCs:
        if not isinstance(VPCs, list):
            raise SaltInvocationError("Parameter 'VPCs' must be a list of dicts.")
        for v in VPCs:
            if not isinstance(v, dict) or not salt.utils.data.exactly_one(
                (v.get("VPCId"), v.get("VPCName"))
            ):
                raise SaltInvocationError(
                    "Parameter 'VPCs' must be a list of dicts, each composed "
                    "of either a 'VPCId' or a 'VPCName', and optionally a "
                    "'VPCRegion', to help distinguish between multitple matches."
                )
    # Massage VPCs into something AWS will accept...
    fixed_vpcs = []
    if PrivateZone:
        for v in VPCs:
            VPCId = v.get("VPCId")
            VPCName = v.get("VPCName")
            VPCRegion = v.get("VPCRegion")
            VPCs = __salt__["boto_vpc.describe_vpcs"](
                vpc_id=VPCId,
                name=VPCName,
                region=region,
                key=key,
                keyid=keyid,
                profile=profile,
            ).get("vpcs", [])
            if VPCRegion and VPCs:
                VPCs = [v for v in VPCs if v["region"] == VPCRegion]
            if not VPCs:
                ret["comment"] = (
                    "A VPC matching given criteria (vpc: {} / vpc_region: {}) not "
                    "found.".format(VPCName or VPCId, VPCRegion)
                )
                log.error(ret["comment"])
                ret["result"] = False
                return ret
            if len(VPCs) > 1:
                ret["comment"] = (
                    "Multiple VPCs matching given criteria (vpc: {} / vpc_region: "
                    "{}) found: {}.".format(
                        VPCName or VPCId, VPCRegion, ", ".join([v["id"] for v in VPCs])
                    )
                )
                log.error(ret["comment"])
                ret["result"] = False
                return ret
            vpc = VPCs[0]
            if VPCName:
                VPCId = vpc["id"]
            if not VPCRegion:
                VPCRegion = vpc["region"]
            fixed_vpcs += [{"VPCId": VPCId, "VPCRegion": VPCRegion}]

create = False
    update_comment = False
    add_vpcs = []
    del_vpcs = []
    args = {
        "Name": Name,
        "PrivateZone": PrivateZone,
        "region": region,
        "key": key,
        "keyid": keyid,
        "profile": profile,
    }
    zone = __salt__["boto3_route53.find_hosted_zone"](**args)
    if not zone:
        create = True
        # Grrrr - can only pass one VPC when initially creating a private zone...
        # The rest have to be added (one-by-one) later in a separate step.
        if len(fixed_vpcs) > 1:
            add_vpcs = fixed_vpcs[1:]
            fixed_vpcs = fixed_vpcs[:1]
        CallerReference = CallerReference if CallerReference else str(uuid.uuid4())
    else:
        # Currently the only modifiable traits about a zone are associated VPCs and the comment.
        zone = zone[0]
        if PrivateZone:
            for z in zone.get("VPCs"):
                if z not in fixed_vpcs:
                    del_vpcs += [z]
            for z in fixed_vpcs:
                if z not in zone.get("VPCs"):
                    add_vpcs += [z]
        if zone["HostedZone"]["Config"].get("Comment") != Comment:
            update_comment = True

if not (create or add_vpcs or del_vpcs or update_comment):
        ret["comment"] = "Hostd Zone {} already in desired state".format(Name)
        return ret

if create:
        if __opts__["test"]:
            ret["comment"] = "Route 53 {} hosted zone {} would be created.".format(
                "private" if PrivateZone else "public", Name
            )
            ret["result"] = None
            return ret
        vpc_id = fixed_vpcs[0].get("VPCId") if fixed_vpcs else None
        vpc_region = fixed_vpcs[0].get("VPCRegion") if fixed_vpcs else None
        newzone = __salt__["boto3_route53.create_hosted_zone"](
            Name=Name,
            CallerReference=CallerReference,
            Comment=Comment,
            PrivateZone=PrivateZone,
            VPCId=vpc_id,
            VPCRegion=vpc_region,
            region=region,
            key=key,
            keyid=keyid,
            profile=profile,
        )
        if newzone:
            newzone = newzone[0]
            ret["comment"] = "Route 53 {} hosted zone {} successfully created".format(
                "private" if PrivateZone else "public", Name
            )
            log.info(ret["comment"])
            ret["changes"]["new"] = newzone
        else:
            ret["comment"] = "Creation of Route 53 {} hosted zone {} failed".format(
                "private" if PrivateZone else "public", Name
            )
            log.error(ret["comment"])
            ret["result"] = False
            return ret

if update_comment:
        if __opts__["test"]:
            ret[
                "comment"
            ] = "Route 53 {} hosted zone {} comment would be updated.".format(
                "private" if PrivateZone else "public", Name
            )
            ret["result"] = None
            return ret
        r = __salt__["boto3_route53.update_hosted_zone_comment"](
            Name=Name,
            Comment=Comment,
            PrivateZone=PrivateZone,
            region=region,
            key=key,
            keyid=keyid,
            profile=profile,
        )
        if r:
            r = r[0]
            msg = "Route 53 {} hosted zone {} comment successfully updated".format(
                "private" if PrivateZone else "public", Name
            )
            log.info(msg)
            ret["comment"] = "  ".join([ret["comment"], msg])
            ret["changes"]["old"] = zone
            ret["changes"]["new"] = salt.utils.dictupdate.update(
                ret["changes"].get("new", {}), r
            )
        else:
            ret[
                "comment"
            ] = "Update of Route 53 {} hosted zone {} comment failed".format(
                "private" if PrivateZone else "public", Name
            )
            log.error(ret["comment"])
            ret["result"] = False
            return ret

if add_vpcs or del_vpcs:
        if __opts__["test"]:
            ret[
                "comment"
            ] = "Route 53 {} hosted zone {} associated VPCs would be updated.".format(
                "private" if PrivateZone else "public", Name
            )
            ret["result"] = None
            return ret
        all_added = True
        all_deled = True
        for (
            vpc
        ) in add_vpcs:  # Add any new first to avoid the "can't delete last VPC" errors.
            r = __salt__["boto3_route53.associate_vpc_with_hosted_zone"](
                Name=Name,
                VPCId=vpc["VPCId"],
                VPCRegion=vpc["VPCRegion"],
                region=region,
                key=key,
                keyid=keyid,
                profile=profile,
            )
            if not r:
                all_added = False
        for vpc in del_vpcs:
            r = __salt__["boto3_route53.disassociate_vpc_from_hosted_zone"](
                Name=Name,
                VPCId=vpc["VPCId"],
                VPCRegion=vpc["VPCRegion"],
                region=region,
                key=key,
                keyid=keyid,
                profile=profile,
            )
            if not r:
                all_deled = False

ret["changes"]["old"] = zone
        ret["changes"]["new"] = __salt__["boto3_route53.find_hosted_zone"](**args)
        if all_added and all_deled:
            msg = "Route 53 {} hosted zone {} associated VPCs successfully updated".format(
                "private" if PrivateZone else "public", Name
            )
            log.info(msg)
            ret["comment"] = "  ".join([ret["comment"], msg])
        else:
            ret[
                "comment"
            ] = "Update of Route 53 {} hosted zone {} associated VPCs failed".format(
                "private" if PrivateZone else "public", Name
            )
            log.error(ret["comment"])
            ret["result"] = False
            return ret

return ret

def hosted_zone_absent(
    name, Name=None, PrivateZone=False, region=None, key=None, keyid=None, profile=None
):
    """
    Ensure the Route53 Hostes Zone described is absent

name
        The name of the state definition.

Name
        The name of the domain. This should be a fully-specified domain, and should terminate with a
        period.  If not provided, the value of name will be used.

PrivateZone
        Set True if deleting a private hosted zone.

"""
    Name = Name if Name else name

ret = {"name": name, "result": True, "comment": "", "changes": {}}

args = {
        "Name": Name,
        "PrivateZone": PrivateZone,
        "region": region,
        "key": key,
        "keyid": keyid,
        "profile": profile,
    }
    zone = __salt__["boto3_route53.find_hosted_zone"](**args)
    if not zone:
        ret["comment"] = "Route 53 {} hosted zone {} already absent".format(
            "private" if PrivateZone else "public", Name
        )
        log.info(ret["comment"])
        return ret
    if __opts__["test"]:
        ret["comment"] = "Route 53 {} hosted zone {} would be deleted".format(
            "private" if PrivateZone else "public", Name
        )
        ret["result"] = None
        return ret
    zone = zone[0]
    Id = zone["HostedZone"]["Id"]
    if __salt__["boto3_route53.delete_hosted_zone"](
        Id=Id, region=region, key=key, keyid=keyid, profile=profile
    ):
        ret["comment"] = "Route 53 {} hosted zone {} deleted".format(
            "private" if PrivateZone else "public", Name
        )
        log.info(ret["comment"])
        ret["changes"]["old"] = zone
        ret["changes"]["new"] = None
    else:
        ret["comment"] = "Failed to delete Route 53 {} hosted zone {}".format(
            "private" if PrivateZone else "public", Name
        )
        log.info(ret["comment"])
        ret["result"] = False
        return ret

return ret

def rr_present(
    name,
    HostedZoneId=None,
    DomainName=None,
    PrivateZone=False,
    Name=None,
    Type=None,
    SetIdentifier=None,
    Weight=None,
    Region=None,
    GeoLocation=None,
    Failover=None,
    TTL=None,
    ResourceRecords=None,
    AliasTarget=None,
    HealthCheckId=None,
    TrafficPolicyInstanceId=None,
    region=None,
    key=None,
    keyid=None,
    profile=None,
):
    """
    Ensure the Route53 record is present.

name
        The name of the state definition.  This will be used for Name if the latter is
        not provided.

HostedZoneId
        The ID of a zone to create the record in.  Exclusive with DomainName.

DomainName
        The domain name of a zone to create the record in.  Exclusive with HostedZoneId.

PrivateZone
        Set to True if the resource record should be in a private zone, False if public.

Name
        Name of the Route 53 resource record being managed.

Type
        The record type (A, NS, MX, TXT, etc.)

SetIdentifier
        Valid for Weighted, Latency, Geolocation, and Failover resource record sets only.
        An identifier that differentiates among multiple resource record sets that have the same
        combination of DNS name and type.  The value of SetIdentifier must be unique for each
        resource record set that has the same combination of DNS name and type. Omit SetIdentifier
        for any other types of record sets.

Weight
        Valid for Weighted resource record sets only.  Among resource record sets that have the
        same combination of DNS name and type, a value that determines the proportion of DNS
        queries that Amazon Route 53 responds to using the current resource record set. Amazon Route
        53 calculates the sum of the weights for the resource record sets that have the same
        combination of DNS name and type. Amazon Route 53 then responds to queries based on the
        ratio of a resource's weight to the total.

Note the following:

- You must specify a value for the Weight element for every weighted resource record set.
        - You can only specify one ResourceRecord per weighted resource record set.
        - You can't create latency, failover, or geolocation resource record sets that have the
          same values for the Name and Type elements as weighted resource record sets.
        - You can create a maximum of 100 weighted resource record sets that have the same values
          for the Name and Type elements.
        - For weighted (but not weighted alias) resource record sets, if you set Weight to 0 for a
          resource record set, Amazon Route 53 never responds to queries with the applicable value
          for that resource record set.  However, if you set Weight to 0 for all resource record
          sets that have the same combination of DNS name and type, traffic is routed to all
          resources with equal probability.  The effect of setting Weight to 0 is different when
          you associate health checks with weighted resource record sets. For more information,
          see `Options for Configuring Amazon Route 53 Active-Active and Active-Passive Failover`__
          in the Amazon Route 53 Developer Guide.

.. __: http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-failover-configuring-options.html

Region
        Valid for Latency-based resource record sets only.  The Amazon EC2 Region where the resource
        that is specified in this resource record set resides. The resource typically is an AWS
        resource, such as an EC2 instance or an ELB load balancer, and is referred to by an IP
        address or a DNS domain name, depending on the record type.

GeoLocation
        Geo location resource record sets only.  A dict that lets you control how Route 53 responds
        to DNS queries based on the geographic origin of the query.  For example, if you want all
        queries from Africa to be routed to a web server with an IP address of 192.0.2.111, create a
        resource record set with a Type of A and a ContinentCode of AF.

.. code-block:: text

ContinentCode
                The two-letter code for the continent.
                Valid values: AF | AN | AS | EU | OC | NA | SA
                Constraint: Specifying ContinentCode with either CountryCode or SubdivisionCode
                            returns an InvalidInput error.
            CountryCode
                The two-letter code for the country.
            SubdivisionCode
                The code for the subdivision, for example, a state in the United States or a
                province in Canada.

Notes

- Creating geolocation and geolocation alias resource record sets in private hosted zones
          is not supported.
        - If you create separate resource record sets for overlapping geographic regions (for
          example, one resource record set for a continent and one for a country on the same
          continent), priority goes to the smallest geographic region. This allows you to route
          most queries for a continent to one resource and to route queries for a country on that
          continent to a different resource.
        - You can't create two geolocation resource record sets that specify the same geographic
          location.
        - The value ``*`` in the CountryCode element matches all geographic locations that aren't
          specified in other geolocation resource record sets that have the same values for the
          Name and Type elements.
        - Geolocation works by mapping IP addresses to locations.  However, some IP addresses
          aren't mapped to geographic locations, so even if you create geolocation resource
          record sets that cover all seven continents, Amazon Route 53 will receive some DNS
          queries from locations that it can't identify.  We recommend that you
          create a resource record set for which the value of CountryCode is
          ``*``, which handles both queries that come from locations for which you
          haven't created geolocation resource record sets and queries from IP
          addresses that aren't mapped to a location.  If you don't create a ``*``
          resource record set, Amazon Route 53 returns a "no answer" response
          for queries from those locations.
        - You can't create non-geolocation resource record sets that have the same values for the
          Name and Type elements as geolocation resource record sets.

TTL
        The resource record cache time to live (TTL), in seconds.
        Note the following:

- If you're creating an alias resource record set, omit TTL. Amazon Route 53 uses the
          value of TTL for the alias target.
        - If you're associating this resource record set with a health check (if you're adding
          a HealthCheckId element), we recommend that you specify a TTL of 60 seconds or less so
          clients respond quickly to changes in health status.
        - All of the resource record sets in a group of weighted, latency, geolocation, or
          failover resource record sets must have the same value for TTL.
        - If a group of weighted resource record sets includes one or more weighted alias
          resource record sets for which the alias target is an ELB load balancer, we recommend
          that you specify a TTL of 60 seconds for all of the non-alias weighted resource record
          sets that have the same name and type. Values other than 60 seconds (the TTL for load
          balancers) will change the effect of the values that you specify for Weight.

ResourceRecords
        A list, containing one or more values for the resource record.  No single value can exceed
        4,000 characters.  For details on how to format values for different record types, see
        `Supported DNS Resource Record Types`__ in the Amazon Route 53 Developer Guide.

.. __: http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html

Note:  You can specify more than one value for all record types except CNAME and SOA.

It is also possible to pass "magic" strings as resource record values.  This functionality
        can easily be extended, but for the moment supports the following:

'magic:ec2_instance_tag:some_tag_name:some_string:some_instance_attr'

This tells salt to lookup an EC2 instance with a tag 'some_tag_name' which has the value
        'some_string' and substitute the 'some_instance_attr' attribute of that instance as the
        resource record value being evaluated.

This should work generally for any EC2 instance tags, as long as the instance attribute
        being fetched is available to getattr(instance, 'attribute') as seen in the code below.
        Anything else will most likely require this function to be extended to handle it.

The canonical use-case for this (at least at our site) is to query the Name tag (which
        we always populate with the host's FQDN) to lookup the public or private IPs bound to the
        instance, so we can then automgically create Route 53 records for them.

AliasTarget
        The rules governing how to define an AliasTarget for the various supported use-cases are
        obtuse beyond reason and attempting to paraphrase them (or even worse, cut-and-paste them
        in their entirety) would be silly and counterproductive.  If you need this feature, then
        Read The Fine Materials at the `Boto 3 Route 53 page`__ and/or the `AWS Route 53 docs`__
        and suss them for yourself - I sure won't claim to understand them partcularly well.

.. __: http://boto3.readthedocs.io/en/latest/reference/services/route53.html#Route53.Client.change_resource_record_sets
        .. __: http://docs.aws.amazon.com/Route53/latest/APIReference/API_AliasTarget.html

region
        The region to connect to.

key
        Secret key to be used.

keyid
        Access key to be used.

profile
        Dict, or pillar key pointing to a dict, containing AWS region/key/keyid.
    """
    Name = Name if Name else name

if Type is None:
        raise SaltInvocationError(
            "'Type' is a required parameter when adding or updating resource records."
        )
    ret = {"name": name, "result": True, "comment": "", "changes": {}}

args = {
        "Id": HostedZoneId,
        "Name": DomainName,
        "PrivateZone": PrivateZone,
        "region": region,
        "key": key,
        "keyid": keyid,
        "profile": profile,
    }
    zone = __salt__["boto3_route53.find_hosted_zone"](**args)
    if not zone:
        ret["comment"] = "Route 53 {} hosted zone {} not found".format(
            "private" if PrivateZone else "public", DomainName
        )
        log.info(ret["comment"])
        return ret
    zone = zone[0]
    HostedZoneId = zone["HostedZone"]["Id"]

# Convert any magic RR values to something AWS will understand, and otherwise clean them up.
    fixed_rrs = []
    if ResourceRecords:
        for rr in ResourceRecords:
            if rr.startswith("magic:"):
                fields = rr.split(":")
                if fields[1] == "ec2_instance_tag":
                    if len(fields) != 5:
                        log.warning(
                            "Invalid magic RR value seen: '%s'.  Passing as-is.", rr
                        )
                        fixed_rrs += [rr]
                        continue
                    tag_name = fields[2]
                    tag_value = fields[3]
                    instance_attr = fields[4]
                    good_states = (
                        "pending",
                        "rebooting",
                        "running",
                        "stopping",
                        "stopped",
                    )
                    r = __salt__["boto_ec2.find_instances"](
                        tags={tag_name: tag_value},
                        return_objs=True,
                        in_states=good_states,
                        region=region,
                        key=key,
                        keyid=keyid,
                        profile=profile,
                    )
                    if len(r) < 1:
                        ret[
                            "comment"
                        ] = "No EC2 instance with tag {} == {} found".format(
                            tag_name, tag_value
                        )
                        log.error(ret["comment"])
                        ret["result"] = False
                        return ret
                    if len(r) > 1:
                        ret[
                            "comment"
                        ] = "Multiple EC2 instances with tag {} == {} found".format(
                            tag_name, tag_value
                        )
                        log.error(ret["comment"])
                        ret["result"] = False
                        return ret
                    instance = r[0]
                    res = getattr(instance, instance_attr, None)
                    if res:
                        log.debug(
                            "Found %s %s for instance %s",
                            instance_attr,
                            res,
                            instance.id,
                        )
                        fixed_rrs += [__salt__["boto3_route53.aws_encode"](res)]
                    else:
                        ret["comment"] = "Attribute {} not found on instance {}".format(
                            instance_attr, instance.id
                        )
                        log.error(ret["comment"])
                        ret["result"] = False
                        return ret
                else:
                    ret["comment"] = (
                        "Unknown RR magic value seen: {}.  Please extend the "
                        "boto3_route53 state module to add support for your preferred "
                        "incantation.".format(fields[1])
                    )
                    log.error(ret["comment"])
                    ret["result"] = False
                    return ret
            else:
                # for TXT records the entry must be encapsulated in quotes as required by the API
                # this appears to be incredibly difficult with the jinja templating engine
                # so inject the quotations here to make a viable ChangeBatch
                if Type == "TXT":
                    rr = '"{}"'.format(rr)
                fixed_rrs += [rr]
        ResourceRecords = [{"Value": rr} for rr in sorted(fixed_rrs)]

if SetIdentifier and recordsets:
        log.debug(
            "Filter recordsets %s by SetIdentifier %s.", recordsets, SetIdentifier
        )
        recordsets = [r for r in recordsets if r.get("SetIdentifier") == SetIdentifier]
        log.debug("Resulted in recordsets %s.", recordsets)

create = False
    update = False
    updatable = [
        "SetIdentifier",
        "Weight",
        "Region",
        "GeoLocation",
        "Failover",
        "TTL",
        "AliasTarget",
        "HealthCheckId",
        "TrafficPolicyInstanceId",
    ]
    if not recordsets:
        create = True
        if __opts__["test"]:
            ret[
                "comment"
            ] = "Route 53 resource record {} with type {} would be added.".format(
                Name, Type
            )
            ret["result"] = None
            return ret
    elif len(recordsets) > 1:
        ret["comment"] = "Given criteria matched more than one ResourceRecordSet."
        log.error(ret["comment"])
        ret["result"] = False
        return ret
    else:
        rrset = recordsets[0]
        for u in updatable:
            if locals().get(u) != rrset.get(u):
                update = True
                break
        if rrset.get("ResourceRecords") is not None:
            if ResourceRecords != sorted(
                rrset.get("ResourceRecords"), key=lambda x: x["Value"]
            ):
                update = True
        elif (AliasTarget is not None) and (rrset.get("AliasTarget") is not None):
            if sorted(AliasTarget) != sorted(rrset.get("AliasTarget")):
                update = True

if not create and not update:
        ret["comment"] = (
            "Route 53 resource record {} with type {} is already in the desired state."
            "".format(Name, Type)
        )
        log.info(ret["comment"])
        return ret
    else:
        if __opts__["test"]:
            ret[
                "comment"
            ] = "Route 53 resource record {} with type {} would be updated.".format(
                Name, Type
            )
            ret["result"] = None
            return ret
        ResourceRecordSet = {"Name": Name, "Type": Type}
        if ResourceRecords:
            ResourceRecordSet["ResourceRecords"] = ResourceRecords
        for u in updatable:
            if locals().get(u) or (locals().get(u) == 0):
                ResourceRecordSet.update({u: locals().get(u)})
            else:
                log.debug(
                    "Not updating ResourceRecordSet with local value: %s",
                    locals().get(u),
                )

ChangeBatch = {
            "Changes": [{"Action": "UPSERT", "ResourceRecordSet": ResourceRecordSet}]
        }

if __salt__["boto3_route53.change_resource_record_sets"](
            HostedZoneId=HostedZoneId,
            ChangeBatch=ChangeBatch,
            region=region,
            key=key,
            keyid=keyid,
            profile=profile,
        ):
            ret["comment"] = "Route 53 resource record {} with type {} {}.".format(
                Name, Type, "created" if create else "updated"
            )
            log.info(ret["comment"])
            if create:
                ret["changes"]["old"] = None
            else:
                ret["changes"]["old"] = rrset
            ret["changes"]["new"] = ResourceRecordSet
        else:
            ret[
                "comment"
            ] = "Failed to {} Route 53 resource record {} with type {}.".format(
                "create" if create else "update", Name, Type
            )
            log.error(ret["comment"])
            ret["result"] = False

return ret

def rr_absent(
    name,
    HostedZoneId=None,
    DomainName=None,
    PrivateZone=False,
    Name=None,
    Type=None,
    SetIdentifier=None,
    region=None,
    key=None,
    keyid=None,
    profile=None,
):
    """
    Ensure the Route53 record is deleted.

name
        The name of the state definition.  This will be used for Name if the latter is
        not provided.

HostedZoneId
        The ID of the zone to delete the record from.  Exclusive with DomainName.

DomainName
        The domain name of the zone to delete the record from.  Exclusive with HostedZoneId.

PrivateZone
        Set to True if the RR to be removed is in a private zone, False if public.

Name
        Name of the resource record.

Type
        The record type (A, NS, MX, TXT, etc.)

region
        The region to connect to.

key
        Secret key to be used.

keyid
        Access key to be used.

profile
        Dict, or pillar key pointing to a dict, containing AWS region/key/keyid.
    """
    Name = Name if Name else name

if Type is None:
        raise SaltInvocationError(
            "'Type' is a required parameter when deleting resource records."
        )
    ret = {"name": name, "result": True, "comment": "", "changes": {}}

recordsets = __salt__["boto3_route53.get_resource_records"](
        HostedZoneId=HostedZoneId,
        StartRecordName=Name,
        StartRecordType=Type,
        region=region,
        key=key,
        keyid=keyid,
        profile=profile,
    )
    if SetIdentifier and recordsets:
        log.debug(
            "Filter recordsets %s by SetIdentifier %s.", recordsets, SetIdentifier
        )
        recordsets = [r for r in recordsets if r.get("SetIdentifier") == SetIdentifier]
        log.debug("Resulted in recordsets %s.", recordsets)
    if not recordsets:
        ret[
            "comment"
        ] = "Route 53 resource record {} with type {} already absent.".format(
            Name, Type
        )
        return ret
    elif len(recordsets) > 1:
        ret["comment"] = "Given criteria matched more than one ResourceRecordSet."
        log.error(ret["comment"])
        ret["result"] = False
        return ret
    ResourceRecordSet = recordsets[0]
    if __opts__["test"]:
        ret[
            "comment"
        ] = "Route 53 resource record {} with type {} would be deleted.".format(
            Name, Type
        )
        ret["result"] = None
        return ret

ChangeBatch = {
        "Changes": [{"Action": "DELETE", "ResourceRecordSet": ResourceRecordSet}]
    }

if __salt__["boto3_route53.change_resource_record_sets"](
        HostedZoneId=HostedZoneId,
        ChangeBatch=ChangeBatch,
        region=region,
        key=key,
        keyid=keyid,
        profile=profile,
    ):
        ret["comment"] = "Route 53 resource record {} with type {} deleted.".format(
            Name, Type
        )
        log.info(ret["comment"])
        ret["changes"]["old"] = ResourceRecordSet
        ret["changes"]["new"] = None
    else:
        ret[
            "comment"
        ] = "Failed to delete Route 53 resource record {} with type {}.".format(
            Name, Type
        )
        log.error(ret["comment"])
        ret["result"] = False

return ret