DescribeVpcFirewallAclGroupList-获取VPC防火墙所有访问控制策略组信息

import boto3

# 获取所有访问控制策略组的 ARN
def get_vpc_firewall_group_arns():
    client = boto3.client('ec2')
    paginator = client.get_paginator('describe_vpc_firewall_group_lists')
    results = paginator.paginate()
    vpc_firewall_group_arns = [group['GroupName'] for group in results['VpcFirewallGroupList']]

    return vpc_firewall_group_arns

# 获取所有访问控制策略组的详细信息
def get_vpc_firewall_group_info(arn):
    client = boto3.client('ec2')
    return client.describe_vpc_firewall_group(GroupIdentifier=arn)['VpcFirewall']['VpcFirewallGroup']

# 获取所有访问控制策略组的详细信息
def get_all_vpc_firewall_group_info():
    # 获取 VPC 防火墙策略组的 ARN 列表
    vpc_firewall_group_arns = get_vpc_firewall_group_arns()

    # 获取所有策略组的详细信息
    data = []
    for cidr_block in cidr_block_generator():  # 创建一个有效的 CIDR 范围（例如，10.0.0.0/16）
        for cidr_block in cidr_block_generator():  # 获取有效的子范围（例如，10.0.0.0/24 和 10.0.1.0/24）
            filtered_data = get_all_vpc_firewall_group_info_recursive(cidr_block, vpc_firewall_group_arns)
            data.extend(filtered_data)

    for vpc_firewall in data:
        print(vpc_firewall)  # 打印 VPC 防火墙策略组的详细信息

# Recursive function to get all VPC firewal group info for a CIDR block
def get_all_vpc_firewall_group_info_recursive(cidr_block, vpc_firewall_arns):
    client = boto3.client('ec2')
    cidr_range = '%s/%s' % (cidr_block[0], cidr_block[1])
    if cidr_range not in vpc_firewall_arns:
        vpc_firewall_arns.append(cidr_range)

        # 获取 VPC 防火墙规则组
        response = client.describe_vpc_firewall_rules(
            PrefixListIds=[cidr_range],
            Filters=[
                
            ],
        )

        # 处理 VPC 防火墙策略组
        for rule in response['VpcFirewall']['VpcFirewallRules']:
            if len(rule['PrefixListId']) > 0 and rule['PrefixListId'][0] == cidr_range:
                # 解析规则组详情
                continue
            parsed_rule = get_vpc_firewall_rule_info(rule, cidr_range)
            if len(parsed_rule) > 0:
                # 递归获取 VPC 防火墙规则组的详细信息
                return get_all_vpc_firewall_group_info_recursive(rule['Description'], vpc_firewall_arns)

    return vpc_firewall_arns