playbook.yml

---
- name: Fetch EC2 Disk Utilization
  hosts: localhost
  gather_facts: no
  vars:
    aws_accounts:
      - { id: "<ACCOUNT1_ID>", role: "<ROLE_NAME>", region: "us-west-1" }
      - { id: "<ACCOUNT2_ID>", role: "<ROLE_NAME>", region: "us-west-2" }
      - { id: "<ACCOUNT3_ID>", role: "<ROLE_NAME>", region: "us-west-1" }
    s3_bucket: "my-s3-bucket-name"  # Update this with your S3 bucket name
    db_user: "mydbuser"  # Update with your DB username
    db_password: "mydbpassword"  # Update with your DB password
    sns_topic_arn: "arn:aws:sns:us-west-1:123456789012:MySNSTopic"  # Update with your SNS topic ARN
  tasks:
    - name: Assume Role in Account
      sts_assume_role:
        role_arn: "arn:aws:iam::{{ item.id }}:role/{{ item.role }}"
        role_session_name: "assume_role_session_{{ item.id }}"
      register: account_credentials
      loop: "{{ aws_accounts }}"
      loop_control:
        label: "{{ item.id }}"

    - name: List EC2 Instances in Account
      ec2_instance_info:
        aws_access_key: "{{ account_credentials.results[loop.index0].sts_creds.access_key }}"
        aws_secret_key: "{{ account_credentials.results[loop.index0].sts_creds.secret_key }}"
        security_token: "{{ account_credentials.results[loop.index0].sts_creds.session_token }}"
        region: "{{ item.region }}"
      register: ec2_info
      loop: "{{ aws_accounts }}"
      loop_control:
        label: "{{ item.id }}"

    - name: Fetch Disk Utilization for Instances
      shell: "df -h --output=pcent /"
      register: disk_utilization
      delegate_to: "{{ item.public_ip_address }}"
      with_items: "{{ ec2_info.results[loop.index0].instances }}"
      when: item.state == "running"

    - name: Aggregate Disk Utilization Data
      set_fact:
        disk_data: "{{ disk_data | default([]) + [ {'instance': item.instance_id, 'utilization': disk_utilization.stdout} ] }}"
      loop: "{{ ec2_info.results | map(attribute='instances') | flatten }}"
      when: item.state == "running"
      loop_control:
        label: "{{ item.instance_id }}"

    - name: Create Disk Utilization JSON
      copy:
        content: "{{ disk_data | to_nice_json }}"
        dest: /tmp/disk_utilization.json
      run_once: true

    - name: Upload Disk Utilization Data to S3
      aws_s3:
        aws_access_key: "{{ lookup('env', 'AWS_ACCESS_KEY_ID') }}"
        aws_secret_key: "{{ lookup('env', 'AWS_SECRET_ACCESS_KEY') }}"
        bucket: "{{ s3_bucket }}"
        object: "disk_utilization.json"
        src: /tmp/disk_utilization.json
        mode: put
      run_once: true

    - name: Store Disk Utilization Data in RDS
      mysql_db:
        login_user: "{{ db_user }}"
        login_password: "{{ db_password }}"
        name: "disk_utilization"
        state: present

    - name: Insert Disk Utilization Data into RDS
      mysql_query:
        login_user: "{{ db_user }}"
        login_password: "{{ db_password }}"
        query: |
          INSERT INTO disk_utilization_table (instance_id, utilization)
          VALUES ('{{ item.instance }}', '{{ item.utilization }}');
      loop: "{{ disk_data }}"
      run_once: true

    - name: Create CloudWatch Alarm
      cloudwatch_metric_alarm:
        name: "HighDiskUsage"
        state: "present"
        metric: "DiskUtilization"
        statistic: "Average"
        period: 300
        evaluation_periods: 1
        threshold: 80
        comparison: ">="
        alarm_actions:
          - "{{ sns_topic_arn }}"
      run_once: true