#!/usr/bin/python
import boto3
import logging
import sys

import boto3.session
import botocore.exceptions

logger = logging.getLogger(__file__)

ACCOUNT_MAPPING = {
    "gdb-apollo-dev":     "725764004555",
    "gdb-artistapp-dev":  "714609459574",
    "gdb-core-dev":       "582412345909",
    "gdb-databricks-dev": "745243859288",
    "gdb-datasci-dev":    "313114233826",
    "gdb-delphi-dev":     "475275892927",
    "gdb-infra-dev":      "483193324480",
    "gdb-prodhub-dev":    "703740486246",
    "gdb-smu-dev":        "724514206585",
    "gdb-whitelist-dev":  "814622134907",
    "gdb-apollo-prod":     "801577982711",
    "gdb-artistapp-prod":  "923763343190",
    "gdb-core-prod":       "885200931856",
    "gdb-databricks-prod": "807702934854",
    "gdb-delphi-prod":     "323555055331",
    "gdb-infra-prod":      "890208661333",
    "gdb-smu-prod":        "809878276326",
    "gdb-whitelist-prod":  "009424872958",
    "gdb-whitelist-legacy": "322697034778"
}

def delete_iam_user(session: boto3.session.Session, user_name: str) -> None:
    """For a given boto3.session.Session, delete the IAM User and all assoc'd resources."""
    iam = session.resource("iam")
    iam_client = session.client("iam")
    user = iam.User(user_name)
    try:
        user.load()
    except botocore.exceptions.ClientError as err:
        # If load failed with NoSuchEntity, IAM User doesn't exist.
        if err.response.get("Error", {}).get("Code", "") == "NoSuchEntity":
            logger.error(f"User {user_name} does not exist")
            return
        raise err
    logger.debug(f"Deleting IAM User: {user.arn}")
    for group in user.groups.all():
        logger.debug(f"Removing {user.arn} from Group {group.arn}")
        user.remove_group(GroupName=group.name)
    try:
        login_profile = iam.LoginProfile(user.name)
        login_profile.load()
        logger.debug(f"Deleting Login Profile (I.E. Password) from {user.arn}")
        login_profile.delete()
    except botocore.exceptions.ClientError as err:
        # If load failed with NoSuchEntity, No Login Profile
        if err.response.get("Error", {}).get("Code", "") != "NoSuchEntity":
            raise err
    for device in user.mfa_devices.all():
        logger.debug(f"Removing MFA Device from {user.arn}: {device.serial_number}")
        device.disassociate()
    for access_key in user.access_keys.all():
        logger.debug(f"Deleting Access Key from {user.arn}: {access_key.access_key_id}")
        access_key.delete()
    for policy in user.policies.all():
        logger.debug(f"Deleting Inline Policy from {user.arn}: {policy.name}")
        policy.delete()
    for policy in user.attached_policies.all():
        logger.debug(f"Detatching Managed Policy from {user.arn}: {policy.arn}")
        user.detach_policy(PolicyArn=policy.arn)
    for cert in user.signing_certificates.all():
        logger.debug(f"Deleting Signing Cert from {user.arn}: {cert.id}")
        iam_client.delete_signing_certificate(UserName=user.name, CertificateId=cert.id)
    for ssh_public_key_id in [
        key.get("SSHPublicKeyId", "")
        for key in iam_client.list_ssh_public_keys(UserName=user.name).get(
            "SSHPublicKeys", []
        )
    ]:
        logger.debug(f"Deleting SSH Public Key from {user.arn}: {ssh_public_key_id}")
        iam_client.delete_ssh_public_key(
            UserName=user.name, SSHPublicKeyId=ssh_public_key_id
        )
    for service_name, service_specific_credential_id in {
        cred.get("ServiceName", ""): cred.get("ServiceSpecificCredentialId", "")
        for cred in iam_client.list_service_specific_credentials(
            UserName=user.name
        ).get("ServiceSpecificCredentials", [])
    }.items():
        logger.debug(
            f"Deleting Service Specific Cred from {user.arn}:"
            f" {service_name}:{service_specific_credential_id}"
        )
        iam_client.delete_service_specific_credential(
            UserName=user.name,
            ServiceSpecificCredentialId=service_specific_credential_id,
        )
    logger.info(f"Deleted IAM user: {user.name}")
    user.delete()


if __name__ == "__main__":
    logging.basicConfig(stream=sys.stderr, level=logging.DEBUG)
    logging.getLogger("boto3").setLevel(logging.ERROR)
    logging.getLogger("botocore").setLevel(logging.ERROR)
    logging.getLogger("urllib3").setLevel(logging.ERROR)


    for alias, id in ACCOUNT_MAPPING.items():
        acc_session = boto3.Session(profile_name=alias)
        delete_iam_user(acc_session, sys.argv[1])