Introducing handling for different aws profile - seperate for ESC in zip.sh deployment script

Author: sumoanema

scripts/delete_old_layer_versions.sh

@@ -18,13 +18,21 @@ AWS_REGIONS=(
     eu-central-1
     us-west-1
     us-west-2
+    eusc-de-east-1
   )
 
 
 if [[ -z "${AWS_PROFILE}" ]]; then
     export AWS_PROFILE="personal"
 fi
+
+# Set AWS_PROFILE_EUSC for European Sovereign Cloud regions (can be overridden via environment)
+if [[ -z "${AWS_PROFILE_EUSC}" ]]; then
+    export AWS_PROFILE_EUSC="esc_personal"
+fi
+
 echo "Using AWS_PROFILE: ${AWS_PROFILE}"
+echo "Using AWS_PROFILE_EUSC: ${AWS_PROFILE_EUSC}"
 
 binary_name="sumologic-extension"
 
@@ -38,11 +46,20 @@ for arch in "${ARCHITECTURES[@]}"; do
     layer_name="${binary_name}-${arch}"
 
     for region in "${AWS_REGIONS[@]}"; do
+        # Auto-detect profile based on region prefix
+        if [[ "${region}" =~ ^eusc- ]]; then
+          profile="${AWS_PROFILE_EUSC}"
+        else
+          profile="${AWS_PROFILE}"
+        fi
+
+        echo "Deleting from region ${region} using profile ${profile}"
+
         # Dynamically get the partition for the region from AWS
-        caller_arn=$(aws sts get-caller-identity --region ${region} --profile ${AWS_PROFILE} --query 'Arn' --output text)
+        caller_arn=$(aws sts get-caller-identity --region ${region} --profile ${profile} --query 'Arn' --output text)
         partition=$(echo ${caller_arn} | cut -d':' -f2)
 
         echo "Layer Arn: arn:${partition}:lambda:${region}:<accountId>:layer:${layer_name}:${layer_version} deleted from Region ${region}"
-        aws lambda delete-layer-version --layer-name ${layer_name} --version-number ${layer_version} --region ${region} --profile ${AWS_PROFILE}
+        aws lambda delete-layer-version --layer-name ${layer_name} --version-number ${layer_version} --region ${region} --profile ${profile}
     done
 done

scripts/zip.sh

@@ -54,6 +54,11 @@ for arch in "${ARCHITECTURES[@]}"; do
     export AWS_PROFILE="personal"
   fi
 
+  # Set AWS_PROFILE_EUSC for European Sovereign Cloud regions (can be overridden via environment)
+  if [[ -z "${AWS_PROFILE_EUSC}" ]]; then
+    export AWS_PROFILE_EUSC="esc_personal"
+  fi
+
   AWS_REGIONS=(
     us-east-1
     us-east-2
@@ -76,27 +81,38 @@ for arch in "${ARCHITECTURES[@]}"; do
     us-west-1
     us-west-2
     ca-west-1
+    eusc-de-east-1
   )
 
   echo "Using AWS_PROFILE: ${AWS_PROFILE}"
+  echo "Using AWS_PROFILE_EUSC: ${AWS_PROFILE_EUSC}"
 
   # We have layer name as sumologic-extension. Please change name for local testing.
   layer_name="${binary_name}-${arch}"
 
   for region in "${AWS_REGIONS[@]}"; do
+      # Auto-detect profile based on region prefix
+      if [[ "${region}" =~ ^eusc- ]]; then
+        profile="${AWS_PROFILE_EUSC}"
+      else
+        profile="${AWS_PROFILE}"
+      fi
+
+      echo "Deploying to region ${region} using profile ${profile}"
+
       layer_version=$(aws lambda publish-layer-version --layer-name ${layer_name} \
       --description "The SumoLogic Extension collects lambda logs and send it to Sumo Logic." \
       --license-info "Apache-2.0" --zip-file fileb://$(pwd)/${extension_zip_dir}/${binary_name}.zip \
-      --profile ${AWS_PROFILE} --region ${region} --output text --query Version )
+      --profile ${profile} --region ${region} --output text --query Version )
 
       # Dynamically get the partition for the region from AWS
-      caller_arn=$(aws sts get-caller-identity --region ${region} --profile ${AWS_PROFILE} --query 'Arn' --output text)
+      caller_arn=$(aws sts get-caller-identity --region ${region} --profile ${profile} --query 'Arn' --output text)
       partition=$(echo ${caller_arn} | cut -d':' -f2)
 
       echo "Layer Arn: arn:${partition}:lambda:${region}:<accountId>:layer:${layer_name}:${layer_version} deployed to Region ${region}"
 
       echo "Setting public permissions for layer version: ${layer_version}"
-      aws lambda add-layer-version-permission --layer-name ${layer_name}  --statement-id ${layer_name}-prod --version-number $layer_version --principal '*' --action lambda:GetLayerVersion --region ${region} --profile ${AWS_PROFILE}
+      aws lambda add-layer-version-permission --layer-name ${layer_name}  --statement-id ${layer_name}-prod --version-number $layer_version --principal '*' --action lambda:GetLayerVersion --region ${region} --profile ${profile}
       # aws lambda add-layer-version-permission --layer-name ${layer_name}  --statement-id ${layer_name}-dev --version-number ${layer_version} --principal '956882708938' --action lambda:GetLayerVersion --region ${region}
   done