From 2007345c4b1b061f904155ac02b49a8efa4c3dca Mon Sep 17 00:00:00 2001
From: Rick Mendes <rick.mendes4@gmail.com>
Date: Mon, 4 May 2015 14:38:43 -0700
Subject: [PATCH 1/2] ec2_win_password module for windows ec2 instances

---
 cloud/amazon/ec2_win_password.py | 96 ++++++++++++++++++++++++++++++++
 1 file changed, 96 insertions(+)
 create mode 100644 cloud/amazon/ec2_win_password.py

diff --git a/cloud/amazon/ec2_win_password.py b/cloud/amazon/ec2_win_password.py
new file mode 100644
index 00000000000..ee795d5b62a
--- /dev/null
+++ b/cloud/amazon/ec2_win_password.py
@@ -0,0 +1,96 @@
+#!/usr/bin/python
+
+DOCUMENTATION = '''
+---
+module: ec2_win_password
+short_description: gets the default administrator password for ec2 windows instances
+description:
+    - Gets the default administrator password from any EC2 Windows instance.  The instance is referenced by its id (e.g. i-XXXXXXX). This module has a dependency on python-boto.
+version_added: "2.0"
+author: Rick Mendes
+options:
+  instance_id:
+    description:
+      - The instance id to get the password data from. 
+    required: true
+    default: null 
+    aliases: []
+  key_file:
+    description:
+      - path to the file containing the key pair used on the instance
+    required: true
+    default: null
+    aliases: []
+  region:
+    description:
+      - The AWS region to use.  Must be specified if ec2_url is not used. If not specified then the value of the EC2_REGION environment variable, if any, is used.
+    required: false
+    default: null
+    aliases: [ 'aws_region', 'ec2_region' ]
+
+extends_documentation_fragment: aws
+'''
+
+EXAMPLES = '''
+# Example of getting a password
+tasks:
+- name: get the Administrator password
+  ec2_win_password:
+    profile: my-boto-profile
+    instance_id: i-XXXXXX
+    region: us-east-1
+    key_file: "~/aws-creds/my_test_key.pem"
+'''
+
+import sys
+from base64 import b64decode
+from os.path import expanduser
+from Crypto.Cipher import PKCS1_v1_5
+from Crypto.PublicKey import RSA
+
+try:
+    import boto.ec2
+    HAS_BOTO = True
+except ImportError:
+    HAS_BOTO = False
+
+def main():
+    argument_spec = ec2_argument_spec()
+    argument_spec.update(dict(
+            instance_id = dict(required=True),
+            key_file = dict(required=True),
+        )
+    )
+    module = AnsibleModule(argument_spec=argument_spec)
+
+    if not HAS_BOTO:
+        module.fail_json(msg='Boto required for this module.')
+
+    instance_id = module.params.get('instance_id')
+    key_file = expanduser(module.params.get('key_file'))
+
+    ec2 = ec2_connect(module)
+
+    data = ec2.get_password_data(instance_id)
+    decoded = b64decode(data)
+
+    f = open(key_file, 'r')
+    key = RSA.importKey(f.read())
+    cipher = PKCS1_v1_5.new(key)
+    sentinel = 'password decryption failed!!!'
+
+    try:
+      decrypted = cipher.decrypt(decoded, sentinel)
+    except ValueError as e:
+      decrypted = None
+
+    if decrypted == None:
+        module.exit_json(win_password='', changed=False)
+    else:
+        module.exit_json(win_password=decrypted, changed=True)
+
+# import module snippets
+from ansible.module_utils.basic import *
+from ansible.module_utils.ec2 import *
+
+main()

From ce1b3d257c87efea16af6f83c3a8eb828e695c70 Mon Sep 17 00:00:00 2001
From: Rick Mendes <rick.mendes4@gmail.com>
Date: Wed, 6 May 2015 08:50:14 -0700
Subject: [PATCH 2/2] house cleaning based on code review

---
 cloud/amazon/ec2_win_password.py | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/cloud/amazon/ec2_win_password.py b/cloud/amazon/ec2_win_password.py
index ee795d5b62a..33a6ae7f947 100644
--- a/cloud/amazon/ec2_win_password.py
+++ b/cloud/amazon/ec2_win_password.py
@@ -13,14 +13,10 @@ options:
     description:
       - The instance id to get the password data from. 
     required: true
-    default: null 
-    aliases: []
   key_file:
     description:
       - path to the file containing the key pair used on the instance
     required: true
-    default: null
-    aliases: []
   region:
     description:
       - The AWS region to use.  Must be specified if ec2_url is not used. If not specified then the value of the EC2_REGION environment variable, if any, is used.
@@ -42,7 +38,6 @@ tasks:
     key_file: "~/aws-creds/my_test_key.pem"
 '''
 
-import sys
 from base64 import b64decode
 from os.path import expanduser
 from Crypto.Cipher import PKCS1_v1_5