Live data from Hacker News

AWS Nuke – delete all resources associated with AWS account

github.com

21–30 of 124 posts

Re: AWS Nuke – delete all resources associated with AWS account

#21
post #6

I've used aws-nuke a bunch but the use case seems significantly diminished now that AWS Organizations has the ability to delete entire accounts.

Last time I've checked it was a lengthy process involving attaching a credit card, leaving the organization and then deleting the account. Has it been changed?

https://docs.aws.amazon.com/organizations/latest/APIReferenc...

Now has an API (with some caveats)

Re: AWS Nuke – delete all resources associated with AWS account

#23
post #11

Shout out to AWS batch, where if you delete the role assigned to a compute cluster the cluster itself becomes impossible to delete. Found this out after using AWS nuke

Even better if you have your cloud formation with the iam role in the same stack and there is something wrong the the rollback can happen such that the iam role gets deleted standing the compute environment and failing the rollback.

Re: AWS Nuke – delete all resources associated with AWS account

#25
post #12
post #11

Shout out to AWS batch, where if you delete the role assigned to a compute cluster the cluster itself becomes impossible to delete. Found this out after using AWS nuke

That's a weird one, but surely an aws-nuke bug? It must already use a deliberate order - there's plenty of resources that need anything linked/constituent deleted first - so that order is/was just not correct for those?

No, Batch's interaction with IAM roles and permission is super weird and not at all documented.

It is easy to screw it up.

Re: AWS Nuke – delete all resources associated with AWS account

#26

Earlier quoted context omitted.

Needs a flag to run non-interactively

I nearly took this bait

`aws-nuke --no-dry-run --non-interactive --i-really-mean-it --yes-i-agree-to-the-second-prompt-also`

Re: AWS Nuke – delete all resources associated with AWS account

#27
post #11

Shout out to AWS batch, where if you delete the role assigned to a compute cluster the cluster itself becomes impossible to delete. Found this out after using AWS nuke

Try logging into the console as root, that lets you delete anything.

You can also try updating the cluster to have a new role.

Re: AWS Nuke – delete all resources associated with AWS account

#28
post #11

Shout out to AWS batch, where if you delete the role assigned to a compute cluster the cluster itself becomes impossible to delete. Found this out after using AWS nuke

Try logging into the console as root, that lets you delete anything. You can also try updating the cluster to have a new role.

That’s… not the issue. The cluster gets stuck in a deleting state forever. And at which point you’re unable to update it.
Post reply on HN