aws-remove-vpc.sh

#!/bin/bash
#####
# Description: Delete a specific AWS VPC and all its resources
# Execute: ./aws-remove-vpc.sh AWS_REGION VPC_ID
#####

set -e

if [ -z "$1" ]; then
    echo "Usage      : $0 <aws region> <vpc id>"
    echo "For example: $0 us-east-1 vpc-xxxxxxxxxx"
    echo ""
    exit 1
fi

if [ -z "$2" ]; then
    # List all VPCs in specific Region
    aws ec2 describe-vpcs \
        --query 'Vpcs[].{vpcid:VpcId,name:Tags[?Key==`Name`].Value[]}' \
        --output table --region $1
    exit 1
else
    AWS_REGION=$1
    VPC_ID=$2
fi

# Check VPC state, available or not
state=$(aws ec2 describe-vpcs \
    --vpc-ids ${VPC_ID} \
    --query 'Vpcs[].State' \
    --output text --region ${AWS_REGION})

if [ ${state} != 'available' ]; then
    echo "The VPC of ${VPC_ID} is NOT available now!"
    exit 1
fi

# Stop instance
echo "Process of EC2 instance ..."
for instance in $(aws ec2 describe-instances \
    --filters "Name=vpc-id,Values=${VPC_ID}" \
              "Name=instance-state-name,Values=running" \
    --query 'Reservations[].Instances[].InstanceId' \
    --output text --region ${AWS_REGION})
do
    echo "    stop instance of $instance"
    aws ec2 stop-instances \
        --instance-ids ${instance} \
        --region ${AWS_REGION} > /dev/null

    # Wait until instance stopped
    aws ec2 wait instance-stopped \
        --instance-ids ${instance} \
        --region ${AWS_REGION}
done

# Terminate instance
for instance in $(aws ec2 describe-instances \
    --filters 'Name=vpc-id,Values='${VPC_ID} \
    --query 'Reservations[].Instances[].InstanceId' \
    --output text --region ${AWS_REGION})
do
    echo "    terminate instance of $instance"
    aws ec2 terminate-instances \
        --instance-ids ${instance} \
        --region ${AWS_REGION} > /dev/null

    # Wait until instance terminated
    aws ec2 wait instance-terminated \
        --instance-ids ${instance} \
        --region ${AWS_REGION}
done

# Delete Load Balancers
echo "Process of Load Balancers ..."
for load_balancer in $(aws elb describe-load-balancers \
    --region ${AWS_REGION} | \
    jq -r ".LoadBalancerDescriptions[] | select(.VPCId == \"${VPC_ID}\") | \
    .LoadBalancerName" \
    )
do
    echo "    delete Load Balancer of $load_balancer"
    aws elb delete-load-balancer \
        --load-balancer-name ${load_balancer} \
        --region ${AWS_REGION} > /dev/null
done

# Delete NAT Gateway
echo "Process of NAT Gateway ..."
for natgateway in $(aws ec2 describe-nat-gateways \
    --filter 'Name=vpc-id,Values='${VPC_ID} \
    --query 'NatGateways[].NatGatewayId' \
    --output text --region ${AWS_REGION})
do
    echo "    delete NAT Gateway of $natgateway"
    aws ec2 delete-nat-gateway \
        --nat-gateway-id ${natgateway} \
        --region ${AWS_REGION} > /dev/null
done

echo "    waiting for state of deleted"
while :
do
    state=$(aws ec2 describe-nat-gateways \
        --filter 'Name=vpc-id,Values='${VPC_ID} \
                 'Name=state,Values=pending,available,deleting' \
        --query 'NatGateways[].State' \
        --output text --region ${AWS_REGION})
    if [ -z "$state" ]; then
        break
    fi
    sleep 3
done

# Delete VPN connection
echo "Process of VPN connection ..."
for vpn in $(aws ec2 describe-vpn-connections \
    --filters 'Name=vpc-id,Values='${VPC_ID} \
    --query 'VpnConnections[].VpnConnectionId' \
    --output text --region ${AWS_REGION})
do
    echo "    delete VPN Connection of $vpn"
    aws ec2 delete-vpn-connection \
        --vpn-connection-id ${vpn} \
        --region ${AWS_REGION} > /dev/null
    # Wait until deleted
    aws ec2 wait vpn-connection-deleted \
        --vpn-connection-ids ${vpn} \
        --region ${AWS_REGION}
done

# Delete VPN Gateway
echo "Process of VPN Gateway ..."
for vpngateway in $(aws ec2 describe-vpn-gateways \
    --filters 'Name=attachment.vpc-id,Values='${VPC_ID} \
    --query 'VpnGateways[].VpnGatewayId' \
    --output text --region ${AWS_REGION})
do
    echo "    delete VPN Gateway of $vpngateway"
    aws ec2 delete-vpn-gateway \
        --vpn-gateway-id ${vpngateway} \
        --region ${AWS_REGION} > /dev/null
done

# Delete VPC Peering
echo "Process of VPC Peering ..."
for peering in $(aws ec2 describe-vpc-peering-connections \
    --filters 'Name=requester-vpc-info.vpc-id,Values='${VPC_ID} \
    --query 'VpcPeeringConnections[].VpcPeeringConnectionId' \
    --output text --region ${AWS_REGION})
do
    echo "    delete VPC Peering of $peering"
    aws ec2 delete-vpc-peering-connection \
        --vpc-peering-connection-id ${peering} \
        --region ${AWS_REGION} > /dev/null
    # Wait until deleted
    aws ec2 wait vpc-peering-connection-deleted \
        --vpc-peering-connection-ids ${peering} \
        --region ${AWS_REGION}
done

# Delete Endpoints
echo "Process of VPC endpoints ..."
for endpoints in $(aws ec2 describe-vpc-endpoints \
    --filters 'Name=vpc-id,Values='${VPC_ID} \
    --query 'VpcEndpoints[].VpcEndpointId' \
    --output text --region ${AWS_REGION})
do
    echo "    delete endpoint of $endpoints"
    aws ec2 delete-vpc-endpoints \
        --vpc-endpoint-ids ${endpoints} \
        --region ${AWS_REGION} > /dev/null
done

# Delete Egress Only Internet Gateway
echo "Process of Egress Only Internet Gateway ..."
for egress in $(aws ec2 describe-egress-only-internet-gateways \
    --filters 'Name=attachment.vpc-id,Values='${VPC_ID} \
    --query 'EgressOnlyInternetGateways[].EgressOnlyInternetGatewayId' \
    --output text --region ${AWS_REGION})
do
    echo "    delete Egress Only Internet Gateway of $egress"
    aws ec2 delete-egress-only-internet-gateway \
        --egress-only-internet-gateway-id ${egress} \
        --region ${AWS_REGION} > /dev/null
done

# Delete ACLs
echo "Process of Network ACLs ..."
for acl in $(aws ec2 describe-network-acls \
    --filters 'Name=vpc-id,Values='${VPC_ID} \
    --query 'NetworkAcls[].NetworkAclId' \
    --output text --region ${AWS_REGION})
do
    # Check it's default acl
    acl_default=$(aws ec2 describe-network-acls \
        --network-acl-ids ${acl} \
        --query 'NetworkAcls[].IsDefault' \
        --output text --region ${AWS_REGION})

    # Ignore default acl
    if [ "$acl_default" = 'true' ] || [ "$acl_default" = 'True' ]; then
        continue
    fi

    echo "    delete ACL of $acl"
    aws ec2 delete-network-acl \
        --network-acl-id ${acl} \
        --region ${AWS_REGION} > /dev/null
done

# Delete EIP
echo "Process of Elastic IP ..."
for associationid in $(aws ec2 describe-network-interfaces \
    --filters 'Name=vpc-id,Values='${VPC_ID} \
    --query 'NetworkInterfaces[].Association[].AssociationId' \
    --output text --region ${AWS_REGION})
do
    echo "    disassociate EIP association-id of $associationid"
    aws ec2 disassociate-address \
        --association-id ${associationid} \
        --region ${AWS_REGION} > /dev/null
done

# Delete NIC
echo "Process of Network Interface ..."
for nic in $(aws ec2 describe-network-interfaces \
    --filters 'Name=vpc-id,Values='${VPC_ID} \
    --query 'NetworkInterfaces[].NetworkInterfaceId' \
    --output text --region ${AWS_REGION})
do
    echo "    detach Network Interface of $nic"
    attachment=$(aws ec2 describe-network-interfaces \
        --filters 'Name=vpc-id,Values='${VPC_ID} \
                  'Name=network-interface-id,Values='${nic} \
        --query 'NetworkInterfaces[].Attachment.AttachmentId' \
        --output text --region ${AWS_REGION})

    if [ ! -z ${attachment} ]; then
        echo "network attachment is ${attachment}"
        aws ec2 detach-network-interface \
            --attachment-id ${attachment} \
            --region ${AWS_REGION} >/dev/null

        # we need a waiter here
        sleep 1
    fi

    echo "    delete Network Interface of $nic"
    aws ec2 delete-network-interface \
        --network-interface-id ${nic} \
        --region ${AWS_REGION} > /dev/null
done

# Delete Security Group
echo "Process of Security Group ..."
for sg in $(aws ec2 describe-security-groups \
    --filters 'Name=vpc-id,Values='${VPC_ID} \
    --query 'SecurityGroups[].GroupId' \
    --output text --region ${AWS_REGION})
do
    # Check it's default security group
    sg_name=$(aws ec2 describe-security-groups \
        --group-ids ${sg} --query 'SecurityGroups[].GroupName' \
        --output text --region ${AWS_REGION})
    # Ignore default security group
    if [ "$sg_name" = 'default' ] || [ "$sg_name" = 'Default' ]; then
        continue
    fi

    echo "    delete Security group of $sg"
    aws ec2 delete-security-group \
        --group-id ${sg} \
        --region ${AWS_REGION} > /dev/null
done

# Delete IGW
echo "Process of Internet Gateway ..."
for igw in $(aws ec2 describe-internet-gateways \
    --filters 'Name=attachment.vpc-id,Values='${VPC_ID} \
    --query 'InternetGateways[].InternetGatewayId' \
    --output text --region ${AWS_REGION})
do
    echo "    detach IGW of $igw"
    aws ec2 detach-internet-gateway \
        --internet-gateway-id ${igw} \
        --vpc-id ${VPC_ID} \
        --region ${AWS_REGION} > /dev/null

    # we need a waiter here
    sleep 1

    echo "    delete IGW of $igw"
    aws ec2 delete-internet-gateway \
        --internet-gateway-id ${igw} \
        --region ${AWS_REGION} > /dev/null
done

# Delete Subnet
echo "Process of Subnet ..."
for subnet in $(aws ec2 describe-subnets \
    --filters 'Name=vpc-id,Values='${VPC_ID} \
    --query 'Subnets[].SubnetId' \
    --output text --region ${AWS_REGION})
do
    echo "    delete Subnet of $subnet"
    aws ec2 delete-subnet \
        --subnet-id ${subnet} \
        --region ${AWS_REGION} > /dev/null
done

# Delete Route Table
echo "Process of Route Table ..."
for routetable in $(aws ec2 describe-route-tables \
    --filters 'Name=vpc-id,Values='${VPC_ID} \
    --query 'RouteTables[].RouteTableId' \
    --output text --region ${AWS_REGION})
do
    # Check it's main route table
    main_table=$(aws ec2 describe-route-tables \
        --route-table-ids ${routetable} \
        --query 'RouteTables[].Associations[].Main' \
        --output text --region ${AWS_REGION})

    # Ignore main route table
    if [ "$main_table" = 'True' ] || [ "$main_table" = 'true' ]; then
        continue
    fi

    echo "    delete Route Table of $routetable"
    aws ec2 delete-route-table \
        --route-table-id ${routetable} \
        --region ${AWS_REGION} > /dev/null
done

# Delete VPC
echo "Finally delete VPC of ${VPC_ID}"
aws ec2 delete-vpc \
    --vpc-id ${VPC_ID} \
    --region ${AWS_REGION}

echo "Done."