Andrew Sitterly's questions

I was able to export all of my scheduled tasks using:

All i need to be able to do is import the scheduled task from the xml file

I have about 100 of these so any help would be appreciated.

$savefolder = "C:\stxml"

Get-ScheduledTask | 
    Foreach-Object { $_ | Export-ScheduledTask | 
        Out-File (Join-Path $savefolder "$($_.TaskName).xml") }

I am now trying to import them using powershell 5.1

I stated with:

Register-ScheduledTask -xml (Get-Content 'C:\stxml\test.xml' | Out-String) -TaskName "TEst Sch Task" -TaskPath "\" -User .\testuser -Force
Register-ScheduledTask : No mapping between account names and security IDs was done.

That lead me to:

$pre = new-scheduledtaskprincipal -userid testuser$ -logontype password; Register-ScheduledTask -xml (Get-Content 'C:\stxml\test.xml' | Out-String) -TaskName "TEst Sch Task" -TaskPath "\" -principal $pre
Register-ScheduledTask : Parameter set cannot be resolved using the specified named parameters.

I as able to boil this down to it not liking the -xml parameter.

My C:\stxml\test.xml file:

<?xml version="1.0" encoding="UTF-16"?>
<Task version="1.3" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
  <RegistrationInfo>
    <Date>2019-01-02T11:57:15.9628723</Date>
    <Author>testuser</Author>
    <Description>Does Stuff</Description>
    <SecurityDescriptor></SecurityDescriptor>
  </RegistrationInfo>
  <Triggers>
    <CalendarTrigger>
      <StartBoundary>2019-01-02T12:00:00</StartBoundary>
      <Enabled>false</Enabled>
      <ScheduleByDay>
        <DaysInterval>1</DaysInterval>
      </ScheduleByDay>
    </CalendarTrigger>
    <CalendarTrigger>
      <StartBoundary>2019-01-02T18:00:00</StartBoundary>
      <Enabled>false</Enabled>
      <ScheduleByDay>
        <DaysInterval>1</DaysInterval>
      </ScheduleByDay>
    </CalendarTrigger>
  </Triggers>
  <Principals>
    <Principal id="Author">
      <UserId>.\testuser</UserId>
      <LogonType>Password</LogonType>
      <RunLevel>LeastPrivilege</RunLevel>
    </Principal>
  </Principals>
  <Settings>
    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
    <DisallowStartIfOnBatteries>true</DisallowStartIfOnBatteries>
    <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>
    <AllowHardTerminate>true</AllowHardTerminate>
    <StartWhenAvailable>false</StartWhenAvailable>
    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
    <IdleSettings>
      <Duration>PT10M</Duration>
      <WaitTimeout>PT1H</WaitTimeout>
      <StopOnIdleEnd>true</StopOnIdleEnd>
      <RestartOnIdle>false</RestartOnIdle>
    </IdleSettings>
    <AllowStartOnDemand>true</AllowStartOnDemand>
    <Enabled>true</Enabled>
    <Hidden>false</Hidden>
    <RunOnlyIfIdle>false</RunOnlyIfIdle>
    <DisallowStartOnRemoteAppSession>false</DisallowStartOnRemoteAppSession>
    <UseUnifiedSchedulingEngine>false</UseUnifiedSchedulingEngine>
    <WakeToRun>false</WakeToRun>
    <ExecutionTimeLimit>P3D</ExecutionTimeLimit>
    <Priority>7</Priority>
  </Settings>
  <Actions>
    <Exec>
      <Command>D:\some.vbs</Command>
    </Exec>
  </Actions>
</Task>

This script works fine for creating EC2 instances:

provider "aws" {
  access_key = "ACCESS_KEY"
  secret_key = "SECRET-KEY"
  region     = "us-east-2"
}

resource "aws_instance" "web" {
  count = 3
  ami           = "ami-001as38b07206d4ceaf"
  instance_type = "t2.micro"
  key_name   = "labkey"
  vpc_security_group_ids = [ "sg-341233f1856" ]
}

Now I am trying to create a security group. The script works fine however I cannot find out how to predefined the "vpc_security_group_ids" when creating the security group

resource "aws_security_group" "Testlab_VPC_Security_Group" {
  vpc_id       = aws_vpc.Testlab_VPC.id
  name         = "Testlab VPC Security Group"
  description  = "Testlab VPC Security Group"
  ingress {
    cidr_blocks = var.ingressCIDRblock
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
  }
  ingress {
    cidr_blocks = var.ingressCIDRblock
    from_port   = 80
    to_port     = 80
    protocol    = "tcp"
  }
  egress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }
tags = {
   Name = "Testlab VPC Security Group"
   Description = "Testlab VPC Security Group"
}
}

I would like to be able to combine both of these scripts.

Is there another way to add the security using terraform that I am missing?