In this article, we will demonstrate how to access an EFS file system in one account from a Lambda function in another account, with both the EFS and the Lambda function residing within their own VPCs. Overview For the Lambda function to connect to an EFS across accounts, some form of network connectivity is required. …
Example 1 – ABAC Using Tags Summary In this example, we will demonstrate ABAC using tags. We will have two(2) roles: ABACRole1 and ABACRole2. ABACRole1 will assume ABACRole2, which has access to objects in an S3 bucket. ABACRole1 will be allowed to assume ABACRole2 if both have the same value in a particular tag, and …
In this post, we will demonstrate two(2) methods for deploying AWS resources using CodePipeline between two accounts. The CodePipeline will be hosted in one account, which we will call the CI/CD account, while the resources will be deployed in another account, which we will call the target account. Overview The first method is to use …
In this article, we will demonstrate how we can manage Non-EC2 on-premise machines from the AWS System Manager using Hybrid Activation. For this demonstration, our on-premises machine will be a Linux VM running on Oracle VirtualBox. The flavour of Linux that we will use is CentOS 7. But you may use any other Linux flavour. …
Hybrid Activation – Manage Non-EC2 machines from AWS System Manager Read More »
Let us assume that your company has a policy that mandates immediate notification and termination of any EC2 instance accessed via SSH. How do you implement this? In this article, we will explore one solution that makes use of (1) CloudWatch Log Subscription, (2) Lambda and (3) SNS. I believe this option offers more flexibility …
Sending SNS Alert and Terminating EC2 instance accessed using SSH Read More »