AWS Certified DevOps Engineer Professional (DOP-C02) Review Material – CDK
AWS Certified DevOps Engineer Professional (DOP-C02) Review Material – CDK Read More »
For almost ten (10) years, my desktop, website, email server, and homelab have run on a single Linux machine. The machine was a Dell Precision T5500 with dual Xeon Cores, 24GB of memory, and two (2) NVIDIA Quadro GPUs. At that time, the machine was powerful enough to run all my services and homelab while also
My Journey to Proxmox – Part 1 Read More »
In this article, we will demonstrate how to access an EFS file system in one account from a Lambda function in another account, with both the EFS and the Lambda function residing within their own VPCs. Overview For the Lambda function to connect to an EFS across accounts, some form of network connectivity is required.
EFS Cross-account Access From a Lambda Function Read More »
Example 1 – ABAC Using Tags Summary In this example, we will demonstrate ABAC using tags. We will have two(2) roles: ABACRole1 and ABACRole2. ABACRole1 will assume ABACRole2, which has access to objects in an S3 bucket. ABACRole1 will be allowed to assume ABACRole2 if both have the same value in a particular tag, and
Attribute-based Access Control (ABAC) Examples Read More »
In this post, we will demonstrate two(2) methods for deploying AWS resources using CodePipeline between two accounts. The CodePipeline will be hosted in one account, which we will call the CI/CD account, while the resources will be deployed in another account, which we will call the target account. Overview The first method is to use
AWS CodePipeline Cross-account Deployment Read More »
In this article, we will demonstrate how we can manage Non-EC2 on-premise machines from the AWS System Manager using Hybrid Activation. For this demonstration, our on-premises machine will be a Linux VM running on Oracle VirtualBox. The flavour of Linux that we will use is CentOS 7. But you may use any other Linux flavour.
Hybrid Activation – Manage Non-EC2 machines from AWS System Manager Read More »
Let us assume that your company has a policy that mandates immediate notification and termination of any EC2 instance accessed via SSH. How do you implement this? In this article, we will explore one solution that makes use of (1) CloudWatch Log Subscription, (2) Lambda and (3) SNS. I believe this option offers more flexibility
Sending SNS Alert and Terminating EC2 instance accessed using SSH Read More »