Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Do(n’t) try this at work - Technically, you _ca...

Avatar for Ben Bridts Ben Bridts
May 27, 2021
0
190

Do(n’t) try this at work - Technically, you _can_ do this

Avatar for Ben Bridts

Ben Bridts

May 27, 2021
Tweet

More Decks by Ben Bridts

See All by Ben Bridts
The Hidden Costs of Managed Open Source
Avatar for Ben Bridts benbridts
0
16
re:Invent re:Cap 2023: Evolving your architecture
Avatar for Ben Bridts benbridts
0
54
A closer look at new ways to manage access - EKS Pod Identiy and S3 Access Grant
Avatar for Ben Bridts benbridts
0
10
From ‘huh?’ to privilege escalation
Avatar for Ben Bridts benbridts
0
24
re:Invent re:Cap - Removing Heavy Lifting
Avatar for Ben Bridts benbridts
0
95
Policy as Code: Putting best practices in your repository
Avatar for Ben Bridts benbridts
0
180
(Don't) try this at work - Lightning Talk
Avatar for Ben Bridts benbridts
0
130
AWS Systems Manager
Avatar for Ben Bridts benbridts
1
130
Mistakes I made when writing Infrastructure as Code, and how to avoid them
Avatar for Ben Bridts benbridts
0
63

Featured

See All Featured
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
180
9.9k
Embracing the Ebb and Flow
Avatar for Simon Collison colly
87
4.8k
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
271
21k
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
30
9.7k
Cheating the UX When There Is Nothing More to Optimize - PixelPioneers
Avatar for Stéphanie Walter stephaniewalter
285
14k
Principles of Awesome APIs and How to Build Them.
Avatar for Keavy McMinn keavy
126
17k
Git: the NoSQL Database
Avatar for Brandon Keepers bkeepers
PRO
431
66k
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
190
11k
We Have a Design System, Now What?
Avatar for Morgane Peng morganepeng
53
7.8k
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
27k
Building a Modern Day 
E-commerce SEO Strategy
Avatar for Aleyda Solis aleyda
43
7.6k
Unsuck your backbone
Avatar for Amy Palamountain ammeep
671
58k

Transcript

  1. Do(n’t) try this at work Technically, you can do this

    Ben Bridts

  2. https://mobile.twitter.com/benbridts/status/1371812381161103362 https://via.benbridts.be/comsum/tweet

  3. https://twitter.com/ben11kehoe/status/1074288317108232192 https://via.benbridts.be/comsum/packrat

  4. https://sprocketfox.io/xssfox/2020/03/05/bigbuckopsworks/ https://via.benbridts.be/comsum/bigbucks

  5. https://github.com/njbmartin/diggydb-nodejs https://via.benbridts.be/comsum/diggy

  6. Using your access key

  7. AWS Management Console

  8. https://docs.aws.amazon.com/cli/latest/reference/iam/delete-login-profile.html

  9. https://docs.aws.amazon.com/IAM/latest/UserGuide/console_controlling-access.html More info: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html

  10. None
  11. None
  12. None
  13. None

  14. https://signin.aws.amazon.com/federation? Action=login& Issuer=a+python+script& Destination=https%3A%2F%2Fconsole.aws.amazon.com%2F& SigninToken=ow8X9[...]XAyan

  15. Do • Simplify switching between accounts • Start a new

    browser for every account Don’t • Use credentials from EC2 / Lambda / CodeBuild / … • Block console access

  16. Infinite Storage

  17. AWS CloudShell

  18. https://aws.amazon.com/cloudshell/faqs/

  19. https://aws.amazon.com/cloudshell/faqs/

  20. https://signin.aws.amazon.com/switchrole https://docs.aws.amazon.com/cli/latest/reference/sts/assume-role.html

  21. None
  22. None

  23. https://botocore.amazonaws.com/v1/documentation/api/latest/reference/loaders.html

  24. https://github.com/iann0036/vscode-aws-cloudshell https://via.benbridts.be/comsum/vscode

  25. Reducing Errors The easy way

  26. Amazon CloudWatch

  27. None

  28. https://…execute-api.eu-west-1.amazonaws.com/Prod/run https://…execute-api.eu-west-1.amazonaws.com/Prod/run?fail=y

  29. None
  30. None
  31. None

  32. https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html

  33. None

  34. Thank you! Ben Bridts [email protected] @BenBridts | @WeAreCloudar www.cloudar.be