Do(n’t) try this at work - Technically, you _can_ do this

Transcript

1. Do(n’t) try this at work Technically, you can do this Ben Bridts
2. https://mobile.twitter.com/benbridts/status/1371812381161103362 https://via.benbridts.be/comsum/tweet
3. https://twitter.com/ben11kehoe/status/1074288317108232192 https://via.benbridts.be/comsum/packrat
4. https://sprocketfox.io/xssfox/2020/03/05/bigbuckopsworks/ https://via.benbridts.be/comsum/bigbucks
5. https://github.com/njbmartin/diggydb-nodejs https://via.benbridts.be/comsum/diggy
6. Using your access key
7. AWS Management Console
8. https://docs.aws.amazon.com/cli/latest/reference/iam/delete-login-profile.html
9. https://docs.aws.amazon.com/IAM/latest/UserGuide/console_controlling-access.html More info: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html
14. https://signin.aws.amazon.com/federation? Action=login& Issuer=a+python+script& Destination=https%3A%2F%2Fconsole.aws.amazon.com%2F& SigninToken=ow8X9[...]XAyan
15. Do • Simplify switching between accounts • Start a new browser for every account Don’t • Use credentials from EC2 / Lambda / CodeBuild / … • Block console access
16. Infinite Storage
17. AWS CloudShell
18. https://aws.amazon.com/cloudshell/faqs/
19. https://aws.amazon.com/cloudshell/faqs/
20. https://signin.aws.amazon.com/switchrole https://docs.aws.amazon.com/cli/latest/reference/sts/assume-role.html
23. https://botocore.amazonaws.com/v1/documentation/api/latest/reference/loaders.html
24. https://github.com/iann0036/vscode-aws-cloudshell https://via.benbridts.be/comsum/vscode
25. Reducing Errors The easy way
26. Amazon CloudWatch
28. https://…execute-api.eu-west-1.amazonaws.com/Prod/run https://…execute-api.eu-west-1.amazonaws.com/Prod/run?fail=y
32. https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html
34. Thank you! Ben Bridts ben@cloudar.be @BenBridts | @WeAreCloudar www.cloudar.be