DevSecOps Bootcamp - Week 3 - Lesson 2

This is the second lesson of the Third week of DevSecOps bootcamp which helps with deploying to a software defined environment, AWS.

Transcript

1. 1 BUILDING RUGGED SOFTWARE YEAR ONE / WEEK THREE/ LESSON TWO Copyright © DevSecOps Foundation 2015-2016
2. 2 Copyright © DevSecOps Foundation 2015-2016 • AWS CLI & Bash Environment Variables • Assumer • Lab 2 Agenda
3. 3 Copyright © DevSecOps Foundation 2015-2016 • AWS CLI credentials precedence 1. Inline (--aws-access-key) 2. Environment variables (AWS_*) 3. Configuration (~/.aws/credentials) AWS CLI & Bash Environment Variables
4. 4 Copyright © DevSecOps Foundation 2015-2016 • Temporary credentials expire after an hour (1hr) • So, unset them before running the AWS CLI again • unset AWS_ACCESS_KEY_ID • unset AWS_SECRET_ACCESS_KEY • unset AWS_SESSION_TOKEN AWS CLI & Bash Environment Variables
5. 5 Copyright © DevSecOps Foundation 2015-2016 • Assumer will save you some time • Install it: https://github.com/devsecops/assumer Assumer $ assumer –h Parameters: -a, --target-account=<s> Target AWS account to assume into -r, --target-role=<s> The role in the target account -A, --control-account=<s> Control Plane AWS account -R, --control-role=<s> The role in the control account These parameters are optional: -e, --region=<s> AWS region to operate in (default: us-west-2) -u, --username=<s> Your IAM username (default: student1) -p, --profile=<s> Profile name from ~/.aws/credentials -g, --gui Open a web browser to the AWS console with these credentials -v, --version Print version and exit -h, --help Show this message
6. 6 Copyright © DevSecOps Foundation 2015-2016 • Week 3 Lab 2: https://github.com/devsecops/bootcamp/blob/master/Week- 3/labs/LAB-2.md • Setup AWS Environment • Install and Configure Splunk • Install & Run Rails Goat • Hints: • Exercise 1, you’ll need to tamper these fields: user_id, email, password & password_confirmation Lab 2