Search for a command to run...
Articles tagged with #security
The Risks of Public AWS Lambda Functions Public AWS Lambda functions are powerful, but without proper safeguards, they can be misused. Here’s what can go wrong: Open Access: If anyone can trigger your Lambda function, it might be used for the wrong ...
Introduction This guide will provide a simple way to set up an EC2 and give secure access to a user without opening any ports on the EC2. What we'll end up with is: an EC2 machine in our current VPC with appropriate permissions additional permissio...
At account creation A secure password At account creation make sure you pick a strong password. Understandably "strong password" is a vague explanation, but you type in something similar to a service like this:https://bitwarden.com/password-strength/...
Introduction You may occasionally come across services that needs access to your AWS infrastructure, or an EC2 machine. One example of this is allowing Bitbucket build machines to SSH into EC2 within AWS. A quick guide create a file called bitbucket...
Enable the EC2 to be controlled by Systems Manager Enabling session manager and accessing EC2 terminal is a safer way than doing it via port 22 and SSH-ing into the machine. For the below, you don't need to enable any incoming ports, however you need...
Why a separate guide on this? AWS offers the option to generate permissions based on Cloudtrail logs. That's great for management events, however it doesn't work well for data events. But why? AWS' policy generation gives you nothing: And Cloudtrai...
