A Technical I.T./DevOps Blog
Problem scenario
Using the AWS CLI how do you determine the AWS region for an S3 bucket?
Solution
Run this command (but replace “foobar” with the name of your bucket):
aws s3api get-bucket-location –bucket foobar …
Continue reading “How Do You Determine the AWS Region for an S3 Bucket?”
Problem scenario
You want to list all the VPC Peering Connections for a specific region using Python.
You want the equivalent of aws ec2 describe-vpc-peering-connections
How do you show (retrieve or fetch) the VPC peering connections using Boto3?
Solution
import boto3
contint = boto3.client(‘ec2’)
var1 = contint.describe_vpc_peering_connections()
print(var1) …
Continue reading “How Do You Display the VPC Peering Connections with Boto3?”
Problem scenario
You want to retrieve VPC peering connection info and other VPC info via Boto3. With Python 3 you tried to run this Python 2 (and Boto 2.x) program:
import boto.vpc
c = boto.vpc.connect_to_region(‘us-east-1’)
vpcs = c.get_all_vpcs()
vpc_peering_connection = c.create_vpc_peering_connection(vpcs[0].id, vpcs[1].id)
(It was written by the person who developed Boto 2.x here.)
You have a variety or problems with the syntax not working.
…
Continue reading “How Do You Get Past “ImportError: No module named ‘boto’”?”
Problem scenario
You want to create a CMK in Amazon web servers. What do you do?
Solution
Use Secrets Manager with Amazon’s Key Management Service.
1. Log into the AWS console.
2. Go to “Key Management Service”
3. Click on “Create key”
4. Enter an “Alias”. Normally you won’t click on the “Advanced options” unless you have a special reason.
…
Continue reading “How Do You Create a Customer Master Key in AWS?”
Question
A CMK is an encryption key. In Amazon Web Services, for CMKs (Customer Master Keys) in KMS (Key Management Service), what is the difference between administrative permissions and key usage permissions?
Answer
Usage permissions enable (either IAM users or roles) to encrypt and decrypt data with the AWS KMS API.
Administrative permissions for a CMK allows either an IAM user or role to give usage permissions to other IAM users or roles through the API (and sometimes the web console).
…
Problem scenario
You want to obtain a non-database secret from AWS and you know the name of the secret (in Secrets Manager) and the region it is in. What should you do?
Solution
Prerequisites
You have installed and configured the AWS CLI. If you need assistance with this, click on this posting if you can use pip or this posting if you cannot use pip.
…
Continue reading “How Do You Retrieve an Application-Level Secret from AWS?”
Problem scenario
You try to store a secret, but you see this message:
“Your secret was created successfully but configuring rotation has failed
Secrets Manager cannot invoke the specified Lambda function. Ensure that the function policy grants access to the principal secretsmanager.amazonaws.com. “
What do you do?
Solution
Try this posting.
…
Problem scenario
You have Puppet agent and Puppet Master set up and configured to work together. You are are running open source Puppet 5.x on Ubuntu servers in AWS. You want to install Java on the Puppet agent nodes. You tried to use the Java module.
On the Puppet Master server, you ran this: puppet module install puppetlabs-java –version 2.2.0
This is your site.pp file:
class { ‘java’ :
package =’java-1.8.0-openjdk-devel’, …
Continue reading “How Do You Create a Puppet Manifest to Install Java?”
Problem scenario
In AWS you manually added a Security Group rule for the source of a given IP address. This IP address is either the internal or external IP address. You can ping one of them (either the internal or external IP address). Why cannot you ping each IP address?
Solution
Check to see if a firewall is running on the Linux server.
…