Ssm

Introduction: In this article, we will learn how we can patch an AWS EC2 fleet using the SSM which is a native solution for the patching processes in the AWS cloud platform. SSM can automate a task, collect the system inventory, apply OS patches and execute the scripts without logging…

In this blog, I will be writing on how to transfer/copy data and tables from one database to another. There are methods or terminologies that seem difficult at a first look but are very easy on a detailed look. That is why I will always advice you to make google…

Organizations have been using more and more hybrid cloud for many reasons. It allows them to manage their legacy infrastructure and critical applications in their private cloud. AWS System Manager enables a centralized management of both cloud and on-premise servers. To do so, a SSM agent must be installed on…

Un bastion pour quoi faire ? L’une des règles de base de l’architecture de sécurité est d’éviter d’exposer des accès d’administration sur Internet . C’est pourquoi vous ne devez jamais exposer directement des accès SSH ou RDP et devriez utiliser plutôt un bastion. Si vous exposez des accès RDP ou SSH directement sur Internet, alors vous…

Keeping and managing environment variables(secrets, API keys, certificates, etc) has for long been a subject of debate amongst experts. From storage in .env files to managed git environment to the usages of third-party storage platforms. All in a bid to secure an application from external threats. In this article, we…

This post assumes a very basic understanding of VPC, SSH, and bastion/jump boxes. Rights to execute SSM are also assumed. If you want to secure your database (DB), you will probably host it on a private subnet. To recap, a private subnet is closed to unsolicited connections from the outside…

We wanted to make use of AWS Session manager to address the following things: Allow access to EC2 shell, without dealing with Keypairs Disallow downloading of files to their local system (scp). Have log captured of all commands executed for the purpose of auditing While AWS documentation is good, there…