Skip to content

Instantly share code, notes, and snippets.

@pmatv
pmatv / aws-auth-cm.sh
Last active August 28, 2022 03:28
Map IAM group to EKS ConfigMap
#!/usr/bin/env bash
set -o errexit
set -o nounset
set -o pipefail
IAM_GROUP=${1:-admins}
EKS_ROLE_ARN=${2:-arn:aws:iam::111122223333:role/eks-node-role}
RBAC_GROUP=${3:-system:masters}
@epequeno
epequeno / iam.py
Created May 8, 2019 20:54
basic aws config rule example
def evaluate_compliance(event, configuration_item, valid_rule_parameters):
iam = get_client('iam', event)
users = get_all_users(iam)
evaluations = []
for user in users:
e = build_evaluation(user["UserId"], 'COMPLIANT', event, annotation="testing")
evaluations.append(e)
return evaluations
@j-mprabhakaran
j-mprabhakaran / GCP-Architect-QuickNotes
Created March 30, 2019 05:39
GCP-Architect-QuickNotes
The access pattern fits Nearline storage class requirements and Nearline is a more cost-effective storage approach than Multi-Regional.
The object lifecycle management policy to delete data is correct versus changing the storage class to Coldline.
Google Cloud Storage supports Multi-Regional buckets that synchronize data across regions automatically.
Google Cloud SQL instances are deployed within a single region.
Google Cloud Bigtable data is stored within a single region.
Google Cloud Datastore is stored within a single region.
Using a shared VPC allows each team to individually manage their own application resources, while enabling each application to communicate
between each other securely over RFC1918 address space.
@j-mprabhakaran
j-mprabhakaran / gist:2993ea834bb54b2e03bcb64d0034f5a5
Created January 20, 2019 10:24
GCP Cloud Architect - Part 3
GCP Cloud Architect - Part 3
Case Studies
Refreshed Nov 9th 2018; JencoMart completely dropped
Overview - 3 case studies; 40-50% on the exam; Question on one side, Case study on other side
Layout of Case study - 1.Company Overview 2.Solution concept - current goal 3.Existing Technical Env 4.Requirements(Tech/Business) 5.Executive statement
Mountkirk Games
Dress4Win
TerramEarth
Mountkirk Games
Dataflow lifecycle
migration concerns from migrating from on-premises over into google cloud
code snippet to troubleshoot and diagnose
Part 2 - Hands-on with tools
Role of Cloud Architect
plans, designs and builds the infrastructure for an org to host their workload on GCP; able to plan to scale;
scalability and automation
@j-mprabhakaran
j-mprabhakaran / GCP Architect Part-1
Created January 16, 2019 12:50
Google Certified Cloud Architect Part 1 Notes from Linux Academy
Google Certified Professional Cloud Architect - Part 1
======================================================
GCP Overview
Google's suite of cloud computing services; run on same infra and network as google
Compute -> App Engine, Container Engine, Compute Engine
Storage -> Bigtable, Cloud Storage, Cloud SQL, Cloud Datastore
Big Data -> BigQuery, Pub/Sub, Dataflow, Dataproc, Datalab
Machine Learning -> Vision API, Machine Learning, Speech API, Translation API
https://cloud.google.com/pricing
Per second pricing for instances;Private Global Fiber network;Live migration of VMs;Better performance;Industry leading security;access to innovative resources(Big data,ML)
@kokokruunch
kokokruunch / GCPArchitect-KarloTips.md
Last active April 7, 2022 20:00
Google Cloud Professional Architect - Tips
@pat
pat / LICENSE.txt
Last active February 4, 2023 21:02
Running Setup SQL scripts on an RDS instance within a VPC, via Terraform
The MIT License (MIT)
Copyright (c) 2018 Pat Allan
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
@thieryl
thieryl / 01_aws_rbd_cli.md
Last active March 31, 2022 10:49
[AWS] Amazon Web Services #aws

AWS CLI RBD

White list office ip

aws allow-my-ip "Proxy-Cerebro" tcp 22 rbd_sys