| --- | |
| AWSTemplateFormatVersion: '2010-09-09' | |
| Description: Global assets needed for Inventory Discovery | |
| Metadata: | |
| AWS::CloudFormation::Interface: |
| import boto3 | |
| import time | |
| # Example RDS Instance tags: | |
| # | |
| # Scheduled : True | |
| # ScheduleStart : 06:00 | |
| # ScheduleStop : 18:00 | |
| ## |
| ❱ git config user.signingKey 38AF394C | |
| ❱ git config commit.gpgSign true | |
| ❱ echo "test" | gpg --clearsign | |
| -----BEGIN PGP SIGNED MESSAGE----- | |
| Hash: SHA256 | |
| test | |
| gpg: signing failed: Inappropriate ioctl for device | |
| gpg: [stdin]: clear-sign failed: Inappropriate ioctl for device |
| S3Bucket: | |
| Type: "AWS::S3::Bucket" | |
| Properties: | |
| BucketName: | |
| Fn::Sub: "${TagProduct}-${TagEnvironment}-${TagEnvironmentNumber}-audit-${AWS::AccountId}-${AWS::Region}" | |
| NotificationConfiguration: | |
| QueueConfigurations: | |
| - Event: "s3:ObjectCreated:*" | |
| Queue: | |
| Fn::GetAtt: [ "ObjectCreatedQueueAudit", "Arn" ] |
| AWSTemplateFormatVersion: 2010-09-09 | |
| Description: Configure AWS CloudTrail | |
| Parameters: | |
| ManagedResourcePrefix: | |
| Type: 'String' | |
| Description: 'Prefix for the managed resources' | |
| EnableLogFileValidation: | |
| Type: String |
| --- | |
| Description: > | |
| Create a simple encrypted S3 bucket | |
| Parameters: | |
| BucketName: | |
| Type: String | |
| Default: pmarques1234567890-x-account-replication | |
| SourceAccount: | |
| Type: String | |
| Resources: |
| # aws cloudformation deploy --template-file KeepDbStopped.yml --stack-name stop-db --capabilities CAPABILITY_IAM --parameter-overrides DB=arn:aws:rds:us-east-1:XXX:db:XXX | |
| Description: Automatically stop RDS instance every time it turns on due to exceeding the maximum allowed time being stopped | |
| Parameters: | |
| DB: | |
| Description: ARN of database that needs to be stopped | |
| Type: String | |
| AllowedPattern: arn:aws:rds:[a-z0-9\-]+:[0-9]+:db:[^:]* | |
| MaxStartupTime: | |
| Description: Maximum number of minutes to wait between database is automatically started and the time it's ready to be shut down. Extend this limit if your database takes a long time to boot up. | |
| Type: Number |
| https://support.ssl.com/Knowledgebase/Article/View/19/0/der-vs-crt-vs-cer-vs-pem-certificates-and-how-to-convert-them | |
| Certificates and Encodings | |
| At its core an X.509 certificate is a digital document that has been encoded and/or digitally signed according to RFC 5280. | |
| In fact, the term X.509 certificate usually refers to the IETF’s PKIX Certificate and CRL Profile of the X.509 v3 certificate standard, as specified in RFC 5280, commonly referred to as PKIX for Public Key Infrastructure (X.509). | |
| X509 File Extensions |
There are two grub configuration files, one is provided by OS maintainers, and another one is applied as a part of the cloud integration configuration process.
/etc/default/grub/etc/default/grub.d/50-cloudimg-settings.cfgWhere any changes to the latter rewrites any changes made to the former file.
Change the latter file /etc/default/grub.d/50-cloudimg-settings.cfg
If you don't know what Wireguard is, well, you should. It's fast, easy to setup and highly configurable. We will configure Wireguard for multiple users with various restrictions using iptables.
This should fit most setups (not mine though 😉)
