Jonathan Le jonathanhle

Security Tools for AWS

I often get asked which tools are good to use for securing your AWS infrastructure so I figured I'd write a short listof some useful Security Tools for the AWS Cloud Infrastructure.

This list is not intended be something completely exhaustive, more so provide a good launching pad for someone as they dig into AWS and want to make it secure from the start.

Open Source

This section focuses on tools and services provided by the community and released as open-source.

System Design Cheatsheet

Picking the right architecture = Picking the right battles + Managing trade-offs

Basic Steps

Clarify and agree on the scope of the system

User cases (description of sequences of events that, taken together, lead to a system doing something useful)
- Who is going to use it?
- How are they going to use it?

Strace cheat sheet

trace an executable: strace ls
trace specific system call: strace -e open ls
trace multiple system call: strace -e trace=open,read,write ls
save trace output: strace -o ls.txt ls
trace a running linux process: sudo strace -p pid
print timestamp: strace -t ls
gerate stat: strace -c ls

	# Tutorial https://www.daimto.com/how-to-get-a-google-access-token-with-curl/
	# YouTube video https://youtu.be/hBC_tVJIx5w
	# Client id from Google Developer console
	# Client Secret from Google Developer console
	# Scope this is a space seprated list of the scopes of access you are requesting.

	# Authorization link. Place this in a browser and copy the code that is returned after you accept the scopes.
	https://accounts.google.com/o/oauth2/auth?client_id=[Application Client Id]&redirect_uri=http://127.0.0.1&scope=[Scopes]&response_type=code

	# Exchange Authorization code for an access token and a refresh token.

	# sh -c "$(curl -fsSL https://gist.githubusercontent.com/gjgd/5a08da85a98bf147294f331461e44d1f/raw/a63bf0f4169a8ab651adfa0a56e676e6bc465876/setup-github-action-runner.sh)"

	# Update instance
	sudo apt update -y
	sudo apt upgrade -y

	# Install latest version of git
	sudo add-apt-repository ppa:git-core/ppa -y
	sudo apt-get update
	sudo apt-get install git -y

	import asyncio
	from typing import Coroutine, List, Sequence


	def _limit_concurrency(
	coroutines: Sequence[Coroutine], concurrency: int
	) -> List[Coroutine]:
	"""Decorate coroutines to limit concurrency.

	Enforces a limit on the number of coroutines that can run concurrently in higher

	variable "aws_lb_listener_arn" {
	description = "ARN of the ALB listener to include rules into"
	type = "string"
	}

	variable "okta_auth_server_base_url" {
	description = "Base URL of Okta's authorization server"
	type = "string"
	}

	#!/bin/bash

	sudo apt-get install git python-pip make build-essential libssl-dev zlib1g-dev libbz2-dev libreadline-dev libsqlite3-dev curl
	sudo pip install virtualenvwrapper

	git clone https://github.com/yyuu/pyenv.git ~/.pyenv
	git clone https://github.com/yyuu/pyenv-virtualenvwrapper.git ~/.pyenv/plugins/pyenv-virtualenvwrapper
	git clone https://github.com/pyenv/pyenv-virtualenv.git ~/.pyenv/plugins/pyenv-virtualenv