RB nitrocode

Use git:: prefix before the url of the git repo and suffix it with ?ref=<branch> for a specific branch

For easy copy paste

module "example" {
  source = "git::https://github.com/cloudposse/terraform-aws-ec2-client-vpn.git?ref=master"

  # ...
}

Template terraform provider for darwin arm

Provider registry.terraform.io/hashicorp/template v2.2.0 does not have a package available for your current platform, darwin_arm64

why

The templatefile function only works with files. If you're working with files then switch to templatefile.

The hashicorp/template provider's template_file data source works with template strings and files (converted to strings) but was archived/deprecated before creating an arm release forcing people to look into other options if using Apple M1 (based on ARM).

Move to password manager

Why

Prerequisites

choose manager
- bitwarden vs 1password
choose a strong master password
only length matters

List Datadog Orgs

Set env vars (preferably using direnv)

export DD_CLIENT_API_KEY=
export DD_CLIENT_APP_KEY=

Then run script

AWS PHD Event Codes

Commands to dump it out

aws health describe-events | jq -r '.eventTypes[].code' > aws_phd_event_codes.txt

Get terraform version from tfstate

This returns the tfstate version from the tf state

Only useful if a pre-0.14 version of terraform is required to apply and it's too difficult to upgrade to the latest.

No workspace

Format: s3://{bucket}/{key}

README

Find non arm based apps running on your m1 using system_profiler. This helps find out if an intel based app is running instead of a universal app.

Using this technique, I found out that IT had accidentally installed x86 slack and x86 chrome. I replaced those with the universal ones for better performance.

Sample output of the attached shell script

$ wget https://gist.githubusercontent.com/nitrocode/7ab3e9229a6bce66b73d59fc1970eec8/raw/m1_applications_not_universal.sh

Upgrade Terraform

If using an arm instance, versions before 1.0.2 may cause intermittent issues so some commands will have to be repeated if they fail.
Before each upgrade, the required_version may need to be updated
After each upgrade, a terraform refresh may be needed

Prereqs

Start with terraform that does not have any changes
tfenv - brew install tfenv

Potential plist for aws-vault --server

References

99designs/aws-vault Issue #718 - Cannot configure launchctl correctly: sudo: a terminal is required to read the password
99designs/aws-vault Issue #735 - Start metadata server without subshell (non-daemonized)
99designs/aws-vault PR #740 - Allow --no-daemonize for the ec2 metadata server

	#!/bin/bash
	# Usage:
	# ./find-region-of-instance-id.sh i-snip

	aws ec2 describe-regions --query 'Regions[].RegionName' --output text \| tr '\t' '\n' \| tac \| while read region; do
	output=`aws --region $region ec2 describe-instances --instance-ids $@ --query 'Reservations[].Instances[].InstanceId' --output text 2>/dev/null \|\| true`
	if [ "$output" = "$@" ]; then
	echo $region
	break
	fi