Anthony Scalisi scalp42

If you use Amazon AWS for nearly anything, then you are probably familiar with KMS, the Amazon Key Management Service.

KMS is a service which allows API-level access to cryptographic primitives without the expense and complexity of a full-fledged HSM or CloudHSM implementation. There are trade-offs in that the key material does reside on servers rather than tamper-proof devices, but these risks should be acceptable to a wide range of customers based on the care Amazon has put into the product. You should perform your own diligence on whether KMS is appropriate for your environment. If the security profile is not adequate, you should consider a stronger product such as CloudHSM or managing your own HSM solutions.

The goal here is to provide some introductory code on how to perform envelope encrypt a message using the AWS KMS API.

KMS allows you to encrypt messages of up to 4kb in size directly using the encrypt()/decrypt() API. To exceed these limitations, you must use a technique called "envelope encryptio

	#@ /etc/quagga/bgpd.conf (Centos & Ubuntu)

	hostname <Local OS hostname>
	password <Any random phrase>
	enable password <Any random phrase>
	!
	log file /var/log/quagga/bgpd
	!debug bgp events
	!debug bgp zebra
	debug bgp updates

	class SingletonTest
	def data
	@data
	end

	def data=(n)
	@data = n
	end

	@old_new_method = self.method(:new)

	$ cat install.sh

	## add mesosphere repo and keys
	export DISTRO=$(lsb_release -is \| tr '[:upper:]' '[:lower:]')
	export CODENAME=$(lsb_release -cs)

	echo "deb http://repos.mesosphere.io/${DISTRO} ${CODENAME} main" \| sudo tee /etc/apt/sources.list.d/mesosphere.list
	sudo apt-key adv --keyserver keyserver.ubuntu.com --recv E56151BF

	## update repos

	#!/bin/bash

	# Example for the Docker Hub V2 API
	# Returns all imagas and tags associated with a Docker Hub user account.
	# Requires 'jq': https://stedolan.github.io/jq/

	# set username and password
	UNAME=""
	UPASS=""

	require './hash_inverse'

	describe Hash do
	describe "when empty and asked for the inverse" do
	it "returns an empty hash" do
	{}.inverse.must_equal Hash.new
	end
	end

	describe "when mapping are unique and asked for the inverse" do

	userAuth:
	type: ldap
	server: yourserver
	port: 636
	userDN: the_dn_of_the_keywhiz_user
	password: external:/some/place
	lookup:
	userBaseDN: ou=some,dc=dn,dc=for,dc=your,dc=site
	userAttribute: uid
	requiredRoles: [keywhizAdmins]

	#!/bin/sh

	TMPL=$1
	DESTINATION=/config/consultemplate/template/$TMPL
	TMPDESTINATION=/tmp/$DESTINATION
	LOGS=/logs/$HOSTNAME

	mkdir -p $LOGS

	mkdir -p "`dirname $DESTINATION`"

	$ chef-client --once --local-mode --config /\
	Users/cnk/Code/sandbox/customizing_chef/part3_examples/solo.rb --override-runlist testcookbook::default
	Starting Chef Client, version 12.3.0
	[2015-07-09T17:08:42-07:00] WARN: Run List override has been provided.
	[2015-07-09T17:08:42-07:00] WARN: Original Run List: []
	[2015-07-09T17:08:42-07:00] WARN: Overridden Run List: [recipe[testcookbook::default]]
	resolving cookbooks for run list: ["testcookbook::default"]
	Synchronizing Cookbooks:
	- testcookbook
	Compiling Cookbooks...