Sergiy Shevchenko ssheff

Identity Days

re:Invent session SEC207

re:Invent slides here

#Setting Up AWS CodeCommit (Mac)

We chose to use HTTPS here

If git asks you to manually enter username or password it is incorrectly configured!

Similar to RSA, the AWS CLI credential-helper should be using your keys to create and send a dynamic password that updates every 15 minutes.

	#!/usr/bin/env bash

	DOMAIN="" # Your Route53 TLD (ex: mydomain.com)
	SUBDOMAIN="" # The meeting subdomain (ex: meet (for meet.mydomain.com))
	CONFIGURE_AUTH=true # Boolean to configure internal_plain auth or not
	PROSODY_USER="" # If you're configuring auth, the user account name (will login as ${PROSODY_USER}@${SUBDOMAIN}.${DOMAIN} )
	PROSODY_PASS="" # If you're configuring auth, the user password (escape special characters)
	AWS_ACCESS_KEY="" # Your AWS Access Key
	AWS_SECRET_KEY="" # Your AWS Secret Key
	LETS_ENCRYPT_EMAIL="" # Email address to use for Let's Encrypt certificate

	#!/usr/bin/env bash

	DOMAIN="" # Your Route53 TLD (ex: mydomain.com)
	SUBDOMAIN="" # The meeting subdomain (ex: meet (for meet.mydomain.com))
	CONFIGURE_AUTH=true # Boolean to configure internal_plain auth or not
	PROSODY_USER="" # If you're configuring auth, the user account name (will login as ${PROSODY_USER}@${SUBDOMAIN}.${DOMAIN} )
	PROSODY_PASS="" # If you're configuring auth, the user password (escape special characters)
	AWS_ACCESS_KEY="" # Your AWS Access Key
	AWS_SECRET_KEY="" # Your AWS Secret Key
	LETS_ENCRYPT_EMAIL="" # Email address to use for Let's Encrypt certificate

	AWS Amplify and AppSync with Expo (React Native) cheat sheet and reference guide

	[AWS Amplify] https://aws-amplify.github.io
	[Expo] https://expo.io

	// In order to run the Android emulator with Expo you will need Android Studio with Android Virtual Device Manager
	// In order to run the iOS simulator with Expo you'll need Xcode

	INITIALIZE PROJECT

	import boto3
	"""
	## Pre-requsites: Need to add tag on loadbalancer as `Environment:Production`.
	Name: Enable AccessLogs for production load-balancers
	Author: Deepak Dalvi
	Version: 1.0.0

	"""

	AWS_ACCESS_KEY = ''

	#!/usr/bin/env python
	##### USE ON YOUR OWN RISK - THIS IS GOING TO DEREGISTER AMI OLDER THAN 30 DAYS

	import boto3
	from dateutil.parser import parse
	import datetime
	age = 30
	aws_profile_name = 'prod'
	def days_old(date):
	get_date_obj = parse(date)

	#!/bin/bash

	bucket=$1

	set -e

	echo "Removing all versions from $bucket"

	versions=`aws s3api list-object-versions --bucket $bucket \|jq '.Versions'`
	markers=`aws s3api list-object-versions --bucket $bucket \|jq '.DeleteMarkers'`