#AWS #cheatsheet

aws-cheatsheet.md

CLI

• aws-cli cheatsheet @so0k link

• find all instances on specific regions

aws ec2 describe-instances --region us-east-1 \
--query 'Reservations[].Instances[].[InstanceId,InstanceType,State.Name,PublicIpAddress,Placement.AvailabilityZone]'

ECR

• Use ECR with Jenkins link

• List certificates:

aws iam list-server-certificates --output text \
--query 'ServerCertificateMetadataList[*].[Arn,Expiration,ServerCertificateName]'| sort

• Create new bucket:

aws s3 mb s3://<bucket-name>

• Copy file to bucket:

aws s3 cp config.js s3://<bucket-name>

• Allow cross-account access to S3:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Example permissions",
            "Effect": "Allow",
            "Principal": {
                "AWS": [
                    "arn:aws:iam::<account-number>:user/<username>",
                ]
            },
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::<bucket-name>/*"
            ]
        }
    ]
}

• get bucket-policy from s3 buckets list:

for i in (aws s3api list-buckets --query "Buckets[].Name" | cut -d"," -f1 | grep -vE "\[|\]"); echo $i ; \
aws s3api get-bucket-acl --bucket (echo $i | xargs); end

• List instances's private ip & state matched specific tag:

aws ec2 describe-instances --query "Reservations[].Instances[].[State.Name,NetworkInterfaces[].PrivateIpAddresse
s[].PrivateIpAddress]" --filters "Name=tag:KubernetesCluster,Values=staging"

• Add key pair:

aws ec2 import-key-pair --region ap-northeast-2 --key-name tuan \
--public-key-material "ssh-rsa 1232131eqddasdqee1edwefqwewqe"

• Search instance private/public ip:

aws ec2 describe-instances --filters "Name=instance-id ,Values=*$1*" \
--query "Reservations[].Instances[].NetworkInterfaces[].[Association.PublicIp,PrivateIpAddress]"

• List all iam groups:

aws iam list-groups --query "Groups[].[Arn, GroupName]"

• Specify access_key & private_key inline:

export AWS_ACCESS_KEY_ID=
export AWS_SECRET_ACCESS_KEY=