AWS has made sharing encrypted AMI cross accounts a bit easier now, check this out - https://aws.amazon.com/about-aws/whats-new/2019/05/share-encrypted-amis-across-accounts-to-launch-instances-in-a-single-step/ Here is a sample of how to share encrypted AMI across accounts and launch an instance from it: https://aws.amazon.com/blogs/security/how-to-share-encrypted-amis-across-accounts-to-launch-encrypted-ec2-instances/ If you need to run autoscaling group from the encrypted AMI, it requires a few extra steps. Mostly it … Continue reading Share encrypted AMI across AWS accounts
Month: January 2020
Manage Private CA file in Python
The private CA signed certificate can cause SSL error in Python if the it is not trusted. How to manage it? Well, it really depends on the Python module that you use. I will give a few examples that I have seen so far. pip Pip is the popular python package manage tool. To check … Continue reading Manage Private CA file in Python
git sparse-checkout command for monorepo
We are implementing monorepo internally to let all teams work closely. As there are dependencies between each team's work, it is important to understand and track the cross-project changes that go into the monorepo. Monorepo is a good practice that brings in better collaboration, but it also introduces some inconveniences. The biggest complaints I heard … Continue reading git sparse-checkout command for monorepo
Ansible example – get dictionary value
Here is a quick sample to show how Ansible can get the value from a dictionary: https://gist.github.com/jc1518/b249a6930a1dc7bfcf85181df02844dd To test it: ansible-playbook accounts.yaml -e env=dev
New EFS access control is available now
I have been using EFS for a while to store my shared application data. Generally speaking it is good in terms of scalability and performance. My concern is mostly around the security, as it only uses security group to control the access. It is a risk if it is used in a multi-tenants environments, as … Continue reading New EFS access control is available now
