The Cloud Conformity VPC Endpoint Exposed check brought my attention to this one, as I think they have a bug in this check: https://www.cloudconformity.com/knowledge-base/aws/VPC/endpoint-exposed.html There are two types of VPC endpoint: Interface and Gateway (S3, DynamoDB). What are suggested in the above link only applies to the Interface endpoint, but not the Gateway endpoint. As … Continue reading Endpoint policies for gateway endpoints
Author: Jackie Chen
Confluence system plugins that do not support cluster environment
If you are doing the following Confluence migration, you have to be aware of that some system plugins do not support cluster environment. Confluence server to Confluence data center clusterConfluence data centre non-clustered (single node) to Confluence data centre clustered (multiple nodes) A simple example is the 'Confluence Usage Stats' which provides the macros like … Continue reading Confluence system plugins that do not support cluster environment
Use Git Workflow to Manage Multiple AWS Environments
Managing multiple AWS environments (sandbox/dev/uat/stage/prod) is challenging, as it is hard to keep track of the current status of each environment. For example, user A deploys his feature branch into dev to test his code, then later user B deploys his hotfix branch into dev to test his code. This can cause many issues: User … Continue reading Use Git Workflow to Manage Multiple AWS Environments
AWS IAM Role Chaining
Question: Using the credentials for one IAM role 1 to assume a different IAM role 2, what is the maximum duration of the new credentials? A. Same as Role 1B. Same as Role 2C. Same as the role (1 or 2) which has longer maximum duration D. Same as the role (1 or 2) which … Continue reading AWS IAM Role Chaining
Automate Atlassian Add-on Management Part Two
Continue with Part One, let me list some requirements that I would like to keep in the scope: Must Have Plugins metadata (application, version, desired_state...) is source controlled.Can query plugins information (version, license, expiry date...) from servers.Can query plugins information from Atlassian Market place.Can enable/disable plugins.Can install/uninstall plugins.Can update plugins.Can check compatibility. Should Have Can … Continue reading Automate Atlassian Add-on Management Part Two
Jackie Chen's IT Workshop 