Difference between revisions of "Amazon Free AWS training in Stratford"

From MyWiki
Jump to: navigation, search
 
(44 intermediate revisions by the same user not shown)
Line 1: Line 1:
−
'''Bold text''''''EDX Course'''<br>
+
'''EDX Course'''<br>
−
Week 2 - Exercise 4 <br>
+
−
<source lang="text">
+
−
Create an AWS IAM policy
+
−
In the AWS Management Console, click Services, then click IAM to open the IAM dashboard.
+
−
In the left navigation menu, click Policies.
+
−
Click Create policy.
+
−
Click the JSON tab.
+
−
In the editor textbox, completely replace the sample policy with the following.
+
−
</source>
+
−
<source lang="text">
+
−
{
+
−
    "Version": "2012-10-17",
+
−
    "Statement": [
+
−
        {
+
−
            "Sid": "Sid1",
+
−
            "Effect": "Allow",
+
−
            "Action": [
+
−
                "iam:*",
+
−
                "rds:*",
+
−
                "sns:*",
+
−
                "cloudformation:*",
+
−
                "rekognition:*",
+
−
                "ec2:*",
+
−
                "cognito-idp:*",
+
−
                "sqs:*",
+
−
                "xray:*",
+
−
                "s3:*",
+
−
                "elasticloadbalancing:*",
+
−
                "cloud9:*",
+
−
                "lambda:*",
+
−
                "tag:GetResources",
+
−
                "logs:*",
+
−
                "kms:ListKeyPolicies",
+
−
                "kms:GenerateRandom",
+
−
                "kms:ListRetirableGrants",
+
−
                "kms:GetKeyPolicy",
+
−
                "kms:ListResourceTags",
+
−
                "kms:ReEncryptFrom",
+
−
                "kms:ListGrants",
+
−
                "kms:GetParametersForImport",
+
−
                "kms:ListKeys",
+
−
                "kms:GetKeyRotationStatus",
+
−
                "kms:ListAliases",
+
−
                "kms:ReEncryptTo",
+
−
                "kms:DescribeKey"
+
−
            ],
+
−
            "Resource": "*"
+
−
        }
+
−
    ]
+
−
}
+
−
</source>
+
−
<source lang="text">
+
−
Click Review Policy.
+
−
For Name, type edXProjectPolicy
+
−
Click Create policy.
+
  
−
You have successfully created an AWS IAM policy with full access to AWS IAM, Amazon EC2, Amazon S3,
+
Week 1 - Exercise 2 <br>
−
Amazon RDS, Amazon SNS, Amazon SQS, Amazon Rekognition, AWS Lambda, Amazon Cognito, AWS Cloud9,
+
[[ Launch an Amazon EC2 instance with a user data script. ]]<br>
−
AWS X-Ray, and AWS CloudFormation. When you create IAM policies, follow the standard security
+
−
advice of granting least privilege - that is, granting only the permissions required to perform a task.
+
−
Determine what users need to do and then craft policies for them that let the users perform only those tasks.
+
−
</source>
+
−
Create IAMS User
+
−
<source lang="text">
+
−
Create an AWS IAM user, attach a policy to the user, and generate access keys.
+
  
−
In this section, you will create an AWS IAM user and attach the policy you just created to the user. You will then generate the access keys for the user. Those access keys will be used to make programmatic calls to AWS services via AWS CLI or APIs. If you are familiar with AWS IAM users, you may want to attempt to complete this section before reading the step-by-step instructions.
+
Week 1 - Exercise 3 <br>
 +
[[ Launch an AWS CloudFormation template to create VPC and subnets. ]]<br>
 +
[[ Step by step instructions ot launch a CloudFormation template ]]<br>
 +
[[ Launch an Amazon EC2 instance with a user data script in a VPC ]]<br>
 +
[[ Step by step - Launch an Amazon EC2 instance with a user data script in a VPC ]]<br>
  
−
AWS IAM user name: edXProjectUser
+
Week 2 - Exercise 4 <br>
−
Access type: Programmatic access and AWS Management Console access
+
[[ Create an AWS IAM policy ]]<br>
−
Policy: edXProjectPolicy
+
[[ Create and IAMS user ]]<br>
−
Important: Download the .csv file with the access keys after creating the user. Also, make sure to click the Send email link to get the email instructions for signing in to the AWS Management Console as edXProjectUser.
+
[[ Create an IAMS user in step by step ]]
−
 
+
[[ Create an Amazon EC2 instance and configure AWS CLI with the access keys of the AWS IAM user ]]<br>
−
Reminder! Be sure to protect your AWS account access keys like you would your credit card numbers or any other sensitive secret.
+
[[ Create an Amazon EC2 instance and configure AWS CLI step by step ]]<br>
−
 
+
[[ Connect to the instance using SSH. ]]
−
At the end of this exercise, you will not be using the access keys again. It is a security best practice to remove IAM user credentials that are not needed. After this exercise, make sure to remove the access keys only (not the AWS Console password) for the IAM user - edXProjectUser. See more IAM Best Practices.
+
−
</source>
+
−
Create an IAMS user in detail
+

Latest revision as of 15:55, 3 September 2019

EDX Course

Week 1 - Exercise 2
Launch an Amazon EC2 instance with a user data script.

Week 1 - Exercise 3
Launch an AWS CloudFormation template to create VPC and subnets.
Step by step instructions ot launch a CloudFormation template
Launch an Amazon EC2 instance with a user data script in a VPC
Step by step - Launch an Amazon EC2 instance with a user data script in a VPC

Week 2 - Exercise 4
Create an AWS IAM policy
Create and IAMS user
Create an IAMS user in step by step Create an Amazon EC2 instance and configure AWS CLI with the access keys of the AWS IAM user
Create an Amazon EC2 instance and configure AWS CLI step by step
Connect to the instance using SSH.

Retrieved from "https://wiki.twig.es/index.php?title=Amazon_Free_AWS_training_in_Stratford&oldid=4510"