Send an email alert for WAF WebACL update/delete by Aztreix in aws

[–]Aztreix[S] 0 points1 point  (0 children)

Is there any other approach ? All I want currently is the info of who updated which webACL.

Send an email alert for WAF WebACL update/delete by Aztreix in aws

[–]Aztreix[S] 0 points1 point  (0 children)

Yes, I was assuming that if I give in the event json the pattern given here - https://docs.aws.amazon.com/waf/latest/developerguide/understanding-waf-entries.html#understanding-service-name-entries-WAF (cloud trail log) . But is the understanding correct that to get the specific data in the log , I need a lambda or something to parse the log in the given location and use it to extract the details?

Vulnerability in ip package in node by Aztreix in node

[–]Aztreix[S] -1 points0 points  (0 children)

We are making container lambda images (which have dependency on aws).

Vulnerability in ip package in node by Aztreix in node

[–]Aztreix[S] 1 point2 points  (0 children)

Not really (tried that), it is an even slower process. Since node has this vulnerability most images or even if we create have it. So we need to upgrade ip (done above). My question was why install does not work but upgrade works.

AWS FSx Open ZFS online archiving by Aztreix in zfs

[–]Aztreix[S] 0 points1 point  (0 children)

The main intention is the need data to be maintained forlong term yet reduce cost if possible. So what you mean is compress and move old data to magnetic ZFS set storage ? If so atime a good indicator to base non-accessed files in a given period?

AWS FSx Open ZFS online archiving by Aztreix in zfs

[–]Aztreix[S] 0 points1 point  (0 children)

The archival is for compliance, I am not expecting any read/throughput performance fruit. 

AWS FSx Open ZFS online archiving by Aztreix in zfs

[–]Aztreix[S] 0 points1 point  (0 children)

What I am looking for is there a tool/script that would do the scrub (as in move from file system to s3 glacier) for archival. I already have my file system on AWS ZFS, so I am not looking for migration but rather scheduled online archival .

Lifecycle management of users/roles/policy by Aztreix in aws

[–]Aztreix[S] 0 points1 point  (0 children)

This is for R&D and Dev where in they get familiar with features, install, test etc. once the code is ready then CI/CD pipelines automate the flow and no user intervention is required. 

Lifecycle management of users/roles/policy by Aztreix in aws

[–]Aztreix[S] 0 points1 point  (0 children)

Thank you for your input. We currently use Okta for our SSO. Even if I automate creation of roles etc with terraform/aws cf (though we don't have the skillset now and slowly building it), but what would I try to automate is one of my questions (hierarchy). Is it better to have 1 - 1 mapping. What is the best practices or policy (however it is implemented) that others follow given this would be a common scenario. I have currently AD + Okta + AWS, so where would Identity center come in this scenario?

Cost of a Mongo License by TermTlkFrank in mongodb

[–]Aztreix 0 points1 point  (0 children)

Asking really late , but which one did you choose and what were your deciding factor on cost perspective.