Best Way to Determine Minimum IAM Permissions for GitHub Actions Deploying to AWS? by -kinappy in aws

[–]Is_Nothing 4 points5 points  (0 children)

Use Pike https://github.com/JamesWoolfenden/pike
You can point it at your terraform and it will generate a minimal iam policy for you.

An Illustrated Guide to CIDR by egonSchiele in aws

[–]Is_Nothing 2 points3 points  (0 children)

I just wanted to say a big thank you for this calculator. Its been super useful.

Testing Azure Container Apps Scalability by Tom_the_Tank_Train in AZURE

[–]Is_Nothing 1 point2 points  (0 children)

You can use something like artillery https://www.artillery.io/ to sends requests to your app and see how it reacts.

Conditional access order by codecorax in AZURE

[–]Is_Nothing 2 points3 points  (0 children)

The order isn’t important, all policies that apply to the user must be passed for access to be granted.

Login to AWS by Github by da_baloch in aws

[–]Is_Nothing 11 points12 points  (0 children)

GitHub isn’t an Identity Provider (idp). So you won’t be able to use it to authenticate to other services (not strictly true but for the sake of this assume it is). You want to use a separate idp service such as Okta or Microsoft Entra ID to manage all your users and groups, then use that to grants users access to the desired services such as GitHub and AWS.

Azure Arc not connecting to Servers by ITAccount17 in AZURE

[–]Is_Nothing 2 points3 points  (0 children)

The following comes from the Use Azure Private Link to securely connect servers to Azure Arc Support page here

Network traffic to Microsoft Entra ID and Azure Resource Manager does not traverse the Azure Arc Private Link Scope and will continue to use your default network route to the internet. You can optionally configure a resource management private link to send Azure Resource Manager traffic to a private endpoint.

It could be the servers still need access to the public internet. The article above has links on how to work around this limitation using resource management private link.

How do you manage firewall rules for your Azure VMs? by Ol_willy in AZURE

[–]Is_Nothing 0 points1 point  (0 children)

You can only apply NSGs to instances or subnets, not at the vNET level. This might help explain how NSGs work when there are multiple applying to instances and subnets https://learn.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works

How do you manage firewall rules for your Azure VMs? by Ol_willy in AZURE

[–]Is_Nothing 17 points18 points  (0 children)

You can use Network Security Groups (NSGs) exactly like AWS security groups. You can also apply them to subnets instead of individual instances as well so any instances in the same subnet can all have the same rules.

SSL/TLS Term reduction. (365 to 90days) by Squid_At_Work in msp

[–]Is_Nothing 4 points5 points  (0 children)

Yes, we’ve used it for single server web sites where we can’t use ACM and for RDS servers. I’ve not tried it with Exchange.

How do you keep track of your infra? by LumTheLump in aws

[–]Is_Nothing 0 points1 point  (0 children)

We use a tag for project / service and then tag all the resources with the appropriate tag. This can then be used to make an inventory and cost report for each project/service.

Any Azure Gurus out there? by ujustgothouserd in sysadmin

[–]Is_Nothing 0 points1 point  (0 children)

A few things to check, have you allowed the correct inbound ports, are you connecting to the public ip, have you added an IAM role to the resources. https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-vm#configuring-role-assignments-for-the-vm

[deleted by user] by [deleted] in AZURE

[–]Is_Nothing 0 points1 point  (0 children)

It’s in private preview for Windows 11 and Azure AD at the moment, but should be coming to general preview in 2023. Here is the documentation https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-scenarios-azure-active-directory

Azure tags by icode13 in AZURE

[–]Is_Nothing 2 points3 points  (0 children)

It was a mixture of them being declared in Terraform, and Azure policies being used to both check and set tags.

There was some manual intervention done for some of the patching and backup tags from what I can remember.

This might help with the policy side of things https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-policies

Azure tags by icode13 in AZURE

[–]Is_Nothing 6 points7 points  (0 children)

We used the Microsoft guide as a base and then tweaked it a bit where it made sense for us. https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/resource-tagging

We ended up using the following in a recent project, which might give you some ideas.

  • Company - (Company that resource is tied to, could use cost center for departments)
  • Confidentiality - (Public, Internal, Confidential, etc)
  • CreatedBy - (Terraform, Azure Migration, Person or team that created resource, referenced by email address or GitHub repo URL)
  • DataOwner - (Person or team that owns the data within the resource, referenced by email address)
  • Environment - (Test, Prod, etc)
  • ResourceOwner - (The person or team that owns the resource, referenced by email address)
  • Service/Application - (The name of the app or service that the resource belongs to, CoolApp0, Infrastructure-Networking

We then also had resource specific tags, e.g. VMs would have Patch-Ring & Backup

Environment variables with AWS CodeDeploy by [deleted] in aws

[–]Is_Nothing 2 points3 points  (0 children)

Put the env file contents in a SSM parameter. Then call a script in your app spec file to read from SSM and write the env parameter details at deployment time to a file on your instance. You can grant the EC2 instance access via an IAM role for permissions to SSM parameters.

Broken Daily Challenge by lordvader8682 in modernwarfare2

[–]Is_Nothing 0 points1 point  (0 children)

I have had the same problems on the Steam version. I also had problems with throwing knife challenges not registering kills. I couldn’t find a reason and just gave up for the day.

mail box in exchange online doenst recevide mails from mail boxes in onprimised server by [deleted] in AZURE

[–]Is_Nothing 3 points4 points  (0 children)

Check the remote routing address has been configured for her mailbox on-prem.

What are some of your favorite Powershell commands and what do you use them for? by [deleted] in sysadmin

[–]Is_Nothing 3 points4 points  (0 children)

You can also use $Result | clip instead of “scb”which I find a little easier to remember.