/etc/sudoers (Linux) or to the Administrators group (Windows) every time the agent starts. This ssm-user is the default OS user when a Session Manager session is started, and the password for this user is reset on every session. You can change the permissions by moving ssm-user to a less-privileged group or by changing the sudoers file. The ssm-user account is not removed from the system when SSM Agent is uninstalled.wget -q -O - https://pkg.jenkins.io/debian/jenkins-ci.org.key | sudo apt-key add -
sudo sh -c 'echo deb http://pkg.jenkins.io/debian-stable binary/ > /etc/apt/sources.list.d/jenkins.list'
sudo apt-get update
sudo apt-get install jenkinsimport boto3
# Enter the region your instances are in. Include only the region without specifying Availability Zone; e.g.; 'us-east-1'
region = 'XX-XXXXX-X'
# Enter your instances here: ex. ['X-XXXXXXXX', 'X-XXXXXXXX']
instances = ['X-XXXXXXXX']
def lambda_handler(event, context):
ec2 = boto3.client('ec2', region_name=region)
ec2.start_instances(InstanceIds=instances)
print 'started your instances: ' + str(instances)
boto3
# Enter the region your instances are in. Include only the region without specifying Availability Zone; e.g., 'us-east-1'
region = 'XX-XXXXX-X'
# Enter your instances here: ex. ['X-XXXXXXXX', 'X-XXXXXXXX']
instances = ['X-XXXXXXXX']
def lambda_handler(event, context):
ec2 = boto3.client('ec2', region_name=region)
ec2.stop_instances(InstanceIds=instances)
print 'stopped your instances: ' + str(instances)
php, and mysql packages are installed.httpd service is started and turned on via chkconfig.ec2-user is added to that group.#!/bin/bash yum update -y service httpd start chkconfig httpd oncontect reference https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/user-data.html#user-data-shell-scripts
# terraform
usage: terraform [--version] [--help] <command> [args] |
export AWS_ACCESS_KEY_ID=(your access key id)
export AWS_SECRET_ACCESS_KEY=(your secret access key)
|
provider "aws" {
region = "eu-west-1" } |
resource "aws_instance" "myfirstec2" {
ami = "ami-d834aba1" instance_type = "t2.micro" } |
# terraform plan
Refreshing Terraform state in-memory prior to plan... The refreshed state will be used to calculate this plan, but will not be persisted to local or remote state storage. ------------------------------------------------------------------------ An execution plan has been generated and is shown below. Resource actions are indicated with the following symbols: + create Terraform will perform the following actions: + aws_instance.myfirstec2 id: <computed> ami: "ami-d834aba1" associate_public_ip_address: <computed> availability_zone: <computed> ebs_block_device.#: <computed> ephemeral_block_device.#: <computed> instance_state: <computed> instance_type: "t2.micro" ipv6_address_count: <computed> ipv6_addresses.#: <computed> key_name: <computed> network_interface.#: <computed> network_interface_id: <computed> placement_group: <computed> primary_network_interface_id: <computed> private_dns: <computed> private_ip: <computed> public_dns: <computed> public_ip: <computed> root_block_device.#: <computed> security_groups.#: <computed> source_dest_check: "true" subnet_id: <computed> tenancy: <computed> volume_tags.%: <computed> vpc_security_group_ids.#: <computed> Plan: 1 to add, 0 to change, 0 to destroy. ------------------------------------------------------------------------ |
# terraform apply
Terraform will perform the following actions: + aws_instance.myfirstec2 id: <computed> ami: "ami-d834aba1" associate_public_ip_address: <computed> availability_zone: <computed> ebs_block_device.#: <computed> ephemeral_block_device.#: <computed> instance_state: <computed> instance_type: "t2.micro" ipv6_address_count: <computed> ipv6_addresses.#: <computed> key_name: <computed> network_interface.#: <computed> network_interface_id: <computed> placement_group: <computed> primary_network_interface_id: <computed> private_dns: <computed> private_ip: <computed> public_dns: <computed> public_ip: <computed> root_block_device.#: <computed> security_groups.#: <computed> source_dest_check: "true" subnet_id: <computed> tenancy: <computed> volume_tags.%: <computed> vpc_security_group_ids.#: <computed> Plan: 1 to add, 0 to change, 0 to destroy. |
resource "aws_instance" "myfirstec2" {
ami = "ami-d834aba1" instance_type = "t2.micro" tags { Name = "terraform-myfirstec2" } } |
# terraform plan
Refreshing Terraform statein-memory prior to plan... The refreshed state will be used to calculatethis plan, but will not be persisted to localor remote state storage. aws_instance.myfirstec2: Refreshing state... (ID: i-00c8bbb1c554945e7) ------------------------------------------------------------------------ An execution plan has been generatedand is shown below. Resource actions are indicated with the following symbols: ~ updatein-place Terraform will perform the following actions: ~ aws_instance.myfirstec2 tags.%: "0" => "1" tags.Name:"" => "terraform-myfirstec2" Plan:0 to add, 1 to change, 0 to destroy. ------------------------------------------------------------------------ |
#!/bin/bash
Yum install httpd echo "Welcome to My First EC2 Instance Web Server" > /var/www/html/index.html Service httpd start |
resource "aws_instance" "myfirstec2" {
ami = "ami-d834aba1" instance_type = "t2.micro user_data = <<-EOF #!/bin/bash yum install httpd echo "Welcome to My First EC2 Instance Web
Server" > /var/www/html/index.html
service httpd start
EOF tags { Name = "terraform-myfirstec2" } } |
resource "aws_security_group" "instance" {
name = "terraform-example-instance" ingress { from_port = 80 to_port = 80 protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] } } |
variable "web_server_port" {
description = "The port the server will use for HTTP requests" } |
from_port = "${var.web_server_port}"
to_port ="${var.web_server_port}" |
# terraform plan
var.web_server_port
The port the server will use for HTTP requests
Enter a value: 80
|
# terraform plan -var web_server_port="80"
|
variable "web_server_port" {
description = "The port the server will use for HTTP requests" default = 80 } |
vpc_security_group_ids = ["${aws_security_group.instance.id}"]
|
# terraform apply
var.web_server_port Port the server will use for HTTP requests serve Enter a value: 80 aws_instance.myfirstec2: Refreshing state... (ID: i-00c8bbb1c554945e7) An execution plan has been generated and is shown below. Resource actions are indicated with the following symbols: + create Terraform will perform the following actions: + aws_instance.myfirstec2 id: <computed> ami: "ami-d834aba1" associate_public_ip_address: <computed> availability_zone: <computed> ebs_block_device.#: <computed> ephemeral_block_device.#: <computed> instance_state: <computed> instance_type: "t2.micro" ipv6_address_count: <computed> ipv6_addresses.#: <computed> key_name: <computed> network_interface.#: <computed> network_interface_id: <computed> placement_group: <computed> primary_network_interface_id: <computed> private_dns: <computed> private_ip: <computed> public_dns: <computed> public_ip: <computed> root_block_device.#: <computed> security_groups.#: <computed> source_dest_check: "true" subnet_id: <computed> tags.%: "1" tags.Name: "terraform-myfirstec2" tenancy: <computed> user_data: "e24dcf69cef29301fdb38a432284c77f963990bb" volume_tags.%: <computed> vpc_security_group_ids.#: <computed> + aws_security_group.instance id: <computed> description: "Managed by Terraform" egress.#: <computed> ingress.#: "1" ingress.2214680975.cidr_blocks.#: "1" ingress.2214680975.cidr_blocks.0: "0.0.0.0/0" ingress.2214680975.description: "" ingress.2214680975.from_port: "80" ingress.2214680975.ipv6_cidr_blocks.#: "0" ingress.2214680975.protocol: "tcp" ingress.2214680975.security_groups.#: "0" ingress.2214680975.self: "false" ingress.2214680975.to_port: "80" name: "terraform-security-group" owner_id: <computed> revoke_rules_on_delete: "false" vpc_id: <computed> Plan:2 to add, 0 to change, 0 to destroy. |
# wget http://34.217.9.203/index.html
--2018-01-31 11:08:27-- http://34.217.9.203/index.html Connecting to34.217.9.203:80... connected. HTTP request sent, awaiting response...200 OKLength: 44 [text/html] Saving to:'index.html' index.html 100%[===================>] 44 --.-KB/s in 0s 2018-01-31 11:08:27 (9.65 MB/s) - 'index.html' saved [44/44] |
output "public_ip" {
value = "${aws_instance.myfirstec2.public_ip}" } |
# terraform applyaws_security_group.instance: Refreshing state... (ID: sg-db91dba1)
aws_instance.example: Refreshing state... (ID: i-61744350) Apply complete! Resources: 0 added, 0 changed, 0 destroyed.Outputs: public_ip = 34.217.9.203 |
In the realm of cyber security, ethical hacking plays a crucial role in identifying and addressing vulnerabilities. One of the areas where e...
