Month: September 2022

[Assume Role/KMS] Using Assume Role to make the other AWS Account access all KMS that/this AWS Account.

Posted on By nim No Comments on [Assume Role/KMS] Using Assume Role to make the other AWS Account access all KMS that/this AWS Account.
[Assume Role/KMS] Using Assume Role to make the other AWS Account access all KMS that/this AWS Account.

Như mình cũng đã hướng dẫn các bạn cách setup để access vào KMS của AWS account khác.https://nimtechnology.com/2022/09/04/aws-encrypting-your-data-easily-via-kms-on-aws/#45_KMS_Other_account Nhưng nếu sếp bạn muốn AWS Account A access tạo bộ KMS của AWS Account Bthì chúng ta phải sử dụng Assume Role. 1) Create Assume Role on Destination Account. 1.1) Create Policy Đầu tiên cần tạo…

Read More “[Assume Role/KMS] Using Assume Role to make the other AWS Account access all KMS that/this AWS Account.” »

AWS - Amazon Web Service

[AWS] Encrypting data when stored in S3

Posted on By nim No Comments on [AWS] Encrypting data when stored in S3
[AWS] Encrypting data when stored in S3

Bạn có 1 S3 và bạn muốn encyption data khi bạn quang file lên S3 đó. 1) Amazon S3 – customer-provided encryption key (SSE-C) –sse-c-key: là string gồm 32 kí tự https://kungfutech.edu.vn/bai-viet/aws/s3-encryption#s3-encryption-trong-awsBạn có thể đọc thêm bài này, vì chúng ta còn 2 kiểu encrypt khác

AWS - Amazon Web Service

[Aws] Access S3 or bucket from other account AWS

Posted on By nim No Comments on [Aws] Access S3 or bucket from other account AWS
[Aws] Access S3 or bucket from other account AWS

Bạn muốn workload ở Account B access vào s3 hay bitbucket của account A Giờ mình tiền hành run command và kiểm tra access S3 từ other account nếu bạn gặp lỗi: fatal error: An error occurred (403) when calling the HeadObject operation: Forbidden thi bạn kiểm tra lại Resource đã được cấu hình chính…

Read More “[Aws] Access S3 or bucket from other account AWS” »

AWS - Amazon Web Service

[Teamcity] How does TeamCity login and pull/push images to the private Docker HUB

Posted on By nim No Comments on [Teamcity] How does TeamCity login and pull/push images to the private Docker HUB
[Teamcity] How does TeamCity login and pull/push images to the private Docker HUB

Bài viết hướng dẫn cấu hình teamcity để login, pull, push image mới private docker. 1) Create connection to integrate the private Docker HUB 1.1) root project 1.2) Child project Hoặc cấu hình trong các project con 2) Configure auto-login with Docker hub in Build configuration. 3) Demo build step and recheck result 4) Teamcity…

Read More “[Teamcity] How does TeamCity login and pull/push images to the private Docker HUB” »

TeamCity

[DevOpsSec] What tools does DevopsSec need to secure system/infrastructure

Posted on By nim No Comments on [DevOpsSec] What tools does DevopsSec need to secure system/infrastructure
[DevOpsSec] What tools does DevopsSec need to secure system/infrastructure

Sau nhiều năm phát triển thì devops thì hiện giờ thì trường đang cần 1 title mới đó là devops Security hay còn gọi là DevopSec.Về bản chất bạn sẽ sài tool để scan anything và ra xoát anything có CVE nào ko? Mình thấy được một repo có thể hữu ích. https://github.com/sottlmarek/DevSecOps Anh khảm…

Read More “[DevOpsSec] What tools does DevopsSec need to secure system/infrastructure” »

Kubernetes & Container

[Elasticsearch] reason=Validation Failed: 1: this action would add [10] total shards, but this cluster currently has [1000]/[1000] maximum shards open;]]]

Posted on By nim No Comments on [Elasticsearch] reason=Validation Failed: 1: this action would add [10] total shards, but this cluster currently has [1000]/[1000] maximum shards open;]]]
[Elasticsearch] reason=Validation Failed: 1: this action would add [10] total shards, but this cluster currently has [1000]/[1000] maximum shards open;]]]

Nếu bạn bị lỗibut this cluster currently has [1000]/[1000] maximum shards open tham khảo link bên dướihttps://www.elastic.co/guide/en/elasticsearch/reference/current/size-your-shards.html#_this_action_would_add_x_total_shards_but_this_cluster_currently_has_yz_maximum_shards_open

ELK