AWS(148)
-
Security Policy (ELB, Cloudfront)
- 개요 기본적인 보안 가이드를 준수하려면 필수 - Cloudfront - Security policy (2023년 10월 기준) TLSv1.2_2021 - ELB - Security policy (2023년 10월 기준) ALB : ELBSecurityPolicy-TLS13-1-2-2021-06 NLB : ELBSecurityPolicy-TLS13-1-2-2021-06* - reference https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html?icmpid=docs_cf_help_panel#DownloadDistValuesOriginSSLProtocols https://d..
2023.05.15 -
max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
- 현상 ERROR: [1] bootstrap checks failed [1]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144] - 해결 sysctl -a | grep vm.max_map_count vm.max_map_count = 262144
2023.05.11 -
ecs tag propagation
- 개요 AWS resouce tag관리를 위해 Task Definition이나 Service의 Tag를 Task도 상속 - 방법 (AWS Web Console) ECS Service "enableECSManagedTags": "True" "propagateTags": "Task Definition" "Tags xxxx" - 방법 (CLI) aws ecs describe-services --services --cluster --region --query 'services[*].propagateTags' --output text aws ecs describe-services --services --cluster --region --query 'services[*].enableECSManagedTags' -..
2023.04.04 -
AWSCompromisedKeyQuarantineV2
- 개요 AWS 사용중에 Hacking 의심이나 외부 노출이 된 계정에 AWS에서 자동으로 policy를 할당해서 추가 피해를 막고 고객 대응을 유도하는 권한 - 내용 Denies access to certain actions, applied by the AWS team in the event that an IAM user's credentials have been compromised or exposed publicly. Do NOT remove this policy. Instead, please follow the instructions specified in the support case created for you regarding this event. { "Version": "2012-10-17..
2023.02.14 -
AWS S3 bucket arn 추출하기
- 개요 ARN은 AWS resource의 고유 정보로 많은 CLI에서 유용하게 사용되나, S3 bucket ARN은 CLI를 통해 추출이 불가하다. - S3 bucket ARN 추출하는 법 aws s3 ls | awk '{print $3}' | sed 's/^/arn:aws:s3:::/' - ChatGPT (X)
2023.01.31 -
User-defined cost allocation tags
- User-defined cost allocation tags 개인 생성한 Tag를 Cost allocation tags로 사용하기 - 방법 AWS Billing Console Cost allocation tags User-defined cost allocation tags에서 원하는 Tag 선택 (사전에 미리 생성해놔야함) Activate - 참고 tag active되는데 최대 24시간 소요 active 된 이후 비용부터 확인 가능 - reference https://docs.aws.amazon.com/ko_kr/awsaccountbilling/latest/aboutv2/activate-built-in-tags.html https://docs.aws.amazon.com/awsaccountbilling..
2023.01.30 -
AWS CloudTrail CLI example(delete ECS service event)
- CLI aws cloudtrail lookup-events --lookup-attributes AttributeKey=,AttributeValue= - attribute AccessKeyId EventId EventName EventSource ReadOnly ResourceName ResourceType Username - delete ECS service event (example) aws cloudtrail lookup-events --lookup-attributes AttributeKey=EventName,AttributeValue=DeleteService --query Events[].Resources[].ResourceName - reference https://docs.aws.amazon..
2023.01.30 -
Cloudformation Stack ECS-Console-V2-Service-xxxxxxxx ECS-Console-V2-Cluster-xxxxxxxx
- 개요 AWS console에서 ECS관련 리소스 생성할 경우 cloudformation에 동일한 stack이 생성된다. ECS-Console-V2-Service-xxxxxxxx ECS-Console-V2-TaskDefinition-xxxxxxxx - Document AWS CloudFormation stacks The following behavior applies to task definitions created in the new console before January 12, 2023. When you create a task definition, the Amazon ECS console automatically creates a CloudFormation stack that has a name..
2023.01.27 -
lambda 413 error
- 상황 lambda 실행 - 에러 [ERROR] [1674721589583] LAMBDA_RUNTIME Failed to post handler success response. Http response code: 413. - 원인 too large payload 6 MB each for request and response (synchronous) 256 KB (asynchronous) - reference https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-limits.html
2023.01.27 -
AWS EC2 Key pairs tagging
- 방법1 dummy로 key pair생성하면서 tag를 생성하여 해당 tag key 사용 - 방법2 Actions에서 Manage tags
2023.01.25