41–50 of 109 posts
What tool do people here use to search across AWS accounts? Disclaimer: we are building a search engine to search for resources across “workspaces”. In AWS, this unit is the Account. In GCP, this unit is the Project.
> If you wish to provide access via SSH… Don’t do this. I can’t think of a single reason that anyone ever needs to SSH directly into a server on AWS in 2022. Use System Manager Session Manager https://docs.aws.amazon.com/systems-manager/latest/userguide... Short explanation: it allows you to access a Linux instance via SSH using SSM as an IAM controlled proxy or use RDP for Windows. You don’t need ingress access to y…
What's this like on Google Cloud? Would you create a project to get into other projects and would that achieve most of what this achieves? And would you use a GSuite address so you don't log into the console just by logging into the email?
Everything in GCP is built atop the Google Auth system and tied to a GSuite domain. It’s Org->Folder->Project hierarchy is very similar to AWS Orgs. However, it’s far easier from there. IAM is tied to your gsuite email, and service accounts are also email addresses. One never needs to login with different creds to access another project. You just use your Google login or activate a service account. Projects are a rea…
What tool do people here use to search across AWS accounts? Disclaimer: we are building a search engine to search for resources across “workspaces”. In AWS, this unit is the Account. In GCP, this unit is the Project.
> If you wish to provide access via SSH… Don’t do this. I can’t think of a single reason that anyone ever needs to SSH directly into a server on AWS in 2022. Use System Manager Session Manager https://docs.aws.amazon.com/systems-manager/latest/userguide... Short explanation: it allows you to access a Linux instance via SSH using SSM as an IAM controlled proxy or use RDP for Windows. You don’t need ingress access to y…
Earlier quoted context omitted.
It seems that with isolation between projects on gcloud the number of separate accounts needed is less, which is good because it's also harder and more expensive to create multiple accounts. If gsuite is used very carefully, 1 is enough, but I think 2 would be better for most.
I'm assuming you're saying a dedicated account for Google Workspace (GSuite) and a separate account for anything GCP?
What tool do people here use to search across AWS accounts? Disclaimer: we are building a search engine to search for resources across “workspaces”. In AWS, this unit is the Account. In GCP, this unit is the Project.
That would be a handy tool.
They’re great, check them out.
We couldn’t build from source the last time we tried, but it is open source. We just made a decision today to open source our UI, so let us know if you’re interested
> If you wish to provide access via SSH… Don’t do this. I can’t think of a single reason that anyone ever needs to SSH directly into a server on AWS in 2022. Use System Manager Session Manager https://docs.aws.amazon.com/systems-manager/latest/userguide... Short explanation: it allows you to access a Linux instance via SSH using SSM as an IAM controlled proxy or use RDP for Windows. You don’t need ingress access to y…
A lot of us are busy solving business needs in smaller companies/startups and don't have the time nor expertise to learn every single AWS service and come up with a justification for utilizing it.
> If you wish to provide access via SSH… Don’t do this. I can’t think of a single reason that anyone ever needs to SSH directly into a server on AWS in 2022. Use System Manager Session Manager https://docs.aws.amazon.com/systems-manager/latest/userguide... Short explanation: it allows you to access a Linux instance via SSH using SSM as an IAM controlled proxy or use RDP for Windows. You don’t need ingress access to y…
Last I recall, SSMSM gives users root or ec2-user access on the instance? Or does it create new users?
https://medium.com/@unruly_mood/aws-ssm-sessions-root-non-ro...