← Blog

Writing archive

Blog page 28

Older notes, lessons, and series entries from the growing technical library.

Archive

Posts page 28

Showing 1,297-1,344 of 1,446

2 min readSeries: AWS from Zero · Part 150

EC2: Describe aggregate ID format from the CLI

Use the AWS CLI to describe aggregate ID format in EC2, identify required inputs, and inspect the modeled response.

#aws#cli#ec2#compute
2 min readSeries: AWS from Zero · Part 149

EC2: Describe addresses attribute from the CLI

Use the AWS CLI to describe addresses attribute in EC2, identify required inputs, and inspect the modeled response.

#aws#cli#ec2#compute
2 min readSeries: AWS from Zero · Part 148

EC2: Describe addresses from the CLI

Use the AWS CLI to describe addresses in EC2, identify required inputs, and inspect the modeled response.

#aws#cli#ec2#compute
2 min readSeries: AWS from Zero · Part 147

EC2: Describe address transfers from the CLI

Use the AWS CLI to describe address transfers in EC2, identify required inputs, and inspect the modeled response.

#aws#cli#ec2#compute
2 min readSeries: AWS from Zero · Part 146

EC2: Describe account attributes from the CLI

Use the AWS CLI to describe account attributes in EC2, identify required inputs, and inspect the modeled response.

#aws#cli#ec2#compute
2 min readSeries: AWS from Zero · Part 145

IAM Advanced: Get instance profile from the CLI

Use the AWS CLI to get instance profile in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 144

IAM Advanced: Get group policy from the CLI

Use the AWS CLI to get group policy in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 143

IAM Advanced: Change password from the CLI

Use the AWS CLI to change password in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
3 min readSeries: AWS from Zero · Part 142

IAM Advanced: Delete account password policy from the CLI

Use the AWS CLI to delete account password policy in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 141

IAM Advanced: Delete account alias from the CLI

Use the AWS CLI to delete account alias in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 140

IAM Advanced: Delete access key from the CLI

Use the AWS CLI to delete access key in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
3 min readSeries: AWS from Zero · Part 139

IAM Advanced: Tag instance profile from the CLI

Use the AWS CLI to tag instance profile in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 138

IAM Advanced: Attach group policy from the CLI

Use the AWS CLI to attach group policy in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 137

IAM Advanced: Add role to instance profile from the CLI

Use the AWS CLI to add role to instance profile in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
3 min readSeries: AWS from Zero · Part 136

IAM Advanced: Add client ID to open ID connect provider from the CLI

Use the AWS CLI to add client ID to open ID connect provider in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 135

IAM Advanced: Create login profile from the CLI

Use the AWS CLI to create login profile in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 134

IAM Advanced: Create instance profile from the CLI

Use the AWS CLI to create instance profile in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 133

IAM Advanced: Create account alias from the CLI

Use the AWS CLI to create account alias in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 132

IAM Advanced: Get group from the CLI

Use the AWS CLI to get group in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 131

IAM Advanced: Get context keys for principal policy from the CLI

Use the AWS CLI to get context keys for principal policy in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 130

IAM Advanced: Get context keys for custom policy from the CLI

Use the AWS CLI to get context keys for custom policy in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 129

IAM Advanced: Get account summary from the CLI

Use the AWS CLI to get account summary in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 128

IAM Advanced: Get account password policy from the CLI

Use the AWS CLI to get account password policy in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 127

IAM Advanced: Get account authorization details from the CLI

Use the AWS CLI to get account authorization details in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 126

IAM Advanced: Get access key last used from the CLI

Use the AWS CLI to get access key last used in IAM Advanced, identify required inputs, and inspect the modeled response.

#aws#cli#iam-advanced#security#identity
2 min readSeries: AWS from Zero · Part 125

Clean up IAM users groups roles and policies

Remove the AWS from Zero IAM demo resources in the dependency order IAM requires.

#aws#cli#iam#security#identity#cleanup
2 min readSeries: AWS from Zero · Part 124

Download and inspect the IAM credential report

Decode the IAM credential report CSV and query important security columns.

#aws#cli#iam#security#identity#audit
2 min readSeries: AWS from Zero · Part 123

Generate an IAM credential report

Request an account-wide IAM credential report and wait until generation completes.

#aws#cli#iam#security#identity#audit
2 min readSeries: AWS from Zero · Part 122

Rotate an IAM access key with overlap

Create a replacement key, test it, deactivate the old key, and finish rotation safely.

#aws#cli#iam#security#identity#credentials
2 min readSeries: AWS from Zero · Part 121

Deactivate and reactivate an IAM access key

Change one access key status without deleting the credential immediately.

#aws#cli#iam#security#identity#credentials
2 min readSeries: AWS from Zero · Part 120

List IAM access key metadata

Inventory an IAM user's access key IDs, status values, and creation dates without exposing secrets.

#aws#cli#iam#security#identity#credentials
2 min readSeries: AWS from Zero · Part 119

Create an IAM user access key carefully

Create one long-term IAM user access key and handle the secret as a one-time output.

#aws#cli#iam#security#identity#credentials
2 min readSeries: AWS from Zero · Part 118

Name and limit an STS role session

Set role session name, source identity, and duration for traceable temporary access.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 117

Configure an automatic assume-role CLI profile

Create a named AWS CLI profile that assumes a role and refreshes temporary credentials automatically.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 116

Use STS temporary credentials in shell variables

Load assumed-role credentials into environment variables, prove identity, and unset them.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 115

Assume an IAM role with STS

Request temporary credentials for an IAM role and inspect the assumed-role identity.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 114

List every policy on an IAM role

Audit both managed policy attachments and inline policy names for a role.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 113

Attach a managed policy to an IAM role

Grant a role read-only S3 account listing permission through a customer managed policy.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 112

Update an IAM role trust policy

Replace a role trust policy with a narrower named-user principal.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 111

Inspect an IAM role and its trust policy

Read role metadata and the assume-role policy document from the CLI.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 110

Create an IAM role with a trust policy

Create a role whose trust policy allows principals in the current account to request assumption.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 109

Simulate an IAM principal policy

Ask IAM how a named user policy set evaluates selected actions and resources.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 108

Prove that explicit IAM Deny wins

Use the IAM policy simulator to compare an Allow with a matching explicit Deny.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 107

Restrict an IAM policy by source IP

Add an aws:SourceIp condition to a policy and validate the document.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 106

Understand IAM Resource ARNs

Match IAM actions to exact bucket, object, role, and policy resource ARN shapes.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 105

Understand IAM Action wildcards

Compare one exact IAM action with narrow and broad wildcard action patterns.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 104

Write a least-privilege S3 read policy

Create an IAM policy that lists one bucket prefix and reads only objects under that prefix.

#aws#cli#iam#security#identity
2 min readSeries: AWS from Zero · Part 103

Create and remove an inline IAM user policy

Put, read, and delete a small policy embedded directly in one IAM user.

#aws#cli#iam#security#identity