{"id":92261,"date":"2020-08-25T07:42:16","date_gmt":"2020-08-25T05:42:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/aws-cli-cherez-mfa"},"modified":"2020-08-25T07:42:16","modified_gmt":"2020-08-25T05:42:16","slug":"aws-cli-cherez-mfa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/administrirovanie\/aws-cli-cherez-mfa","title":{"rendered":"AWS CLI \u00fcber MFA","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hier folgt eine Anleitung zur Einrichtung von AWS MFA sowie zur anschlie\u00dfenden Installation und Konfiguration der AWS CLI.<\/p>\n

<\/p>\n

Leider hat mich dieses zwingende Verfahren einen halben Arbeitstag gekostet. Um anderen unsicheren AWS-Nutzern \ud83d\ude09 wie mir selbst, keine wertvolle Zeit mit Banalit\u00e4ten zu stehlen, habe ich beschlossen, eine Anleitung zu erstellen.<\/p>\n

<\/a><\/noindex><\/p>\n

Selbst f\u00fcr ein Sandbox-Konto ist die Einrichtung MFA<\/a><\/noindex> in der Regel eine Pflichtanforderung. Bei uns ist das so.<\/p>\n

<\/p>\n

Einrichtung von MFA<\/h2>\n

<\/p>\n

    \n
  1. Installieren Sie kompatible mobile Anwendung<\/a><\/noindex><\/li>\n
  2. Gehen Sie zu AWS-Konsole<\/a><\/noindex><\/li>\n
  3. Meine Sicherheitsanmeldeinformationen<\/a><\/noindex> -> MFA-Ger\u00e4t zuweisen
    \n\"AWS<\/li>\n
  4. Virtuelles MFA-Ger\u00e4t
    \n\"AWS<\/li>\n
  5. Befolgen Sie die Anweisungen auf dem Bildschirm
    \n\"AWS
    \n\"AWS<\/li>\n
  6. Das virtuelle Ger\u00e4t ist bereit
    \n\"AWS<\/li>\n<\/ol>\n

    <\/p>\n

    Installation der AWS CLI<\/h2>\n

    <\/p>\n

    https:\/\/docs.aws.amazon.com\/cli\/latest\/userguide\/install-cliv2.html<\/a><\/noindex><\/p>\n

    <\/p>\n

    Einrichtung eines benannten Profils<\/h2>\n

    <\/p>\n

    https:\/\/docs.aws.amazon.com\/cli\/latest\/userguide\/cli-configure-profiles.html<\/a><\/noindex><\/p>\n

    <\/p>\n

      \n
    1. Meine Sicherheitsanmeldeinformationen<\/a><\/noindex> -> Zugangsschl\u00fcssel erstellen
      \n\"AWS<\/li>\n
    2. Kopieren Sie den Schl\u00fcssel in die Zwischenablage. Er wird im n\u00e4chsten Schritt ben\u00f6tigt.<\/li>\n
    3. $ aws configure --profile<\/code><\/li>\n<\/ol>\n

      <\/p>\n

      AWS CLI \u00fcber MFA<\/h2>\n

      <\/p>\n

        \n
      1. Kopieren Sie die ARN des virtuellen Ger\u00e4ts
        \n\"AWS<\/li>\n
      2. aws sts get-session-token --profile --serial-number --token-code<\/code>
        \nDas Einmalpasswort muss aus der zuvor konfigurierten mobilen Anwendung entnommen werden.<\/li>\n
      3. Der Befehl gibt JSON zur\u00fcck, deren separate Felder in die entsprechenden Umgebungsvariablen AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN eingef\u00fcgt werden m\u00fcssen.<\/li>\n<\/ol>\n

        <\/p>\n

        Ich habe beschlossen, das \u00fcber ~\/.bash_profile<\/code>
        \nF\u00fcr die Analyse von JSON ben\u00f6tigt dieses Skript         jq<\/a><\/noindex>.<\/p>\n

        <\/p>\n

        #!\/usr\/bin\/env bash\n\naws_login() {\n    session=$(aws sts get-session-token "$@")\n    echo "${session}"\n    AWS_ACCESS_KEY_ID=$(echo "${session}" | jq -r '.Credentials.AccessKeyId')\n    export AWS_ACCESS_KEY_ID\n    AWS_SECRET_ACCESS_KEY=$(echo "${session}" | jq -r '.Credentials.SecretAccessKey')\n    export AWS_SECRET_ACCESS_KEY\n    AWS_SESSION_TOKEN=$(echo "${session}" | jq -r '.Credentials.SessionToken')\n    export AWS_SESSION_TOKEN\n}\n\nalias aws-login-dev='aws_login --profile <\u0438\u043c\u044f dev \u043f\u0440\u043e\u0444\u0438\u043b\u044f> --serial-number <ARN \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430> --token-code '\nalias aws-login-prod='aws_login --profile <\u0438\u043c\u044f prod \u043f\u0440\u043e\u0444\u0438\u043b\u044f> --serial-number <ARN \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430> --token-code '<\/code><\/pre>\n
        <\/p>\n
        Wenn wir einen Kommentar zu einem Commit schreiben (unabh\u00e4ngig davon, welches Tool wir dabei f\u00fcr die Arbeit mit Git verwenden), k\u00f6nnen wir den Namen der Aufgaben textuell (ohne Anf\u00fchrungszeichen oder spezielle Symbole wie @) hinzuf\u00fcgen.<\/p>\n
        <\/p>\n
        $ aws-login-dev<\/code><\/pre>\n
        <\/p>\n
        Ich hoffe, diese Anleitung hilft Ihnen, umst\u00e4ndliches Durchsuchen der offiziellen Dokumentation zu vermeiden \ud83d\ude09<\/p>\n
        Quelle: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
        \u0414\u0430\u043b\u0435\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS MFA, \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u044e\u0449\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS CLI. \u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0443 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u0443 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0443 \u0443\u0448\u043b\u0430 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0434\u043d\u044f. \u0427\u0442\u043e\u0431\u044b \u0434\u0440\u0443\u0433\u0438\u043c \u043d\u0435\u0443\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c AWS \ud83d\ude09 \u043a\u0430\u043a \u0438 \u044f \u0441\u0430\u043c, \u043d\u0435 \u0442\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u0440\u0430\u0433\u043e\u0446\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e\u0435, \u0440\u0435\u0448\u0438\u043b \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044e. \u0414\u0430\u0436\u0435 \u0434\u043b\u044f sandbox \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 MFA \u2014 \u044d\u0442\u043e, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92262,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92261","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AWS CLI \u00fcber MFA | ProHoster","description":"Hier folgt eine Anleitung zur Einrichtung von AWS MFA sowie zur anschlie\u00dfenden Installation und Konfiguration der AWS CLI. Leider hat mich dieses zwingende Verfahren einen halben Arbeitstag gekostet.","canonical_url":"https:\/\/prohoster.info\/de\/blog\/administrirovanie\/aws-cli-cherez-mfa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47AWS CLI \u0447\u0435\u0440\u0435\u0437 MFA | ProHoster","og:description":"\u0414\u0430\u043b\u0435\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS MFA, \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u044e\u0449\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS CLI. \u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0443 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u0443 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0443 \u0443\u0448\u043b\u0430 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0434\u043d\u044f.","og:url":"https:\/\/prohoster.info\/de\/blog\/administrirovanie\/aws-cli-cherez-mfa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-25T05:42:16+00:00","article:modified_time":"2020-08-25T05:42:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92261","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:11:28","updated":"2022-10-03 19:03:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/92261","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=92261"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/92261\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media\/92262"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=92261"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=92261"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=92261"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}