{"id":92261,"date":"2020-08-25T07:42:16","date_gmt":"2020-08-25T05:42:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/aws-cli-cherez-mfa"},"modified":"2020-08-25T07:42:16","modified_gmt":"2020-08-25T05:42:16","slug":"aws-cli-cherez-mfa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/administrirovanie\/aws-cli-cherez-mfa","title":{"rendered":"AWS CLI via MFA","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Voici les instructions pour configurer AWS MFA, ainsi que pour l'installation et la configuration de l'AWS CLI.<\/p>\n

<\/p>\n

Malheureusement, cette proc\u00e9dure obligatoire m'a pris la moiti\u00e9 d'une journ\u00e9e de travail. Pour \u00e9viter que d'autres utilisateurs AWS h\u00e9sitants \ud83d\ude09 comme moi ne perdent un temps pr\u00e9cieux sur des choses banales, j'ai d\u00e9cid\u00e9 de r\u00e9diger un guide.<\/p>\n

<\/a><\/noindex><\/p>\n

M\u00eame pour un compte sandbox, la configuration MFA<\/a><\/noindex> est g\u00e9n\u00e9ralement une exigence obligatoire. C'est le cas ici.<\/p>\n

<\/p>\n

Configuration de MFA<\/h2>\n

<\/p>\n

    \n
  1. Installez une application mobile compatible<\/a><\/noindex><\/li>\n
  2. Connectez-vous \u00e0 console AWS<\/a><\/noindex><\/li>\n
  3. Mes identifiants de s\u00e9curit\u00e9<\/a><\/noindex> -> Attribuer un appareil MFA
    \n\"AWS<\/li>\n
  4. Appareil MFA virtuel
    \n\"AWS<\/li>\n
  5. Suivez les instructions \u00e0 l'\u00e9cran
    \n\"AWS
    \n\"AWS<\/li>\n
  6. L'appareil virtuel est pr\u00eat
    \n\"AWS<\/li>\n<\/ol>\n

    <\/p>\n

    Installation de l'AWS CLI<\/h2>\n

    <\/p>\n

    https:\/\/docs.aws.amazon.com\/cli\/latest\/userguide\/install-cliv2.html<\/a><\/noindex><\/p>\n

    <\/p>\n

    Configuration d'un profil nomm\u00e9<\/h2>\n

    <\/p>\n

    https:\/\/docs.aws.amazon.com\/cli\/latest\/userguide\/cli-configure-profiles.html<\/a><\/noindex><\/p>\n

    <\/p>\n

      \n
    1. Mes identifiants de s\u00e9curit\u00e9<\/a><\/noindex> -> Cr\u00e9er une cl\u00e9 d'acc\u00e8s
      \n\"AWS<\/li>\n
    2. Copiez la cl\u00e9 dans le presse-papiers. Elle sera n\u00e9cessaire \u00e0 l'\u00e9tape suivante.<\/li>\n
    3. $ aws configure --profile<\/code><\/li>\n<\/ol>\n

      <\/p>\n

      AWS CLI via MFA<\/h2>\n

      <\/p>\n

        \n
      1. Copiez l'ARN de l'appareil virtuel
        \n\"AWS<\/li>\n
      2. aws sts get-session-token --profile --serial-number --token-code <\/code>
        \nLe code \u00e0 usage unique doit \u00eatre obtenu \u00e0 partir de l'application mobile configur\u00e9e pr\u00e9c\u00e9demment.<\/li>\n
      3. La commande renverra du JSON, dont les champs individuels doivent \u00eatre ins\u00e9r\u00e9s dans les variables d'environnement AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN<\/li>\n<\/ol>\n

        <\/p>\n

        J'ai d\u00e9cid\u00e9 d'automatiser cela avec ~\/ .bash_profile<\/code>
        \nPour interpr\u00e9ter le JSON, ce script n\u00e9cessite         jq<\/a><\/noindex>.<\/p>\n

        <\/p>\n

        #!\/usr\/bin\/env bash\n\naws_login() {\n    session=$(aws sts get-session-token "$@")\n    echo "${session}"\n    AWS_ACCESS_KEY_ID=$(echo "${session}" | jq -r '.Credentials.AccessKeyId')\n    export AWS_ACCESS_KEY_ID\n    AWS_SECRET_ACCESS_KEY=$(echo "${session}" | jq -r '.Credentials.SecretAccessKey')\n    export AWS_SECRET_ACCESS_KEY\n    AWS_SESSION_TOKEN=$(echo "${session}" | jq -r '.Credentials.SessionToken')\n    export AWS_SESSION_TOKEN\n}\n\nalias aws-login-dev='aws_login --profile <\u0438\u043c\u044f dev \u043f\u0440\u043e\u0444\u0438\u043b\u044f> --serial-number <ARN \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430> --token-code '\nalias aws-login-prod='aws_login --profile <\u0438\u043c\u044f prod \u043f\u0440\u043e\u0444\u0438\u043b\u044f> --serial-number <ARN \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430> --token-code '<\/code><\/pre>\n
        <\/p>\n
        Utilisation :<\/p>\n
        <\/p>\n
        $ aws-login-dev <\/code><\/pre>\n
        <\/p>\n
        J'esp\u00e8re que ce guide vous aidera \u00e0 \u00e9viter de longues errances dans la documentation officielle \ud83d\ude09<\/p>\n
        Source : habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
        \u0414\u0430\u043b\u0435\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS MFA, \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u044e\u0449\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS CLI. \u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0443 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u0443 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0443 \u0443\u0448\u043b\u0430 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0434\u043d\u044f. \u0427\u0442\u043e\u0431\u044b \u0434\u0440\u0443\u0433\u0438\u043c \u043d\u0435\u0443\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c AWS \ud83d\ude09 \u043a\u0430\u043a \u0438 \u044f \u0441\u0430\u043c, \u043d\u0435 \u0442\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u0440\u0430\u0433\u043e\u0446\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e\u0435, \u0440\u0435\u0448\u0438\u043b \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044e. \u0414\u0430\u0436\u0435 \u0434\u043b\u044f sandbox \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 MFA \u2014 \u044d\u0442\u043e, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92262,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92261","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AWS CLI via MFA | ProHoster","description":"Voici les instructions pour configurer AWS MFA, ainsi que pour l'installation et la configuration de l'AWS CLI. Malheureusement, cette proc\u00e9dure obligatoire m'a pris la moiti\u00e9 d'une journ\u00e9e de travail.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/administrirovanie\/aws-cli-cherez-mfa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47AWS CLI \u0447\u0435\u0440\u0435\u0437 MFA | ProHoster","og:description":"\u0414\u0430\u043b\u0435\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS MFA, \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u044e\u0449\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS CLI. \u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0443 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u0443 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0443 \u0443\u0448\u043b\u0430 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0434\u043d\u044f.","og:url":"https:\/\/prohoster.info\/fr\/blog\/administrirovanie\/aws-cli-cherez-mfa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-25T05:42:16+00:00","article:modified_time":"2020-08-25T05:42:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92261","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:11:28","updated":"2022-10-03 19:03:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/92261","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=92261"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/92261\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/92262"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=92261"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=92261"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=92261"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}