ProHoster > Блог > Nchịkwa > AWS CLI site na MFA

AWS CLI site na MFA

Ọzọ ga-abụ ntuziaka maka ịtọlite ​​​​AWS MFA, wee wụnye na hazie AWS CLI.

O di nwute, usoro mmanye a were m ọkara nke ụbọchị ọrụ m. Ka ndị ọrụ AWS ndị ọzọ na-enweghị nchebe 😉, dị ka onwe m, egbula oge dị oke ọnụ ahịa na obere ihe, ekpebiri m ikpokọta ntuziaka.

Ọbụna maka ntọala akaụntụ sandbox MFA Nke a na-abụkarị ihe a chọrọ n'aka. Otú a ka ọ dị anyị.

Ịtọlite ​​​​MFA

  1. Tọọ ngwa mkpanaaka dakọtara
  2. Gaa na AWS console
  3. Asambodo nchekwa m -> Kenye ngwaọrụ MFA
    AWS CLI site na MFA
  4. Ngwa MFA mebere
    AWS CLI site na MFA
  5. Soro ntuziaka dị n'ihuenyo
    AWS CLI site na MFA
    AWS CLI site na MFA
  6. Ngwa ngwa adịla njikere
    AWS CLI site na MFA

Ịwụnye AWS CLI

https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.html

Ịtọlite ​​​​profaịlụ akpọrọ aha

https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-profiles.html

  1. Asambodo nchekwa m -> Mepụta igodo nnweta
    AWS CLI site na MFA
  2. Detuo igodo na klipbọọdụ gị. Ị ga-achọ ya na nzọụkwụ ọzọ
  3. $ aws configure --profile <your profile name>

AWS CLI site na MFA

  1. Detuo ARN ngwaọrụ mebere
    AWS CLI site na MFA
  2. aws sts get-session-token --profile <имя профиля> --serial-number <ARN виртуального устройства> --token-code <одноразовый пароль>
    A ga-ewepụrịrị paswọọdụ otu oge na ngwa mkpanaka ahaziri na mbụ.
  3. Iwu ahụ ga-ewepụta JSON, mpaghara nke ọ bụla ga-edochi ya n'ime mgbanwe gburugburu ebe kwekọrọ AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN

Ekpebiri m ịmegharị ya ~/.bash_profile
Iji tugharia JSON, edemede a chọrọ jq.

#!/usr/bin/env bash

aws_login() {
    session=$(aws sts get-session-token "$@")
    echo "${session}"
    AWS_ACCESS_KEY_ID=$(echo "${session}" | jq -r '.Credentials.AccessKeyId')
    export AWS_ACCESS_KEY_ID
    AWS_SECRET_ACCESS_KEY=$(echo "${session}" | jq -r '.Credentials.SecretAccessKey')
    export AWS_SECRET_ACCESS_KEY
    AWS_SESSION_TOKEN=$(echo "${session}" | jq -r '.Credentials.SessionToken')
    export AWS_SESSION_TOKEN
}

alias aws-login-dev='aws_login --profile <имя dev профиля> --serial-number <ARN виртуального устройства> --token-code '
alias aws-login-prod='aws_login --profile <имя prod профиля> --serial-number <ARN виртуального устройства> --token-code '

Ojiji:

$ aws-login-dev <одноразовый пароль>

Enwere m olileanya na ntuziaka a ga-enyere gị aka izere ịkpagharị ogologo oge site na akwụkwọ gọọmentị 😉

isi: www.habr.com

Tinye a comment