{"id":92261,"date":"2020-08-25T07:42:16","date_gmt":"2020-08-25T05:42:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/aws-cli-cherez-mfa"},"modified":"2020-08-25T07:42:16","modified_gmt":"2020-08-25T05:42:16","slug":"aws-cli-cherez-mfa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/aws-cli-cherez-mfa","title":{"rendered":"AWS CLI tramite MFA","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Di seguito troverai le istruzioni per configurare AWS MFA e per installare e configurare AWS CLI.<\/p>\n

<\/p>\n

Sfortunatamente, per me questa procedura obbligatoria ha richiesto met\u00e0 della mia giornata lavorativa. Per evitare che altri utenti insicuri di AWS \ud83d\ude09 come me perdano tempo prezioso su cose banali, ho deciso di redigere questa guida.<\/p>\n

<\/a><\/noindex><\/p>\n

Anche per un account sandbox, la configurazione MFA<\/a><\/noindex> \u00e8, in genere, un requisito obbligatorio. Per noi \u00e8 cos\u00ec.<\/p>\n

<\/p>\n

Configurazione MFA<\/h2>\n

<\/p>\n

    \n
  1. Installa app mobile compatibile<\/a><\/noindex><\/li>\n
  2. Accedi al alla console AWS<\/a><\/noindex><\/li>\n
  3. Le mie credenziali di sicurezza<\/a><\/noindex> -> Assegna dispositivo MFA
    \n\"AWS<\/li>\n
  4. Dispositivo MFA virtuale
    \n\"AWS<\/li>\n
  5. Segui le istruzioni sullo schermo
    \n\"AWS
    \n\"AWS<\/li>\n
  6. Il dispositivo virtuale \u00e8 pronto
    \n\"AWS<\/li>\n<\/ol>\n

    <\/p>\n

    Installazione di AWS CLI<\/h2>\n

    <\/p>\n

    https:\/\/docs.aws.amazon.com\/cli\/latest\/userguide\/install-cliv2.html<\/a><\/noindex><\/p>\n

    <\/p>\n

    Configurazione di un profilo nominato<\/h2>\n

    <\/p>\n

    https:\/\/docs.aws.amazon.com\/cli\/latest\/userguide\/cli-configure-profiles.html<\/a><\/noindex><\/p>\n

    <\/p>\n

      \n
    1. Le mie credenziali di sicurezza<\/a><\/noindex> -> Crea chiave di accesso
      \n\"AWS<\/li>\n
    2. Copia la chiave negli appunti. Ti servir\u00e0 nel passo successivo<\/li>\n
    3. $ aws configure --profile<\/code><\/li>\n<\/ol>\n

      <\/p>\n

      AWS CLI tramite MFA<\/h2>\n

      <\/p>\n

        \n
      1. Copia l'ARN del dispositivo virtuale
        \n\"AWS<\/li>\n
      2. aws sts get-session-token --profile --serial-number --token-code<\/code>
        \nLa password usa e getta deve essere presa dall'app mobile configurata in precedenza.<\/li>\n
      3. Il comando restituir\u00e0 un JSON, e i singoli campi devono essere inseriti nelle corrispondenti variabili ambientali AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN<\/li>\n<\/ol>\n

        <\/p>\n

        Ho deciso di automatizzare tramite \u02dc\/.bash_profile<\/code>
        \nPer analizzare il JSON questo script richiede         jq<\/a><\/noindex>.<\/p>\n

        <\/p>\n

        #!\/usr\/bin\/env bash\n\naws_login() {\n    session=$(aws sts get-session-token "$@")\n    echo "${session}"\n    AWS_ACCESS_KEY_ID=$(echo "${session}" | jq -r '.Credentials.AccessKeyId')\n    export AWS_ACCESS_KEY_ID\n    AWS_SECRET_ACCESS_KEY=$(echo "${session}" | jq -r '.Credentials.SecretAccessKey')\n    export AWS_SECRET_ACCESS_KEY\n    AWS_SESSION_TOKEN=$(echo "${session}" | jq -r '.Credentials.SessionToken')\n    export AWS_SESSION_TOKEN\n}\n\nalias aws-login-dev='aws_login --profile <\u0438\u043c\u044f dev \u043f\u0440\u043e\u0444\u0438\u043b\u044f> --serial-number <ARN \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430> --token-code '\nalias aws-login-prod='aws_login --profile <\u0438\u043c\u044f prod \u043f\u0440\u043e\u0444\u0438\u043b\u044f> --serial-number <ARN \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430> --token-code '<\/code><\/pre>\n
        <\/p>\n
        Uso:<\/p>\n
        <\/p>\n
        $ aws-login-dev<\/code><\/pre>\n
        <\/p>\n
        Spero che questa guida ti aiuti a evitare di vagare per la documentazione ufficiale \ud83d\ude09<\/p>\n
        Fonte: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
        \u0414\u0430\u043b\u0435\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS MFA, \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u044e\u0449\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS CLI. \u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0443 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u0443 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0443 \u0443\u0448\u043b\u0430 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0434\u043d\u044f. \u0427\u0442\u043e\u0431\u044b \u0434\u0440\u0443\u0433\u0438\u043c \u043d\u0435\u0443\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c AWS \ud83d\ude09 \u043a\u0430\u043a \u0438 \u044f \u0441\u0430\u043c, \u043d\u0435 \u0442\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u0440\u0430\u0433\u043e\u0446\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e\u0435, \u0440\u0435\u0448\u0438\u043b \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044e. \u0414\u0430\u0436\u0435 \u0434\u043b\u044f sandbox \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 MFA \u2014 \u044d\u0442\u043e, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92262,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92261","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AWS CLI tramite MFA | ProHoster","description":"Di seguito troverai le istruzioni per configurare AWS MFA e per l'installazione e la configurazione di AWS CLI. Sfortunatamente, questa procedura obbligatoria mi ha portato via met\u00e0 della giornata lavorativa.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/aws-cli-cherez-mfa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47AWS CLI \u0447\u0435\u0440\u0435\u0437 MFA | ProHoster","og:description":"\u0414\u0430\u043b\u0435\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS MFA, \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u044e\u0449\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 AWS CLI. \u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0443 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u0443 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0443 \u0443\u0448\u043b\u0430 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0434\u043d\u044f.","og:url":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/aws-cli-cherez-mfa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-25T05:42:16+00:00","article:modified_time":"2020-08-25T05:42:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92261","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:11:28","updated":"2022-10-03 19:03:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/92261","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=92261"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/92261\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/92262"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=92261"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=92261"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=92261"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}