AWS CLI kudzera MFA

Kenako padzakhala malangizo okhazikitsa AWS MFA, kenako kukhazikitsa ndikusintha AWS CLI.

Tsoka ilo, njirayi idanditengera theka la tsiku langa logwira ntchito. Kuti ogwiritsa ntchito ena osatetezeka a AWS 😉, monga inenso, asataye nthawi yamtengo wapatali pazinthu zazing'ono, ndidaganiza zopanga malangizo.

Ngakhale kuyika akaunti ya sandbox MFA Izi nthawi zambiri zimakhala zofunikira. Umu ndi mmene zilili ndi ife.

Kupanga MFA

1. Khazikitsani pulogalamu yam'manja yogwirizana
2. Pitani ku AWS console
3. Zizindikiro Zanga Zachitetezo -> Perekani MFA Chipangizo
   
4. Virtual MFA Chipangizo
   
5. Tsatirani malangizo pazenera
   
   
6. Chida chowonekera chakonzeka
   

Kuyika AWS CLI

https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.html

Kukhazikitsa mbiri yotchulidwa

https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-profiles.html

1. Zizindikiro Zanga Zachitetezo -> Pangani kiyi yolowera
   
2. Koperani kiyi pa bolodi lanu lojambula. Mudzazifuna mu sitepe yotsatira
3. $ aws configure --profile <your profile name>

AWS CLI kudzera MFA

1. Koperani chipangizo chenicheni cha ARN
   
2. aws sts get-session-token --profile <имя профиля> --serial-number <ARN виртуального устройства> --token-code <одноразовый пароль>
   Mawu achinsinsi a nthawi imodzi ayenera kutengedwa kuchokera ku pulogalamu yam'manja yomwe idakonzedwa kale.
3. Lamuloli litulutsa JSON, magawo omwe akuyenera kulowetsedwa m'malo osiyanasiyana AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN

Ndinaganiza zongomaliza ~/.bash_profile
Kuti mudutse JSON, script iyi ikufunika jq.

#!/usr/bin/env bash

aws_login() {
    session=$(aws sts get-session-token "$@")
    echo "${session}"
    AWS_ACCESS_KEY_ID=$(echo "${session}" | jq -r '.Credentials.AccessKeyId')
    export AWS_ACCESS_KEY_ID
    AWS_SECRET_ACCESS_KEY=$(echo "${session}" | jq -r '.Credentials.SecretAccessKey')
    export AWS_SECRET_ACCESS_KEY
    AWS_SESSION_TOKEN=$(echo "${session}" | jq -r '.Credentials.SessionToken')
    export AWS_SESSION_TOKEN
}

alias aws-login-dev='aws_login --profile <имя dev профиля> --serial-number <ARN виртуального устройства> --token-code '
alias aws-login-prod='aws_login --profile <имя prod профиля> --serial-number <ARN виртуального устройства> --token-code '

Kugwiritsa:

$ aws-login-dev <одноразовый пароль>

Ndikukhulupirira kuti malangizowa akuthandizani kupewa kuyendayenda kwanthawi yayitali pamakalata ovomerezeka 😉

Source: www.habr.com