AWS CLI kuburikidza neMFA

Inotevera ichave mirairo yekumisikidza AWS MFA, uye wozoisa nekugadzirisa AWS CLI.

Sezvineiwo, izvi zvakanditorera hafu yezuva rangu rekushanda. Kuti vamwe vasina kuchengeteka vashandisi veAWS 😉, seni, usatambise nguva yakakosha pane zvisina basa, ndakafunga kuunganidza mirairo.

Kunyangwe kune sandbox account kumisikidza MFA Izvi zvinowanzova chinhu chinosungirwa. Izvi ndizvo zvazvakaita kwatiri.

Kugadzira MFA

1. Set inoenderana mobile app
2. Enda ku AWS console
3. My Security Credentials -> Govera MFA Chishandiso
   
4. Virtual MFA Device
   
5. Tevedza rairo dziri pachiratidziri
   
   
6. Virtual mudziyo wagadzirira
   

Kuisa AWS CLI

https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.html

Kugadzira mbiri ine zita

https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-profiles.html

1. My Security Credentials -> Gadzira kiyi yekuwana
   
2. Kopa kiyi ye clipboard yako. Unozozvida munhanho inotevera
3. $ aws configure --profile <your profile name>

AWS CLI kuburikidza neMFA

1. Kopa iyo chaiyo mudziyo ARN
   
2. aws sts get-session-token --profile <имя профиля> --serial-number <ARN виртуального устройства> --token-code <одноразовый пароль>
   Iyo-imwe-nguva password inofanirwa kutorwa kubva kune mobile application yakagadziriswa kare.
3. Murairo uchaburitsa JSON, iyo yega minda inofanirwa kutsiviwa mune inoenderana nharaunda siyana AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN

Ndakasarudza kuita otomatiki ~/.bash_profile
Kuti utarise JSON, chinyorwa ichi chinoda jq.

#!/usr/bin/env bash

aws_login() {
    session=$(aws sts get-session-token "$@")
    echo "${session}"
    AWS_ACCESS_KEY_ID=$(echo "${session}" | jq -r '.Credentials.AccessKeyId')
    export AWS_ACCESS_KEY_ID
    AWS_SECRET_ACCESS_KEY=$(echo "${session}" | jq -r '.Credentials.SecretAccessKey')
    export AWS_SECRET_ACCESS_KEY
    AWS_SESSION_TOKEN=$(echo "${session}" | jq -r '.Credentials.SessionToken')
    export AWS_SESSION_TOKEN
}

alias aws-login-dev='aws_login --profile <имя dev профиля> --serial-number <ARN виртуального устройства> --token-code '
alias aws-login-prod='aws_login --profile <имя prod профиля> --serial-number <ARN виртуального устройства> --token-code '

Kushandisa:

$ aws-login-dev <одноразовый пароль>

Ndinovimba kuraira uku kuchakubatsira kudzivirira kudzungaira kwenguva refu kuburikidza nemagwaro epamutemo 😉

Source: www.habr.com