ProHoster > Блог > Isakoso > AWS CLI nipasẹ MFA

AWS CLI nipasẹ MFA

Nigbamii ti yoo jẹ awọn ilana fun eto AWS MFA, ati lẹhinna fifi sori ẹrọ ati tunto AWS CLI.

Laanu, ilana ti o jẹ dandan yii gba mi idaji ọjọ iṣẹ mi. Ki awọn olumulo AWS miiran ti ko ni aabo 😉, bii ara mi, ma ṣe padanu akoko iyebiye lori ohun ti ko ṣe pataki, Mo pinnu lati ṣajọ awọn ilana.

Paapaa fun eto iroyin apoti iyanrin MFA itẹsiwaju Eyi nigbagbogbo jẹ ibeere dandan. Bí ó ṣe rí pẹ̀lú wa nìyẹn.

Ṣiṣeto MFA

  1. Fi sori ẹrọ ibaramu mobile app
  2. Lọ si AWS console
  3. Awọn iwe-ẹri Aabo Mi -> Fi ẹrọ MFA ṣiṣẹ
    AWS CLI nipasẹ MFA
  4. Ohun elo MFA foju
    AWS CLI nipasẹ MFA
  5. Tẹle awọn ilana loju iboju
    AWS CLI nipasẹ MFA
    AWS CLI nipasẹ MFA
  6. Ẹrọ foju ti šetan
    AWS CLI nipasẹ MFA

Fifi AWS CLI sori ẹrọ

https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.html

Ṣiṣeto profaili ti a npè ni

https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-profiles.html

  1. Awọn iwe-ẹri Aabo Mi -> Ṣẹda iwọle bọtini
    AWS CLI nipasẹ MFA
  2. Daakọ bọtini si agekuru agekuru rẹ. Iwọ yoo nilo rẹ ni igbesẹ ti n tẹle
  3. $ aws configure --profile <your profile name>

AWS CLI nipasẹ MFA

  1. Da awọn foju ẹrọ ARN
    AWS CLI nipasẹ MFA
  2. aws sts get-session-token --profile <имя профиля> --serial-number <ARN виртуального устройства> --token-code <одноразовый пароль>
    Ọrọ igbaniwọle akoko kan gbọdọ wa ni gbigba lati inu ohun elo alagbeka ti a tunto tẹlẹ.
  3. Aṣẹ naa yoo jade JSON, awọn aaye kọọkan ti eyiti o gbọdọ paarọ rẹ si awọn oniyipada ayika ti o baamu AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN

Mo pinnu lati ṣe adaṣe nipasẹ ~/.bash_profile
Lati ṣe itupalẹ JSON, iwe afọwọkọ yii nilo jq.

#!/usr/bin/env bash

aws_login() {
    session=$(aws sts get-session-token "$@")
    echo "${session}"
    AWS_ACCESS_KEY_ID=$(echo "${session}" | jq -r '.Credentials.AccessKeyId')
    export AWS_ACCESS_KEY_ID
    AWS_SECRET_ACCESS_KEY=$(echo "${session}" | jq -r '.Credentials.SecretAccessKey')
    export AWS_SECRET_ACCESS_KEY
    AWS_SESSION_TOKEN=$(echo "${session}" | jq -r '.Credentials.SessionToken')
    export AWS_SESSION_TOKEN
}

alias aws-login-dev='aws_login --profile <имя dev профиля> --serial-number <ARN виртуального устройства> --token-code '
alias aws-login-prod='aws_login --profile <имя prod профиля> --serial-number <ARN виртуального устройства> --token-code '

Lilo:

$ aws-login-dev <одноразовый пароль>

Mo nireti pe itọnisọna yii yoo ran ọ lọwọ lati yago fun awọn irin-ajo gigun nipasẹ iwe aṣẹ osise 😉

orisun: www.habr.com

Fi ọrọìwòye kun