I have a new AWS organization setup with Control Tower and a few accounts. Recently enabled the CIS 1.4 benchmark CloudWatch Metric Alarms and have been noticing a few times a day I am getting alerts for an unauthorized login…
I've been trying to get a db connection working in my lambda and having the worst time retrieving my password from secrets manager. When I run the lambda I get User: arn:aws:sts::#####:assumed-role/consent-gen/consent-gen is not authorized to perform: secretsmanager:GetSecretValue because no…
In SSH, there is an agent forwarding option to use local credentials, e.g. for working with services like GitHub or for chaining connections onward to log in to other servers, whereby the private key stays under the protection of the…
I have an S3 bucket in my AWS account, and I want to grant access to my friend, who has his own AWS account. I'm trying to determine the best practice for providing access to the S3 bucket. Should I:…
I can connect to an ec2 instance in 2 ways: via SSH using the accessKey, secretKey, token and region via AWS CLI on my personal machine When I run aws sts get-caller-identity (using the accessKey, secretKey, token FROM the ec2…
I have a python code to use pandas to read s3 files located at s3://bucket_name/table_name/file.parquet If I provide the pull path with file name like above, my python works. But if I provide the directory path as the prefix to…
I am trying to create a policy to allow users to view all the parameter store values unless it is encrypted by the dev kms key. The following is the policy that i've written. { "Version": "2012-10-17", "Statement": [ {…
I am trying to creat an elastic bean stalk using IAC for that I am getting the error message "Resource handler returned message: "No Platform named 'arn:aws:elasticbeanstalk:us-east-1::platform/Python 3.7 running on 64bit Amazon Linux 2023/3.0.3' found. (Service: ElasticBeanstalk, Status Code: 400,…
I am using AWS CLI v2 to create a configuration file and login to AWS via sso on my computer. I am then trying to access the data stored in our database on AWS Athena through R using the paws…
I have a usecase to use the secret from A in all other accounts in that organization. I have provided permission for secret for organization and encrypted the secret with kms key . I have a role accross the organization…