This note will explain, how to configure scheduled Snapshot of attached EBS volumes using terraform, Cloudwatch Events with builtin target EC2 CreateSnapshot API. We can use Cloudwatch event to schedule snapshot of EBS volume. For this we need to create Schedule based Cloudwatch Event Rule with Specific Cron expression. Then attach EC2 CreateSnapshot API target…
These days, almost every Software development organization is trying to implement DevOps in their Software Development Lifecycle. DevOps is getting accepted worldwide for its Software Delivery speed and reliability. Infrastructure provisioning or orchestration and Configuration Management both are like heart and soul of DevOps toolchain. Tools like Terraform & Cloud Formation are used for Infrastructure…
Salt based linux and iam user Management I have created Salt States for Managing User. I have uploaded them on GitHub. Kindly check and let me know any suggestions or queries. Clone Git Repo from https://github.com/neeleshg/salt-iamuser-sshkey.git Check out README.MD
These Videos demonstrates configuring AWS Console Login Failure Alerts using CloudTrail, CloudWatch. We also can setup a lambda function, which will disable or take any on that user after number of login failures. Part1 Part2
These 2 videos demonstrates, simple steps to Partition root volume. Part-1 Part-2
The Federal Risk and Authorization Management Program (FedRAMP) is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. FedRAMP is required if organization is planning to have projects from US FedRAL Government. It is also a framework to harden organization’s infrastructure. Getting FedRAMP is…
Salt is Configuration Management Tool. It is written in Python It uses YAML Very flexible and faster Server-Client technology for Configuration Management Salt works on ZeroMQ for master and Minion Communication Components of Salt: salt-master Master node which pushes the configuration salt-minion Slave node which connects to Master and get the configuration Execution Modules Salt…
General Process: Cloudtrail will send all API logs to S3 bucket And will notify to SNS topic SNS will send log details to SQS queue Graylog will poll message from SQS and get the logs from that S3 file By default all logs will be sent to “All Messages” stream. Stream can be used to…
Graylog is widely used for log management and analysis. There are 4 main components of Graylog: Graylog Server MongoDB ElasticSearch NGINX as ReverseProxy to secure Graylog API Below steps will help, reader to basic installation of Single Node Graylog server and redirect system logs from rsyslogd to Graylog. Do let me know your queries on ngurjar…
This is high level description of Redis HA Implementation Options. There are couple of ways to setup Redis in HA mode as per business requirements. Main concern in Redis HA is how we are going to distribute Writes and Reads. Sometimes RedisHA is handled at Application level as well. Option 1: Manual This is the…