Tag: IAM

HI Iam looking for a program that analyzes the bitcoin

Analyze – to study something in a systematic and careful way (Cambridge Academic Content Dictionary).

So you want for some tool that can study somethings for you in a systematic way, and it is all about the blockchain?

I think, that analyze something is to understand what really you want to extract from and see. But universal analyzer is the school task or the work task (maybe) for those who don’t care about what they want to have or do.

If you want the tool that can extract all information from the blockchain of Bitcoin, you can try my parser here. This small and simple script can produce the human readable view of raw blockchain database. So then you can analyze it by your way as you want.

Good luck!

amazon web services – Configuring SNS Topic notification IAM Role in Maintenance Window tasks

I currently have an AWS Maintenance Window set up in order to keep certain things up to date across some EC2 instances. I want to set up a SNS Topic to email me when one of the tasks fails to run correctly. So far I have the following Cloudformation template, which deploys fine:

MaintenanceWindowTask1:
Type: AWS::SSM::MaintenanceWindowTask
Properties:
Name: UpdateSSMAgent
WindowId: !Ref MaintenanceWindow
Targets:
– Key: TargetIds
Values:
– !Ref MaintenanceWindowTarget
TaskArn: UpdateSSMAgent
TaskType: RUN_COMMAND
TaskInvocationParameters:
MaintenanceWindowRunCommandParameters:
Parameters:
version:
– “{{ssm:/ssm-version}}”
allowDowngrade:
– “true”
NotificationConfig:
NotificationArn: !Ref SnsTopic
NotificationEvents:
– Failed
NotificationType: Command
Priority: 1
MaxConcurrency: 100%
MaxErrors: 1

The issue with this is that I have no Notification IAM Role defined in the CFN stack, so the topic can’t be published.

I can’t for the life of me find any documentation on what the appropriate definition should be and I don’t want to set the IAM Role the SNS Topic uses via the console.

Does anybody have a solution or know the correct CFN definition for a SNS notification IAM Role?

amazon web services – How to create a IAM user with permissions on sub-accounts using roles

I hope can help someone 😉

1- In the root account, create the IAM user.

The permissions in the Sub-account will be managed by the role permissions(policies).

2- In the sub-account, Go to IAM / Role / Create Role
2.1- Select tab "Another AWS Account" and paste the Root AccountID
2.2- Attach any permission that you want
2.3- Once the Role is created, save the Role name and Role ARN.

3-  Go to Roles / Permissions and remove the basic policy that you add previously.
3.1- Click on “Add inline policy” and select the service and permissions that you want to provide (read, write, list, etc.)
You also can set the permissions with JSON.
3.2- Go to Roles / Trusted Relationships Tab, and verify that the Root AccountID appears there.

4- In the Root account go to IAM / Users / user / Permissions and click on "Add inline policy” / JSON Tab
4.1-  Now add the AssumeRole Policy ( https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_permissions-to-switch.html )
Replace the default ARN with your Role ARN.

Verify If you can switch roles with the user.

AWS IAM Requests Time Out

Trying to use AWS to host a website, but I’m going nowhere. I was able to get an instance set up, but practically anything I try to do times out. I am trying to set up IAM Management, but I can’t even create a user or a group without it timing out. I’ve checked my internet connection and it seems fine in every other regard. I’ve completely disabled Windows firewall. Still no luck. What am I doing wrong here?

Here's a screenshot of the error I encounter on AWS.

identity – Where to save user informations with an IAM like Keycloak

What is the best practice to save user informations like firstname,lastname, address…? Directly in the Keycloak db or in the application database and the identifier from the keycloak user will also saved in the application database?

If the best practice it to save it directly in keycloak, would the application access it via REST?

command line – I’am not able to run python in sublime text. Is there a solution?

bash: python: command not found
(Finished in 0.0s with exit code 127)
(shell_cmd: python -u “/home/hector/.config/sublime-text-3/Packages/User/print(“IAN”).py”)
(dir: /home/hector/.config/sublime-text-3/Packages/User)
(path: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin)

This is what I get when I run a simple program.

amazon web services – IAM for restricting specific request values

I would like to make an IAM user which was access to the AWS Lightsail CreateInstances API, but only if they make a request where bundleId is nano_2_0.

I am aware of condition keys in AWS, but according to the documentation on that, only tag-related condition keys are available.

However, I was hoping that a more generic version of a condition key was available or something similar, which would allow for the above scenario – perhaps a condition key that would work for any API call.

Is that possible in any way, perhaps with small modifications?