![Raaviblog](/img/default-banner.jpg)
- 65
- 413 188
Raaviblog
New Zealand
Приєднався 15 сер 2013
Raaviblog channel is started to provide "How to" information related to AZURE and AWS services. Our effort is to share the information with the AZURE and AWS working community.
Blog - raaviblog.com
Want to Support (via Paypal): raaviblog@gmail.com
Blog - raaviblog.com
Want to Support (via Paypal): raaviblog@gmail.com
Using PowerShell script Setup Self-hosted Windows GitHub Actions Runner on AWS EC2 in Private Subnet
Using PowerShell script
Setup Self-hosted Windows GitHub Actions Runner on AWS EC2 in Private Subnet
ref:
ua-cam.com/video/xsXIgeMHUiM/v-deo.html
gist.github.com/subudear/14539def5d1cea8a5cc02dca4155747a
Setup Self-hosted Windows GitHub Actions Runner on AWS EC2 in Private Subnet
ref:
ua-cam.com/video/xsXIgeMHUiM/v-deo.html
gist.github.com/subudear/14539def5d1cea8a5cc02dca4155747a
Переглядів: 484
Відео
Setup Self-hosted Windows GitHub Actions Runner on AWS EC2 in Private Subnet
Переглядів 1 тис.Рік тому
Adding a self-hosted runner requires that you download, configure, and execute the GitHub Actions Runner.
Setup Self-hosted Linux GitHub Actions Runner on AWS EC2 in Private Subnet
Переглядів 1,8 тис.Рік тому
Adding a self-hosted runner requires that you download, configure, and execute the GitHub Actions Runner.
Improve DynamoDB Performance with DAX
Переглядів 679Рік тому
Amazon DynamoDB is designed for scale and performance. In most cases, the DynamoDB response times can be measured in single-digit milliseconds. However, there are certain use cases that require response times in microseconds. For these use cases, DynamoDB Accelerator (DAX) delivers fast response times for accessing eventually consistent data. references: docs.aws.amazon.com/amazondynamodb/lates...
Using Amazon VPC endpoints to access DynamoDB
Переглядів 2,2 тис.Рік тому
A VPC endpoint for DynamoDB enables Amazon EC2 instances in your VPC to use their private IP addresses to access DynamoDB with no exposure to the public internet. Your EC2 instances do not require public IP addresses, and you don't need an internet gateway, a NAT device, or a virtual private gateway in your VPC. You use endpoint policies to control access to DynamoDB. Traffic between your VPC a...
Access AWS service using Python script and Boto3 by assuming role with Security Token Service (STS)
Переглядів 5 тис.Рік тому
You can use AWS Security Token Service (STS) to assume an IAM role. Once the role is assumed, you get the permissions of that role. The credentials you get as part of assume role is temporary and you can set how long those credentials are valid. You use the AWS SDK for Python (Boto3) to create, configure, and manage AWS services, such as Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Simp...
How to connect to AWS EC2 instance using EC2 instance connect without a key pair
Переглядів 1,7 тис.Рік тому
Amazon EC2 Instance Connect provides a simple and secure way to connect to your Linux instances using Secure Shell (SSH). With EC2 Instance Connect, you use AWS Identity and Access Management (IAM) policies and principals to control SSH access to your instances, removing the need to share and manage SSH keys. All connection requests using EC2 Instance Connect are logged to AWS CloudTrail so tha...
How to Setup Custom Domain Name with API Gateway - AWS Route53
Переглядів 6 тис.Рік тому
In this video you will see how to setup custom domain name with API Gateway using Route53 and AWS ACM. Routing traffic to an Amazon API Gateway API by using your domain name. Use Custom Domain Name with AWS API Gateway to shorten the link into more readable format. reference: docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-api-gateway.html
Run an Amazon ECS task on Fargate in a private subnet WITHOUT NAT Gateway
Переглядів 5 тис.Рік тому
You can run Fargate tasks in private subnets. you might want to prevent any internet access for your tasks.To run Fargate tasks in a private subnet without internet access, use VPC endpoints. VPC endpoints allow you to run Fargate tasks without granting the tasks access to the internet. The required endpoints are accessed over a private IP address. reference: aws.amazon.com/premiumsupport/knowl...
Run an Amazon ECS task on Fargate in a private subnet using NAT gateway
Переглядів 5 тис.Рік тому
You can run Fargate tasks in private subnets. However, based on your use case, you might require internet access for certain operations, such as pulling an image from a public repository. If you need your task to access the internet from a private subnet, grant internet access using a NAT Gateway. The required endpoints are accessed over the public IP address of the NAT gateway. Reference: aws....
Authorize access to private AWS Fargate using Amazon API Gateway (Request-based Lambda authorizer)
Переглядів 686Рік тому
For a Lambda authorizer of the REQUEST type, API Gateway passes request parameters to the authorizer Lambda function as part of the event object. The request parameters include headers, path parameters, query string parameters, stage variables, and some of request context variables. The API caller can set the path parameters, headers, and query string parameters. The API developer must set the ...
Using Amazon SQS dead-letter queue and lambda function to replay messages
Переглядів 2,7 тис.Рік тому
Amazon Simple Queue Service (Amazon SQS) is a fully managed message queuing service. It enables you to decouple and scale microservices, distributed systems, and serverless applications. how to add automated resilience to an existing SQS queue. It monitors the dead-letter queue and moves a message back to the main queue to see if it can be processed again. reference: aws.amazon.com/blogs/comput...
How to set up Amazon Cognito for federated authentication using Azure AD to authenticate users
Переглядів 6 тис.Рік тому
You have your application running in AWS ECS fargate container behind AWS ALB. All users are part of Azure AD and you want to authenticate users before they can access your application. You can configure AWS Cognito for federated identity provider Azure AD. This way the users will be redirected to Azure login page to authenticate before accessing the application. Reference: aws.amazon.com/blogs...
OAuth 2.0 Authorization code grant using AWS Cognito and Postman
Переглядів 15 тис.Рік тому
The authorization code grant is the preferred method for authorizing end users. Instead of directly providing user pool tokens to an end user upon authentication, an authorization code is provided. This code is then sent to a custom application that can exchange it for the desired tokens. Because the tokens are never exposed directly to an end user, they are less likely to become compromised. U...
Secure API Gateway HTTP APIs endpoints with JWT authorizer using Cognito
Переглядів 2 тис.Рік тому
how you can secure Amazon API Gateway HTTP endpoints with JSON web token (JWT) authorizers. Amazon API Gateway helps developers create, publish, and maintain secure APIs at any scale, helping manage thousands of API calls. There are no minimum fees, and you only pay for the API calls you receive. This video includes step-by-step guidance for setting up JWT authorizers using Amazon Cognito as th...
Access Private applications on AWS Fargate using Amazon API Gateway PrivateLink
Переглядів 7 тис.Рік тому
Access Private applications on AWS Fargate using Amazon API Gateway PrivateLink
Authenticate users using an AWS ALB and Cognito to access API deployed in ECS fargate
Переглядів 6 тис.Рік тому
Authenticate users using an AWS ALB and Cognito to access API deployed in ECS fargate
Service to service OAuth2.0 Client Credentials Flow using AWS Cognito and API Gateway
Переглядів 8 тис.Рік тому
Service to service OAuth2.0 Client Credentials Flow using AWS Cognito and API Gateway
Deploy container to AWS ECS Fargate using Azure DevOps pipeline
Переглядів 4,7 тис.2 роки тому
Deploy container to AWS ECS Fargate using Azure DevOps pipeline
How to register & run GitLab Runner inside a Docker container
Переглядів 12 тис.2 роки тому
How to register & run GitLab Runner inside a Docker container
How to transfer Docker image from JFrog Artifactory to AWS ECR using Azure DevOps
Переглядів 2 тис.2 роки тому
How to transfer Docker image from JFrog Artifactory to AWS ECR using Azure DevOps
How to transfer Docker image from JFrog Artifactory to Azure Container Registry
Переглядів 2,3 тис.2 роки тому
How to transfer Docker image from JFrog Artifactory to Azure Container Registry
Run GitLab as container in Docker-desktop on Windows
Переглядів 9 тис.2 роки тому
Run GitLab as container in Docker-desktop on Windows
Run Jenkins & bitbucket as containers in Docker-desktop
Переглядів 1,7 тис.2 роки тому
Run Jenkins & bitbucket as containers in Docker-desktop
Use GitVersion (Mainline mode) for semantic versioning in Jenkins Pipeline and Bitbucket repository
Переглядів 4,4 тис.2 роки тому
Use GitVersion (Mainline mode) for semantic versioning in Jenkins Pipeline and Bitbucket repository
How to Redrive messages from FIFO AWS dead-letter queue to FIFO AWS source queue
Переглядів 6 тис.2 роки тому
How to Redrive messages from FIFO AWS dead-letter queue to FIFO AWS source queue
Amazon SQS Enhances Dead-letter Queue Management
Переглядів 1,6 тис.2 роки тому
Amazon SQS Enhances Dead-letter Queue Management
Use GitVersion (Mainline development mode) for semantic versioning in Azure DevOps using PR Template
Переглядів 6 тис.2 роки тому
Use GitVersion (Mainline development mode) for semantic versioning in Azure DevOps using PR Template
Use GitVersion (Mainline development mode) for semantic versioning in Azure DevOps using Git Hooks
Переглядів 7 тис.2 роки тому
Use GitVersion (Mainline development mode) for semantic versioning in Azure DevOps using Git Hooks
Upload or Download files from Artifactory in Azure Pipelines using Artifactory Service Connection
Переглядів 10 тис.2 роки тому
Upload or Download files from Artifactory in Azure Pipelines using Artifactory Service Connection
Thanks U saved me
thank you, sir
hello Do you also use GPT with action?
How can we retrieve event hub messages from postman
hi
I am losing the state of bitbucket if I restart the machine
What if we stop and start the server do we need to troubleshoot again like pasting and running the commands on VM or else it will be come in online directly?
For the artifactory service it does not show me the service connections that I created
well done, thank you! It was nice to see how the NAT gateway should be setup and what errors you run into if you set it up wrong/ do not have it
very useful, thanks!
What permissions are required for the PAT to allow it to register the runner?
thank you Ravi, very good explanation
Thank you for your video! it helped me a lot to understand how to link de NAT Gatway to the outside!
How do i configure this git with Jenkins installed on docker desktop, Jenkins in installed on docker desktop windows core image
Really nice video. It is just what I have been looking for for a long time
how to add the public ip which is static to ECS
without access keys and secret access keys , is not not possible to access the s3 bucket ,using python boto3
do you have terraform script to perform the same ?
Good example, thanks
Awesome explanations!
thanks.
Codes are not visible. Can you post the code somewhere?
Hi Raavi, I trust you are well. Honestly I am struggling to reference a file from a repo to a pipeline and I was wondering if you can assist me
Could you please make a video for establishing connection with kubeconfig sir thank you
Getting "botocore.exceptions. NoCredentialsError:Unable to locate credentials"
Hey. Nice Explaination. I have a question. I am the admin user in the aws account. I don't have any access key and secret key. I want to access s3 using temporary credentials. is it possible?
No, this is NOT possible. You need secret access key and secret access key id to configure the profile. The sts client will then establish api call using the credentials of the profile. So, you need setup access key and secret key for sts client to work
thanks, However, Since python script prints to the terminal, a slow terminal largely affects the timing. In addition, it's customary to fetch some data prior to running the main test to warm up the connection.
is this only for .NET?
I was struggling with my tasks being stuck in Provisioning state. Finally found this awesome video Thanks a lot
I deployed fargate task in private subnet with NAT gateway for whitelisting purpose. Even though I attached load balancer but I can't able to access the task from internet. So what can I do for that?
Great demo
Okay, thanks for the explanations. But what I was waiting for is this: * User (not yet signed in) uses the web browser (e.g. Firefox) and calls a URL that is protected. * Then I want the login dialogue to pop up (the one that you used in the Cognito pool to sign in) and the user can enter credentials. * When credentials are okay, then the browser proceeds to the protected URL and shows the content. So how do I achieve this? What you were explaining seems to be going on below the surface. I cant expect my users to manually launch the hosted UI from the AWS console... they dont have access to the account where the pool is in...?!
Hi Ravi great video once again! Can you please let me know if this is possible: If I have one ALB, one HTTPS listener, but multiple path based rules can I have both authenticated and non-authenticated requests, where the authenticated ones go through Cognito before being forwarded to the Target Group? Then once they reach the application the token gets verified by the server?
We can directly access nlb right why do we need api gateway
Thank you for the video!
Can you share curl of access table by Access Keys ? I always get 403
Thank you - shows exactly what I needed in Postman. One suggestion - re-record the video with the new "Experience" from AWS. Sorry, they changed the UI ... AGAIN :). This will bring more views.
Great tutorial - gave you thumbs-up. Just one little detail that evaded me. On the diagram you showed the user clicking on a login link (top left), but then we seem to only simulate that click with postman, right? I don't think there was an actual link on a page that this end-user clicked. Thanks in advance for confirming.
Great video, thanks!
After ec2 restart, it fails because it uses another user as "DevAISUser" and not ssm-user where we did the runner setup, so whatever we installed on ssm-user is missing in new user and this fails. Getting Git version info Working directory is '/home/DevAISUser/
If there is no user present in AZ AD, is there a way I can prompt for register user or guest user login such that user is created in AZ AD? If so, should we create a custom component that should be hosted on AWS or is there any other way to achieve this?
This is good. But I want to know for public API Gateway requests that are coming from the outside internet (users), those requests will come into VPC via internet gateway, pass in to fargate tasks (placed in private subnets) via NAT Gateway (placed in public subnets) right? In short, use of NAT Gateway is inevitable right?
great video, thaks a loooot
Hi, thanks a lot for this video... When I'm trying to create a new cluster it is not asking me to select vpc, networking option itself is not there... why it is?
Because the console has been updated recently. If you create a service in the cluster, there you can select your networking configurations.😊
@8:17
why not set main sqs url in attribute?
Link for those yml files shown in the video would be nice :)
Thanks for this awesome video. So we need NAT gateway only if we want to make outbound calls to third party Rest APIs, else it will work fine with VPC endpoints if we only want to connect S3 and ECR. right?
Yes, correct
amazing. just font size needs to be adjust.
how to run the code when the runners is in idle