Alex Smolen alsmola

## gist:9905549
### Keybase proof

I hereby claim:

  * I am alsmola on github.
  * I am alsmola (https://keybase.io/alsmola) on keybase.
  * I have a public key whose fingerprint is A396 4319 DB5C 469D 12D5  1299 AB1D 5964 6557 8858

To claim this, I am signing this object:

## git-list.rb
#!/usr/bin/env ruby

# To setup - copy this to a file named git-list in a directory on your path and
# chmod +x.
#
# To use - Type git list, and select the branch you'd like to check out.

@branches = Array.new

class String

## xss_really.html
<html>
	<body>
		<script>
			function log(arg) {
				console.log(arg)
			};
		</script>
		<div onclick="log('test&#39;);alert(1);//')">
			Click me.
		</div>

## kms_auth.go
/*
Copyright 2016 Alex Smolen (https://alexsmolen.com)

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software

## amazon_linux_yubikey.md

      
              1 file
            
          
              1 fork
            
          
              1 comment
            
          
              2 stars
            
          
                alsmola
                / amazon_linux_yubikey.md
            
            
              Last active
              April 8, 2020 06:42
            
              
                Amazon Linux and Yubikey SSH 2FA
              
          
    First, you'll need to install the package or compile it from source.
Install

Since pam_yubico only exists in the Fedora/EPEL repository which isn't enabled on Amazon Linux by default, you first have to run:
sudo yum-config-manager --enable epel

Then you can install the package:
sudo yum install pam_yubico

  
## cloudtrail_partitions.js
'use strict';

console.log('Loading function');

const aws = require('aws-sdk');
aws.config.update({region: 'us-east-1'});

const s3 = new aws.S3({ apiVersion: '2006-03-01' });
const ddb = new aws.DynamoDB({apiVersion: '2012-10-08'});
const athena = new aws.Athena();

## cloudtrail_partition_create_athena_table.sql
CREATE EXTERNAL TABLE cloudtrail_logs (
    eventversion STRING,
    userIdentity STRUCT<
        type:STRING,
        principalid:STRING,
        arn:STRING,
        accountid:STRING,
        invokedby:STRING,
        accesskeyid:STRING,
        userName:STRING,

## incongito_for_bash_profile.sh
function hide {
  export OLD_PS1=${PS1}
  set +o history
  PS1="\e[41m $PS1 \e[m"
}

function show {
  set -o history
  PS1=${OLD_PS1}
}

## README.md

      
              3 files
            
          
              1 fork
            
          
              0 comments
            
          
              0 stars
            
          
                alsmola
                / README.md
            
            
              Last active
              December 27, 2019 04:53
            
              
                Using session policies to limit IAM role access
              
          
    Session Policy Example

First, upload test files to an S3 bucket you control (replace YOUR_BUCKET_NAME) in two directories representing isolated namespaces (123 and 124).
echo "123" > test.txt
aws s3 cp test.txt s3://YOUR_BUCKET_NAME/123/test.txt
echo "124" > test.txt
aws s3 cp test.txt s3://YOUR_BUCKET_NAME/124/test.txt


## gsuite_saml_cognito_alb.tf
resource "aws_lb" "app1" {
  name               = "App1"
  internal           = false
  load_balancer_type = "application"
  security_groups    = ["<your-security-group>"]
  subnets            = ["<your-subnet-id>"]
}

resource "aws_lb_target_group" "app1" {
  name     = "App1"
	### Keybase proof

	I hereby claim:

	* I am alsmola on github.
	* I am alsmola (https://keybase.io/alsmola) on keybase.
	* I have a public key whose fingerprint is A396 4319 DB5C 469D 12D5 1299 AB1D 5964 6557 8858

	To claim this, I am signing this object:
	#!/usr/bin/env ruby

	# To setup - copy this to a file named git-list in a directory on your path and
	# chmod +x.
	#
	# To use - Type git list, and select the branch you'd like to check out.

	@branches = Array.new

	class String
	<html>
	<body>
	<script>
	function log(arg) {
	console.log(arg)
	};
	</script>
	<div onclick="log('test');alert(1);//')">
	Click me.
	</div>
	/*
	Copyright 2016 Alex Smolen (https://alexsmolen.com)

	Licensed under the Apache License, Version 2.0 (the "License");
	you may not use this file except in compliance with the License.
	You may obtain a copy of the License at

	http://www.apache.org/licenses/LICENSE-2.0

	Unless required by applicable law or agreed to in writing, software
	'use strict';

	console.log('Loading function');

	const aws = require('aws-sdk');
	aws.config.update({region: 'us-east-1'});

	const s3 = new aws.S3({ apiVersion: '2006-03-01' });
	const ddb = new aws.DynamoDB({apiVersion: '2012-10-08'});
	const athena = new aws.Athena();
	CREATE EXTERNAL TABLE cloudtrail_logs (
	eventversion STRING,
	userIdentity STRUCT<
	type:STRING,
	principalid:STRING,
	arn:STRING,
	accountid:STRING,
	invokedby:STRING,
	accesskeyid:STRING,
	userName:STRING,
	function hide {
	export OLD_PS1=${PS1}
	set +o history
	PS1="\e[41m $PS1 \e[m"
	}

	function show {
	set -o history
	PS1=${OLD_PS1}
	}
	resource "aws_lb" "app1" {
	name = "App1"
	internal = false
	load_balancer_type = "application"
	security_groups = ["<your-security-group>"]
	subnets = ["<your-subnet-id>"]
	}

	resource "aws_lb_target_group" "app1" {
	name = "App1"