kevit

Cloud Security Orienteering: Checklist
by Rami McCarthy
via TL;DR sec

How to orienteer in a cloud environment, dig in to identify the risks that matter, and put together actionable plans that address short, medium, and long term goals.

Based on the Cloud Security Orienteering methodology.

Checklist

kevit

#!/bin/bash
##############################################################################
#
#
# FILE             : linux-explorer.sh
# Last Change Date : 04-07-2016
# Author(s)        : Joe Santoro
# Date Started     : 15th April, 2004
# Email            : linuxexplo [ at ] unix-consultants.com
# Web              : http://www.unix-consultants.com/examples/scripts/linux/linux-explorer

kevit

import socket
import pytest
import testinfra


local_command = testinfra.get_backend('local://').get_module('Command')

@pytest.fixture()
def TCPConnection():
    def connect(address, port, timeout=5):

kevit

Using Graph Analysis to Design Microservice Architectures in the Cloud

This interactive Neo4j graph tutorial covers how to use graph analysis to find software modules that are highly centralized, making good candidates to be decomposed into microservices.

---

kevit

digraph Jira_Outage 
{
  {
    first_notification [ 
      label="Notification of a Jira outage from any channel" 
      shape=rect
    ] 

    pc_browser [ 

kevit

## group without clustering
with Diagram("AcctCreation", show=False):
    begin = (
        SQS("KickoffQueue")
        >> Lambda("AcctCreate")
        >> StepFunctions("StepFunctions")
    )

    with Cluster("StateMchne"):
        with Cluster("Cncrrntx3.1"):

kevit

---
- hosts: all
  connection: local
  tasks:
    - name: Get a cert from an https port
      get_certificate:
            host: "www.google.com"
            port: 443
      register: cert

kevit

"""SSL client/server certificates verification for `urllib2`.
see: https://gist.github.com/zed/1347055

It works on Python 2.6, 2.7, 3.1, 3.2

Example::

   >>> import urllib2, urllib2_ssl
   >>> opener = urllib2.build_opener(urllib2_ssl.HTTPSHandler(

kevit

--tc-file=TESTCONFIG

myapp:
    servers:
        main_server: 10.1.1.1 
        secondary_server: 10.1.1.2

from pytest_testconfig import config
def test_foo():
    main_server = config['myapp']['servers']['main_server']

kevit

	def create_elb(self,subnets,name,type='app',region='us-east-1',sg=['sg-c5556eb1']):
		if type == 'app':
			type = 'application'
		else:
			type = 'network'
		elb_creation = self.elbv2_client.create_load_balancer(
			Name=name,
		    Subnets=subnets,
		    SecurityGroups=sg,
		    Scheme='internet-facing',