oli-logicnow

INCIDENT DATE - INCIDENT TYPE

Meeting

Waiving meetings

In some cases the IC might determine that a PM meeting for the incident isn't needed. If the IC decides to waive the meeting please replace the Meeting section with a note indicating the meeting has been waived (example: Meeting waived: Paul Mooring)

oli-logicnow

0. What is the name of the ELB which needs to be pre-warmed?
a. e.g. yourwebapp-yourcompany-123456789.us-east-1.elb.amazonaws.com

1. What is the approximate increase percentage in traffic, or expected requests/sec that will go through the load balancer (whichever is easier to answer)?
a. e.g. 3,500 per second

2. Do you know the average amount of data passing through the ELB per request/response pair?
a. e.g. Roughly 250KB.

3. Expected percent of traffic going through the ELB that will be using SSL termination?

oli-logicnow

Replace ACCOUNTID with your 12 character account ID


{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AllowAllUsersToListAccounts",
            "Effect": "Allow",
            "Action": [

oli-logicnow

curl -Iv --resolve example.com:443:52.49.117.44 https://example.com

Super helpful whne doing things like testing services on the end of round-robin IP

oli-logicnow

strace -p {{PROCESS_ID}}
poll([{fd=20, events=POLLIN}], 1, 0)    = 0 (Timeout)  << see timeout
GRAB FileDescriptor (20)

ls -l /proc/{{PROCESS_ID}}/fd/{{FD}}
lrwx------ 1 root root 64 Jul 18 15:41 /proc/29915/fd/20 -> socket:[2426613614]
GRAB SOCKET (2426613614)


lsof | grep {{SOCKET}}

oli-logicnow

#!/bin/bash -eux
# githubencryption.sh github_username file_to_encrypt
# NOTE: only works if you've one key in github
export tmpfile=$(mktemp /tmp/key.XXXXXX)
export tmppem=$(mktemp /tmp/pem.XXXXXX)
curl -s -o $tmpfile https://github.com/$1.keys
chmod 600 $tmpfile
ssh-keygen -f $tmpfile  -e -m PKCS8 > $tmppem
openssl rsautl -encrypt -pubin -inkey  $tmppem -ssl -in $2 -out $2.encrypted
echo "To decrypt: openssl rsautl -decrypt -inkey YOUR_PRIVATE_KEY -in $2.encrypted -out $2"

oli-logicnow

"UserData": "{{ launch_script | b64encode}}"

oli-logicnow

I had problems with periodically getting "SSH Error: Shared connection to 52.49.192.253 closed" when cutting an AMI from an instance I'd created.
Because the default action of ec2_ami is to reboot the instance before creating the AMI, Ansible was loosing the connection.

The solution: set no_reboot to "yes" http://docs.ansible.com/ansible/ec2_ami_module.html

        - name: Cut AMI
          ec2_ami:
            region: "{{ aws_region }}"
            aws_region: "{{ aws_region }}"
            aws_access_key: "{{  aws_access_key }}"

oli-logicnow

echo | openssl s_client -connect [SERVER]:443 2>/dev/null | openssl x509 -noout -dates

oli-logicnow

export PROFILE=XXXX
for USER in `aws --profile $PROFILE iam list-users --query 'Users[].UserName' --output text`
do 
for KEY in `aws --profile $PROFILE iam list-access-keys --user-name "$USER" --query 'AccessKeyMetadata[].AccessKeyId' --output text`
do
echo $USER $KEY
done
done