rockpenguin

Overview

This was tested on a GCP Cloud Function using Python runtime 3.9. Make sure to also update the requirements.txt (attached) as part of your Cloud Function

• There are several print() statements in the attached Python code for debugging purposes. These can be removed.
• The Slack URL should be fed in via environment variable or secret since the URL contains secrets. From the Slack docs "Keep it secret, keep it safe. Your webhook URL contains a secret. Don't share it online, including via public version control repositories. Slack actively searches out and revokes leaked secrets."
• Here are the docs concerning Slack Block-Kit blocks for formatting the message

Testing procedure

1. In the GCP console, navigate to Pub/Sub and select "Topic" on the left-hand menu

rockpenguin

Budget Action Execution Role Policy Examples

To create a role that will be used by the Budget Action to perform actions

1. Use one of the below example policies to restrict access to what the role can do
2. Attach the example Trust policy below to restrict the role to only your Budget Actions (i.e. someone else can't use the role for Lambdas or another AWS service)

An example IAM policy that only allows Budget Actions to access IAM

{
  "Version": "2012-10-17",

rockpenguin

Screen Shot 2022-04-28 at 4.34.14 PM.png

Screen Shot 2022-04-29 at 9.02.25 AM.png

Screen Shot 2022-04-29 at 10.13.21 AM.png

Screen Shot 2022-04-29 at 9.35.21 AM.png

rockpenguin

https://community.openvpn.net/openvpn/wiki/HOWTO https://github.com/OpenVPN/openvpn/tree/master/sample/sample-config-files https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-endpoint-export.html

inactive sec [bytes]

e.g. inactive 300 10000

This link explains how the options work: https://openvpn.net/vpn-server-resources/openvpn-tunnel-session-management-options/#automatic-client-inactivity-disconnect-threshold

rockpenguin

Reference

https://docs.aws.amazon.com/singlesignon/latest/userguide/understanding-sign-in-events.html#sign-in-events-examples-3 https://aws.amazon.com/blogs/security/how-do-i-protect-cross-account-access-using-mfa-2/

CloudTrail event when using U2F key:

{
    "eventVersion": "1.08",
    "userIdentity": {
        "type": "Unknown",

rockpenguin

https://admin.google.com/ac/appslist/additional?hl=en

rockpenguin

from pprint import pprint

from libcloud.compute.types import Provider
from libcloud.compute.providers import get_driver

import texttable

# exception handling
from libcloud.common.exceptions import *

rockpenguin

Keybase proof

I hereby claim:

• I am rockpenguin on github.
• I am rockpenguin (https://keybase.io/rockpenguin) on keybase.
• I have a public key ASDy4rd6lFeXDeXvS1CW3pVZCo3xE3N2rmqS5ialw1XcHgo

To claim this, I am signing this object: