AWS Command

Mon, 01 Jan 0001 00:00:00 +0000

CloudFront

# list distributions
aws cloudfront list-distributions --query '*.Items[*].[Comment,Id,Aliases.Items[0],DefaultCacheBehavior.TargetOriginId]' --output table

# create invalidation
aws cloudfront create-invalidation --distribution-id EATDVGD171BHDS1 --paths "/*"

## check cloudfornt log enable or not
for i in $(aws cloudfront list-distributions --output table --query 'DistributionList.Items[*].Id' --profile route53 | sed '1,3d;$d' | awk '{print $2}')
do
 result=$(aws cloudfront get-distribution --id ${i} --query 'Distribution.DistributionConfig.Logging' --profile route53 | jq .Enabled)
 if [[ "${result}" != "true" ]];then
 echo ${i}
 fi
done

EC2

# list
aws ec2 describe-instances --query 'Reservations[*].Instances[*].[Tags[0].Value,InstanceId]' --output table --page-size 100

ECR

# Get password and login to 12345.dkr.ecr.ap-northeast-1.amazonaws.com
aws ecr get-login-password | docker login --username AWS --password-stdin 12345.dkr.ecr.ap-northeast-1.amazonaws.com

S3

# Copy local file to S3
aws s3 cp ./pic.png s3://bucket_name/dir/

# Sync local local_dir to S3
aws s3 sync local_dir s3://bucket_name --exclude 'gameConfig.json' --acl public-read --delete

snapshot

# list
aws ec2 describe-snapshots \
 --owner-ids self \
 --query "Snapshots[?(Tags[0].Value=='backend')].[SnapshotId,VolumeId]" \
 --region ap-northeast-1

# create
aws ec2 create-snapshot --volume-id vol-02468851c2bc3bc4b --description "gitlab-$(date +%F)" --region ap-northeast-1

# delete
aws ec2 delete-snapshot --snapshot-id snap-1234567890abcdef0 --region ap-northeast-1

sns

region='ap-east-1'
account_id='888886666321'
topic='sa'

# create topic
aws sns create-topic --name ${topic}

# subscribe
aws sns subscribe --topic-arn arn:aws:sns:${region}:${account_id}:${topic} --protocol email --notification-endpoint ricky@gmail.com

# list
aws sns list-subscriptions-by-topic --topic-arn arn:aws:sns:${region}:${account_id}:${topic}

# create alarm
### metric-name
##CPUUtilization -->percent
##NetworkIn -->bytes
##NetworkOut -->bytes
for line in $(aws ec2 describe-instances --query 'Reservations[*].Instances[*].[Tags[0].Value,InstanceId]' --output table --page-size 100)
do
 ID=$(echo ${line}|awk -F ',' '{print $1}')
 VALUE=$(echo ${line}|awk -F ',' '{print $2}')
 aws cloudwatch put-metric-alarm \
 --alarm-name ${ID}_netout \
 --metric-name NetworkOut \
 --namespace AWS/EC2 \
 --statistic Average \
 --period 300 \
 --threshold 2560000 \
 --comparison-operator GreaterThanOrEqualToThreshold \
 --dimensions "Name=InstanceId,Value=${VALUE}" \
 --evaluation-periods 3 \
 --alarm-actions arn:aws:sns:${region}:${account_id}:${topic}
 ##--unit Bytes
 echo "$ID done"
done

WAF

aws wafv2 create-web-acl \
 --name acl_name \
 --scope CLOUDFRONT \
 --default-action Allow={} \
 --visibility-config SampledRequestsEnabled=true,CloudWatchMetricsEnabled=true,MetricName=metric_acl_name \
 --rule

Mount S3 Bucket on EC2

references: How to Mount S3 Bucket on Ubuntu 22.04 with S3FS Fuse

AWS Configure

Mon, 01 Jan 0001 00:00:00 +0000

S3 Bucket Policy

{
 "Version": "2012-10-17",
 "Statement": [
 {
 "Sid": "AllowPublicRead",
 "Effect": "Allow",
 "Principal": "*",
 "Action": "s3:GetObject",
 "Resource": "arn:aws:s3:::bucketName/*"
 }
 ]
}

S3 CORS

[
 {
 "AllowedHeaders": ["*"],
 "AllowedMethods": ["GET", "PUT", "POST", "DELETE"],
 "AllowedOrigins": ["*"],
 "ExposeHeaders": [
 "x-amz-server-side-encryption",
 "x-amz-request-id",
 "x-amz-id-2"
 ],
 "MaxAgeSeconds": 3000
 }
]

ECR Lifecycle Policy

{
 "rules": [
 {
 "rulePriority": 1,
 "description": "Keep only the last 100 images",
 "selection": {
 "tagStatus": "any",
 "countType": "imageCountMoreThan",
 "countNumber": 100
 },
 "action": {
 "type": "expire"
 }
 }
 ]
}

ECR Lifecycle Policy1

{
 "rules": [
 {
 "rulePriority": 1,
 "description": "Remove images with certain tag",
 "selection": {
 "tagStatus": "tagged",
 "tagPrefixList": ["tag1", "tag2"],
 "countType": "imageCountMoreThan",
 "countNumber": 0
 },
 "action": {
 "type": "expire"
 }
 }
 ]
}

ECR Lifecycle Policy2

{
 "rules": [
 {
 "rulePriority": 1,
 "description": "Remove untagged images older than 14 days",
 "selection": {
 "tagStatus": "untagged",
 "countType": "sinceImagePushed",
 "countUnit": "days",
 "countNumber": 14
 },
 "action": {
 "type": "expire"
 }
 }
 ]
}

AWS Terraform

Mon, 01 Jan 0001 00:00:00 +0000

tf

Provider

provider.tf

EC2

AWS Notes on Ricky

AWS Command

CloudFront

EC2

ECR

S3

snapshot

sns

WAF

Mount S3 Bucket on EC2

AWS Configure

S3 Bucket Policy

S3 CORS

ECR Lifecycle Policy

ECR Lifecycle Policy1

ECR Lifecycle Policy2

AWS Terraform

tf

Provider

EC2

Elastic IP

MQ

RDS

Security Group

VPC

WAF