/mb3

Primary LanguagePython

Overview

  • Go to cf.example.com

Security

Auditing & Compliance

  1. Security Hub https://console.aws.amazon.com/securityhub
  2. GuardDuty https://ap-southeast-2.console.aws.amazon.com/guardduty
  3. Config https://ap-southeast-2.console.aws.amazon.com/config

Come back to review:

  • CIS best practices - fixing IAM policy
  • Config auto-remediation

Encryption

  1. DynamoDB https://console.aws.amazon.com/dynamodb
  2. S3 https://console.aws.amazon.com/s3
  3. ACM

Developer Experience

CI/CD + ZDT

Run date Run availability-test.sh

Run date again!

Infracocde

Demonstrate API Usage

  1. Go to Postman
  2. Run add report
  3. Go to https://cf.example.com/reports.html

Throttling/Metering

  1. Go to API Gateway https://ap-southeast-2.console.aws.amazon.com/apigateway/home?region=ap-southeast-2#/
  2. Usage Plans -> Acorn -> Quota
  3. Go to Postman
  4. Run add report (with API key)
  5. For API-wide throttling, go to API -> Stages -> Settings -> Default Throttling

Local API deployment

  1. cd backend
  2. sam local start-api
  3. Go to Postman and get localhost:3000/get

Load Testing

Serverless

  1. CloudFront, API Gateway, Lambda, DynamoDB

DDoS Protection

  1. Route53
  2. CloudFront
  3. WAF - OWASP Top 10 https://console.aws.amazon.com/wafv2

Demonstration

  • 96 CPUs, 768G RAM, 25Gbps
aws ec2 --profile sap start-instances --instance-id i-0ded00433e3a04bc1
IP=`aws ec2 --profile sap describe-instances --instance-id i-0ded00433e3a04bc1 | jq --raw-output .Reservations[].Instances[].PublicIpAddress`
ssh ubuntu@$IP -i ~/.ssh/sap.pem
cd vegeta && ./run.sh &
sudo iftop
exit
aws ec2 --profile sap stop-instances --instance-id i-0ded00433e3a04bc1

Monitoring