51 lines
1.8 KiB
Markdown
51 lines
1.8 KiB
Markdown
|
# Lab 2
|
||
|
|
|
||
|
|
## Tasks
|
||
|
|
- [x] 1. Define Security Groups
|
||
|
|
From [here](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-security-groups.html).
|
||
|
|
Security groups control inbound & outbound networking traffic
|
||
|
|
to your resource (in this case AWS EC2). The properties you can
|
||
|
|
restrict by for each security group rule are destination,
|
||
|
|
port range, & protocol. Security-wise it's best if a resource is
|
||
|
|
completely locked down (no inbound/outbound traffic allowed at all),
|
||
|
|
but since we live in the real world there are a lot of network rules
|
||
|
|
to consider in order to allow your projects to do real work.
|
||
|
|
- [x] 2. Discover your public ip
|
||
|
|
* Recorded
|
||
|
|
- [x] 3. Create a security group
|
||
|
|
- [x] 4. Attach to ec2
|
||
|
|
- [x] 5. Verify access
|
||
|
|
- [x] 6. Terraform import
|
||
|
|
```tf
|
||
|
|
**main.tf**
|
||
|
|
import {
|
||
|
|
id = /instance-id/
|
||
|
|
to = aws_instances.my_first_linux
|
||
|
|
}
|
||
|
|
```
|
||
|
|
```sh
|
||
|
|
terraform init
|
||
|
|
terraform plan -generate-config-out=generated.tf
|
||
|
|
# manually fixed the generated.tf file
|
||
|
|
terraform apply
|
||
|
|
```
|
||
|
|
|
||
|
|
## Reflection
|
||
|
|
|
||
|
|
I built a security group for my newly created ec2 instance (my-first-linux)
|
||
|
|
and updated the ec2 so that it only used the newly created security group.
|
||
|
|
This security group's only networking rule is to allow SSH connections
|
||
|
|
coming from my home's IP address.
|
||
|
|
|
||
|
|
Challenges: I glanced over the AWS CLI -- I've used it maybe a handful
|
||
|
|
of times in my life (as a dev), and it's always made me a wee bit nervous.
|
||
|
|
|
||
|
|
I didn't attempt the CLI commands and instead used terraform to import
|
||
|
|
the whole setup. This way I can store the current state of the resources
|
||
|
|
on a git repo. This is helpful to me to remember what I just did.
|
||
|
|
(At this point I've already had some experience with terraform so
|
||
|
|
I'm somewhat confident about using it to deploy/tear down resources.)
|
||
|
|
|
||
|
|
## Meta
|
||
|
|
* ~/Downloads/labs/aws.txt
|