Difference between revisions of "Terraform module: rds bastion"

From wikieduonline
Jump to navigation Jump to search
 
Line 19: Line 19:
 
* <code>[[aws s3 ls]]</code>
 
* <code>[[aws s3 ls]]</code>
 
* <code>[[aws s3 cp]] [[~/.ssh/rsa_key.pub]] s3://your-bastion-bucket-name/public-keys/</code>
 
* <code>[[aws s3 cp]] [[~/.ssh/rsa_key.pub]] s3://your-bastion-bucket-name/public-keys/</code>
 +
* <code>[[aws s3 ls]] s3://your-bastion-bucket-name/public-keys/</code>
 
* <code>[[ls -la ~/.ssh/]]</code>
 
* <code>[[ls -la ~/.ssh/]]</code>
  

Latest revision as of 20:15, 29 September 2022


To access/create user: SSH users are managed by their public key, simply drop the SSH key of the user in the /public-keys/ path of the bucket. Keys should be named like 'username.pub', this will create the user 'username' on the bastion server. Username must contain alphanumeric characters only.

module "rds_bastion" {
  source  = "Guimove/bastion/aws"
  version = "2.3.0"
  bucket_name = "my_famous_bucket_name"
  .../...
}

Features[edit]

  • All SSH commands are logged on an S3 bucket for security compliance, in the /logs path


Related[edit]

See also[edit]

Advertising: