1 minute read

AWS

AWS section

See pip Installation.

AWS Cloudwatch Alarm

  1. AWS -> Cloudwatch
  2. Select check-box against log group that needs an alarm
  3. Actions -> “Create Metric Alarm”

    Define Pattern

  4. Filter Pattern = “ERROR”
  5. Next

    Assign metric

  6. Filter name = “preview/SmartMeter/ERROR” or “preview/smart-meter-api-metric/error”
  7. MetricNameSpace = “smartmeter/preview
  8. MetricName = “ERROR”
  9. Metric Value = 1
  10. Default = “BLANK”
  11. Unit = “count”

Review -> Create/Assign Pattern

Create Alarm

  1. AWS -> Cloudwatch -> logs
  2. Select log group
  3. Metric Filter Tab -> Check-box to select -> Create Alarm

Specify Metirc Conditions

Metric

  1. Metric Name = “ERROR”
  2. Statistics = “Sum”
  3. Period = “5 minutes” Conditions
  4. Threshold = “Static”
  5. Whenever = “Greater than or Equal”
  6. than = “1” Additional Datapoints to Alarm => 1 out of 1 Missing data treatment => as Good

Notification

  1. Alarm state trigger = “In ALARM”
  2. Select an existing SNS topic = “monitoring-alerts” (SlackCloudWatch) Next
  3. Alarm Name = “API-smart-meter-Errors”
  4. Alarm Description = “Manually added”

Create Alarm

1

$ echo "dummy text"

Add certificate

  • Navigate to certificate manager
  • Request a certificate
    • Request Public Certificate
    • fqdn blah-micro-srv.preview.trustpower.io
    • *.blah-micro-srv.preview.trustpower.io
  • Validation Method = DNS
  • Add Tags -> Review -> submit request
  • Create Route53 records for
    • blah-micro-srv.preview.trustpower.io
  • Validation should complete
  • Copy ARN to env variable in secrets manager

AWS IAM - update passwords

1
2
3
4
5
6
7
8

$ # Get list of users
$ aws iam list-users | jq -r '.Users[].UserName'
$ aws iam get-user --user-name <username>
$ aws iam get-login-profile --user-name <username>
$ aws iam update-login-profile --user-name <username> --password-reset-required
$ aws iam update-login-profile --user-name <username> --password 'blah' --password-reset-required
$ aws iam list-access-keys  --user-name <username>
$ aws iam update-access-key --access-key-id <value> --status Active  # Note console access needs to be enabled