Application Delivery Management
Application Modernization & Connectivity
CyberRes
IT Operations Management
Group |
User |
Permissions |
nam-admins |
namadmin |
AmazonEC2FullAccess AWSLambdaFullAccess AutoScalingFullAccess AmazonS3FullAccess AWSCloudTrailFullAccess IAMReadOnlyAccess AmazonSNSFullAccess |
Serial Number |
AWS Service |
Required Permission |
Example Role Name |
1 |
EC2 |
S3 Read Only Access |
EC2-S3-READ |
2 |
Lambda |
EC2 Full Access S3 Read Only Access |
LAMBDA-EC2-S3 |
3 |
Autoscaling |
AutoScaling Notification Access Role |
AUTOSCALE-NOTIFICATION |
ADMIN_CONSOLE_IP=<private IP address of admin console>
ADMIN_USERNAME=<admin username>
ADMIN_PASSWORD=<admin password>
CLUSTER_NAME=<IDP cluster name>
CLUSTER_ID=<IDP cluster ID>
ADMIN_FQDN=<Admin DN>
NAM_VERSION=<NAM version>
NAM_BUILD_NO=<NAM build number>
{
"Version": "2012-10-17",
"Id": "Policy1523471308883",
"Statement": [
{
"Sid": "Stmt1523471304562",
"Effect": "Deny",
"NotPrincipal": {
"AWS": [
"arn:aws:iam::<AWS_ACCOUNT_ID>:user/namadmin",
"arn:aws:sts::<AWS_ACCOUNT_ID>:assumed-role/LAMBDA-EC2-S3/<LAMBDA_FUNCTION_NAME>",
"arn:aws:iam::<AWS_ACCOUNT_ID>:role/LAMBDA-EC2-S3"
]
},
"Action": "s3:*",
"Resource": [
"arn:aws:s3:::<bucket2>",
"arn:aws:s3:::<bucket2>/*"
]
}
]
}
aws autoscaling put-lifecycle-hook --lifecycle-hook-name <name_of_the_hook> --auto-scaling-group-name <name_of_autoscaling_group> --lifecycle-transition autoscaling:EC2_INSTANCE_LAUNCHING --notification-target-arn <arn_of_sns_topic> --role-arn <iam_role_ Autoscale_sns_notify> --heartbeat-timeout 300 --region ap-south-1
aws autoscaling put-lifecycle-hook --lifecycle-hook-name <name_of_the_hook> --auto-scaling-group-name <name_of_autoscaling_group> --lifecycle-transition autoscaling:EC2_INSTANCE_TERMINATING --notification-target-arn <arn_of_sns_topic> --role-arn <iam_role_ Autoscale_sns_notify> --heartbeat-timeout 30 --region ap-south-1
aws autoscaling put-lifecycle-hook --lifecycle-hook-name IDP_LAUNCH_HOOK --auto-scaling-group-name nam-idp-autoscale-group --lifecycle-transition autoscaling:EC2_INSTANCE_LAUNCHING --notification-target-arn arn:aws:sns:ap-south-1:354878439984:nam-idp-autoscale --role-arn arn:aws:iam::354878439984:role/AUTOSCALE-NOTIFICATION --heartbeat-timeout 300 --region ap-south-1
aws autoscaling put-lifecycle-hook --lifecycle-hook-name IDP_TERMINATE_HOOK --auto-scaling-group-name nam-idp-autoscale-group --lifecycle-transition autoscaling:EC2_INSTANCE_TERMINATING --notification-target-arn arn:aws:sns:ap-south-1:354878439984:nam-idp-autoscale --role-arn arn:aws:iam::354878439984:role/AUTOSCALE-NOTIFICATION --heartbeat-timeout 30 --region ap-south-1
{
"data" : {
"CredentialsBucket" : "<secure bucket having idp.admin.properties>",
"PrivateKeyFile" : "<PEM file name for EC2 instances>",
"IDP" : {
"AdminPropertiesFile" : "idp.admin.properties",
"LifecycleHook" : {
"Launch" : "<idp-launch-hook>",
"Terminate" : "<idp-termination-hook>"
}
},
"AG" : {
"AdminPropertiesFile" : "ag.admin.properties",
"LifecycleHook" : {
"Launch" : "ag-launch-hook",
"Terminate" : "ag-termination-hook"
}
}
}}
{
"data" : {
"CredentialsBucket" : "bucket2",
"PrivateKeyFile" : "nam-instances",
"IDP" : {
"AdminPropertiesFile" : "idp.admin.properties",
"LifecycleHook" : {
"Launch" : "IDP_LAUNCH_HOOK",
"Terminate" : "IDP_TERMINATE_HOOK"
}
},
"AG" : {
"AdminPropertiesFile" : "ag.admin.properties",
"LifecycleHook" : {
"Launch" : "ag-launch-hook",
"Terminate" : "ag-termination-hook"
}
}
}}