avatarJohn R. Miles

Free AI web copilot to create summaries, insights and extended knowledge, download it at here

5791

Abstract

7156">I covered user-specific secrets here:</p><div id="744d" class="link-block"> <a href="https://readmedium.com/create-a-per-user-secret-in-secrets-manager-part-1-bb97b66e2a2d"> <div> <div> <h2>User-Specific Secrets on AWS: IAM Policies</h2> <div><h3>ACM.82 IAM Policies to allow users to describe their own secrets</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*PcniDpBJq2db0jbdryc_Nw.png)"></div> </div> </div> </a> </div><h2 id="aada">Create the user-specific Secret to store the automation credentials</h2><p id="a515">Next I create <b>SandboxDevAutomationSecret</b> in Secrets Manager, encrypted with my <b>Sandbox KMS key</b>.</p><figure id="e15e"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*DQonCyF8UzPnZZoiGOKD9w.png"><figcaption></figcaption></figure><figure id="f7b3"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*zITxEtD__wFDwpPrBpqv4w.png"><figcaption></figcaption></figure><h2 id="2e63">Create a user-specific EC2 instance role for the SandboxDev user</h2><p id="3417">Next I create an EC2 instance role that the developer is allowed to pass to EC2 instances named <b>SandboxDevEC2Role</b>.</p><figure id="44ef"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*__fohZeTWjwdYrS__B4imQ.png"><figcaption></figcaption></figure><p id="eee9">The role will have a prefix with the username:</p><figure id="7afa"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*7dKW5KiQMivtKqjgzA_1Gw.png"><figcaption></figcaption></figure><p id="a338">This role is granted access to:</p><ul><li>Read the<b> SandboxDevSecret.</b></li><li>Pull containers from the <b>sandbox Elastic Container Repository.</b></li><li>Use the <b>sandbox KMS key </b>to access decrypt the secret and the container in the repository</li></ul><h2 id="df90">Create the Automation user</h2><p id="b752">Create the <b>SandboxDevAutomation</b> user. Do not give this user console access.</p><figure id="ddeb"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*QWVvQMA9aDCtmiVxSR61iw.png"><figcaption></figcaption></figure><p id="c19e">Remember that I already have a role (<b>CloneGitHubtoCodeCommitRole</b>) used by my batch job from prior posts. Create a policy that allows the SandboxDevAutomation user to use STS to assume that role.</p><p id="559f">The <b>SandboxDev</b> user needs permission to change the <b>credentials</b> <b>and</b> MFA device of the <b>SandboxDevAutomation</b> user.</p><h2 id="0f53">Edit the batch job role trust policy to allow the SandboxDevAutomation role to assume it</h2><p id="7f1d">We need to modify the trust policy to allow the <b>SandboxDevAutomation</b> <b>user</b> to assume the <b>CloneGitHubtoCodeCommitRole</b> role with MFA.</p><figure id="6ad1"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*xAHGslW3SSbv6c5NO8mhzg.png"><figcaption></figcaption></figure><p id="7ad0">Edit the trust policy:</p><figure id="cfaf"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*Vna71G_F2e-8Vdtw4yBwFw.png"><figcaption></figcaption></figure><p id="6a5a">Change the user to SandboxDev:</p><figure id="f788"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*vpSqEqjFa_qg59v_dnPCzQ.png"><figcaption></figcaption></figure><h2 id="49b3">Add permissions to KMS Key Resource Policy</h2><p id="8cf1">Next I need to allow the <b>SandboxDev</b> user to encrypt and decrypt and the <b>SanboxDevEC2Role</b> to decrypt with the <b>sandbox KMS Key.</b> I edit my automation to add those two roles to the encrypt and decrypt users.</p><figure id="380f"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*UkzCt10p0iqCR4OpMs6uhQ.png"><figcaption></figcaption></figure><h2 id="d015">Login as SandboxDev</h2><p id="725d">Log into the AWS Console with the SandboxDev user. If you’ve been following along, you have an account with a prefix specific to your organization and -Dev at the end if you used my deployment scripts.</p><figure id="13d5"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*5L-3C9ORVXOWv6KRdCkBLg.png"><figcaption></figcaption></figure><h2 id="d260">Add MFA devices</h2><p id="5cca">Add a Hardware MFA device to the SandboxDev User.</p><figure id="21f0"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*8s8rTuyWOsLAQUEqfwTtOQ.png"><figcaption></figcaption></figure><p id="c0e6">Add a Virtual MFA device to the SandboxDevAutomation User.</p><p id="5cec">I explain why I do not use a Yubikey to generate MFA codes here:</p><div id="1308" class="link-block"> <a href="https://readmedium.com/the-yubikey-cli-and-aws-mfa-50e6be0698a7"> <div> <div> <h2>The Yubikey CLI and AWS MFA</h2> <div><h3>ACM.11 Considering the attack surface and MFA choices for our Security Batch Jobs</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*SFAKbcK__GlbJbJJJVXK9w.png)"></div> </div> </div> </a> </div><figure id="5893"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*iFl4DTQNuplt-SGONHpNYw.png"><figcaption></figcaption></figure><h2 id="d7df">Create automation credentials</h2><p id="b9e4">Create an <b>Access key</b> for the <b>SandboxDevAutomation</b> user.</p><figure id="7f1e"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*KoVfxp-aJvzBiacPyFeMlA.png"><figcaption></figcap

Options

tion></figure><p id="217e">I have explained before that I disagree with the verbiage on this page. The CLI in the browser has a much larger attack surface and it depends how you are using the keys.</p><figure id="0423"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*_CCe4xu8AcNLloUHgvF5Aw.png"><figcaption></figcaption></figure><h2 id="8caa">Store the credentials in the SandboxDevAutomationSecret</h2><p id="24aa">Head to the Secrets Manager dashboard.</p><p id="432d">Click on the SandboxDevAutomationSecret.</p><figure id="6893"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*cz9jnYSnBsGXf9Y8VZjGPQ.png"><figcaption></figcaption></figure><p id="f616">Store the secret key id and secret access key.</p><figure id="4b95"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*-G9eR929nKSsGWrsOuzucg.png"><figcaption></figcaption></figure><h2 id="5496">Test Launching an EC2 Instance with the SandboxDev role</h2><p id="8907">Head over the EC2 dashboard and test launching an EC2 Instance. Recall that the Instance name needs to match what we specified in the policy above.</p><figure id="a1c7"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*FqCLLp7V854JJZa88TIdvA.png"><figcaption></figcaption></figure><p id="2bc8">If you need to decode any error messages I explained how to do that here:</p><div id="bb13" class="link-block"> <a href="https://readmedium.com/decoding-aws-error-messages-db0e0cbecf0d"> <div> <div> <h2>Decoding AWS Error Messages</h2> <div><h3>Free Content on Jobs in Cybersecurity | Sign up for the Email List</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div> </div> </div> </a> </div><p id="bd85">Choose the existing networking created for EC2 instances from prior posts.</p><div id="a149" class="link-block"> <a href="https://readmedium.com/automating-cybersecurity-metrics-890dfabb6198"> <div> <div> <h2>Automating Cybersecurity Metrics (ACM)</h2> <div><h3>A series of blog posts on cybersecurity metrics and security automation</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*L9lEIsaWt6xm2Op2ww-G5w.png)"></div> </div> </div> </a> </div><p id="2937">Choose the role we created under Advanced details.</p><figure id="8870"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*oHJior3Ueea6woDB1zqqKQ.png"><figcaption></figcaption></figure><p id="a822">One note that took me a bit to resolve. The message when your user does not have permission to pass the IAM role to the EC2 instance is a bit ambiguous.</p><div id="a0fb" class="link-block"> <a href="https://readmedium.com/ambiguous-error-message-when-a-user-doesnt-have-permission-to-pass-a-specific-iam-role-to-an-ec2-b005f338b6df"> <div> <div> <h2>Ambiguous Error Message When a User Doesn’t Have Permission to Pass a Specific IAM Role to an EC2…</h2> <div><h3>This error message needs to be more specific and doesn’t show up in CloudTrail for the User Name</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div> </div> </div> </a> </div><p id="51b2">Getting the resources setup took some time because I realized I had to revise my approach. I didn’t automate any of this but I will in the future. For now I just want to make sure it works. I can also figure out what permissions each policy requires.</p><p id="1fb5">I will test the initialization script in the next post.</p><p id="2c31">Follow for updates.</p><p id="4a3a">Teri Radichel | <i>© <a href="https://2ndsightlab.com/?source=post_page---------------------------">2nd Sight Lab</a> 2023</i></p><div id="8b5f"><pre><span class="hljs-section">About Teri Radichel:

⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab</pre></div><div id="caae"><pre><span class="hljs-section">Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span>
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation</pre></div><div id="530b"><pre>Follow <span class="hljs-keyword">for</span> more stories like <span class="hljs-keyword">this</span>:

❤️ Sign Up my Medium Email List ❤️ Twitter: <span class="hljs-meta">@teriradichel</span> ❤️ LinkedIn: https:<span class="hljs-comment">//www.linkedin.com/in/teriradichel</span> ❤️ Mastodon: <span class="hljs-meta">@teriradichel</span><span class="hljs-meta">@infosec</span>.exchange ❤️ Facebook: 2nd Sight Lab ❤️ YouTube: @2ndsightlab</pre></div><figure id="eecf"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/0*H9Ew1KCl-29nZiPR.jpeg"><figcaption></figcaption></figure></article></body>

Discover Your Matter Meter

Why Mattering is the Key to a Passion-Struck Life

Picture Credit: Passion Struck podcast and Dmitry Berdnyk on Unsplash

Ever felt like you’re just going through the motions, a tiny fish in an endless ocean of routines and expectations? We’ve all been there, navigating the vastness of life, sometimes feeling lost and insignificant.

But here’s the transformative truth — you are more than just a small part of this vast cosmos. You have the potential to live intentionally, to ignite the spark of self-belief and purpose within you. Finding your “matter meter” is your first step toward a life of confidence and purpose.

Your journey towards embracing your true self begins with recognizing your inherent worthiness. Despite the world’s noise and naysayers, it’s crucial to remember: Your value is not diminished by others’ failure to recognize your brilliance.

This path is not about ego or arrogance; it’s about discovering and living in harmony with your authentic self, the very essence of becoming Passion Struck.

Picture Credit: John R. Miles

The Concept of Mattering in Self-Confidence

Believing that you matter is like having a secret weapon. It’s this inner conviction, an unshakeable faith, that tells you, “Hey, I count.” This belief shapes your self-confidence and molds how you see yourself.

But let’s delve deeper: what does ‘mattering’ truly mean? At its core, it’s the sense that others value us and that our presence has weight and significance. When we feel that we matter to someone, it nurtures our self-esteem and fortifies our self-assurance.

Realize your inner worth — it’s a game-changer. This conviction, that you’re significant to others, acts as a compass guiding you through life’s rough seas and smooth sailings. — John R. Miles

You might wonder, “How can believing in my own significance enhance my confidence?” Imagine for a moment your life as a ship navigating the expansive ocean of experiences. Each wave represents the challenges and opportunities that life presents. In this journey, your sense of mattering is like a compass, guiding you through rough seas while also letting you enjoy smooth sailings.

If you ever thought, ‘Do I even make any difference?’, welcome aboard. We’ve all been there at some point — questioning our worthiness amidst societal expectations and pressures. But let me tell you something surprising — this questioning isn’t necessarily bad.

In fact, such questions could serve as wake-up calls, pushing us towards realizing our true value — an essential step for nurturing self-confidence. So, rather than shying away from these unsettling thoughts, why not use them as stepping stones toward recognizing our significance?

Finding Your Matter Meter

Your “Matter Meter” — the level at which you feel significant — plays a vital role in shaping your self-confidence. But it’s not something you can get off the shelf at Target or order from Amazon Prime. You’ve got to dig deep within yourself to find it.

The “Matter Meter” represents a personal gauge or measurement of how much you believe in your own worth and significance. It’s a way of assessing how much you feel you matter in the various aspects of your life, such as in your relationships, career, or personal growth. The idea is to help individuals understand and recognize their intrinsic value and how this belief (or lack thereof) impacts their self-confidence and overall outlook on life.

Photo by Thomas Kelley on Unsplash

Finding your Matter Meter involves several steps:

1. Self-Reflection: Engage in introspection to understand your feelings, thoughts, and beliefs about yourself. Reflect on your strengths, achievements, and values. Consider what makes you feel valuable and appreciated.

2. Understanding Your Value: Recognize that external factors like social status, wealth, or the opinions of others don’t determine your worth. Your value comes from your character, actions, and impact on the people and world around you.

3. Overcoming Self-Doubt: Identify and challenge your negative beliefs about yourself. Replace self-critical thoughts with more positive and realistic ones. Understand that doubts and fears are common, but they don’t define your true worth.

4. Seeking Feedback: Sometimes, it can be helpful to ask trusted friends, family members, or colleagues for their honest perceptions of your strengths and contributions. This feedback can offer a different perspective and help reinforce your sense of value.

5. Acknowledging Achievements: Celebrate your successes, no matter how small. Acknowledging your achievements helps to build self-confidence and reinforce your sense of mattering.

6. Aligning Actions with Values: Live in a way that reflects your values and beliefs. When your actions are congruent with what you believe in, it reinforces your sense of self-worth and purpose.

Finding your Matter Meter is an ongoing process. It’s about continually nurturing your self-belief and recognizing your unique qualities and abilities that make you matter in this world.

This journey aligns with the essence of becoming Passion Struck. It’s about uncovering your unique value, harnessing it, and steering your life’s ship with the compass of self-belief and purpose. As we embrace this journey, we affirm our significance and inspire others to recognize and celebrate their own.

Self-Reflection and Discovering Your True Value

You might be wondering, “What’s so special about self-reflection?” Well, let me tell you a little secret. Self-reflection is like holding up a mirror to your soul. It lets you see what others can’t: your true value.

We often diminish our own value by constantly comparing ourselves to others. Embrace your uniqueness, for you are the most extraordinary person you will ever meet.

The Essence of Self-Reflection

As I discuss in my upcoming book “Passion Struck,” self-reflection is akin to shining a light on your inner world, illuminating the strengths, passions, and values that define you. It’s about peering beyond the surface to recognize your intrinsic worth, which often remains unseen in the hustle of everyday life. Through this process, you gain clarity about your thoughts and feelings, fostering a deeper sense of self-assurance.

Self-reflection isn’t just about introspection; it’s your gateway to recognizing your true worth. — John R. Miles

This newfound confidence becomes your internal compass, steering your decisions and actions toward authenticity, in line with your true self rather than societal expectations.

Discovering your true worth transcends materialistic measures like wealth or social media popularity. Instead, it involves understanding the unique blend of skills, talents, and experiences that only YOU bring to the table.

  • Your kindness could help someone through their darkest days,
  • Your creativity could inspire millions,
  • Your resilience may motivate others never to give up, even when life gets tough.

A Simple Exercise To Uncover Your Intrinsic Worth

If I’ve piqued your interest now (I hope I have.), here’s an easy exercise for discovering your value:

1. Reflect on three recent actions where you positively impacted someone’s life. It could range from offering a listening ear to a friend to preparing a meal for your family.

2. Contemplate the qualities these actions reveal about you. Are they indicative of your empathy, generosity, or compassion?

As you uncover these attributes, you’re not just acknowledging your actions; you’re embracing the core of who you are. In doing so, you’re taking a significant step towards living a Passion Struck life, one where every action and choice resonates with your true self, fueling a life of purpose and fulfillment.

The Benefits Of Embracing Your Worth

Understanding and acknowledging your intrinsic value is not just a feel-good exercise; it’s a transformative process with profound impacts across various facets of your life. This self-recognition, brings about a cascade of positive changes:

  • Enhanced Self-Esteem: When you recognize and embrace your unique value, it naturally bolsters your self-esteem. You begin to see yourself more positively, appreciating your abilities and contributions.
  • Enhanced Mental Well-being: This recognition plays a pivotal role in improving your mental health. Understanding your worth reduces feelings of inadequacy and self-doubt, paving the way for a healthier mindset.
  • Fostering Stronger Relationships: Acknowledging your value sets a benchmark for how you expect to be treated by others. It encourages you to cultivate relationships that are respectful, supportive, and aligned with your sense of self-worth.
  • Boosted Resilience: Knowing your worth equips you with the strength to rebound from challenges more effectively. You become more resilient, viewing setbacks as opportunities for growth rather than insurmountable obstacles.
  • Informed Decision-Making: With a firm grasp of your intrinsic value, your decisions align more with your beliefs and aspirations. You’re more likely to make choices that reflect your true self and advance your goals.
  • Heightened Life Satisfaction: Recognizing and embracing your value often leads to a more profound sense of fulfillment and fulfillment. It allows you to live more authentically, pursuing paths that resonate with your inner values and aspirations.

In essence, realizing your worth is a critical step towards living a Passion Struck life — a life characterized by intentionality, purpose, and a deep sense of fulfillment. It’s about honoring your true self and allowing that recognition to guide you toward a richer, more meaningful existence.

Find Your Matter Meter and Achieve Your Goals

Believing in yourself starts with acknowledging your worthiness. Remember, you’re more than a speck in the cosmos. Far more than just a fleeting moment in time.

Your self-confidence grows when you embrace this fact and live authentically from that place of belief. It’s about aligning your actions and choices with the authentic essence of who you are. Embrace the truth of your worthiness by discovering your Matter Meter, and let it be the foundation upon which your self-assuredness is built.

I also wrote about Mattering, which is essential for helping you learn how you can impact the world.

Thank you for taking the time to engage with my perspectives. May your journey be filled with joy, growth, and fulfillment.

As a new reader, please check my personal growth and well-being stories reflecting my reviews, observations, and decades of research and interviews.

The Power of Choice, Overcoming Traumatic Brain Injury, Reverse Aging, Significance, Optimal Anxiety, Person of Courage, The Power of Hope, Being Stuck, Curiosity, Awe, 5 AM Club, Strong Moral Compass, Psychological Immune System, Playing The Long Game, Drama Addiction, Trust Building Exercises, Taking The Road Less Traveled, Why Passion is the New Currency, Unreseasonable Hospitality, Five Senses, Digital Addiction, When to Quit, Effortless Perfection, Mental Immunity, Sensory Experiences, The Value of Struggle, Overcome Challenges, Victim Mentality, Anger Management, Gratitude, Vulnerability, Free Will, and the Power of Asking.

You might find more information about my professional background. You can listen to the #1 Alternative Health Podcast, Passion Struck, with John R. Miles. You may join Medium with my referral link to enjoy unlimited content.

Self Belief
Intentional Living
Personal Development
Personal Growth
Self Improvement
Recommended from ReadMedium