avatarAiden (Illumination Gaming)

Free AI web copilot to create summaries, insights and extended knowledge, download it at here

5791

Abstract

7156">I covered user-specific secrets here:</p><div id="744d" class="link-block"> <a href="https://readmedium.com/create-a-per-user-secret-in-secrets-manager-part-1-bb97b66e2a2d"> <div> <div> <h2>User-Specific Secrets on AWS: IAM Policies</h2> <div><h3>ACM.82 IAM Policies to allow users to describe their own secrets</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*PcniDpBJq2db0jbdryc_Nw.png)"></div> </div> </div> </a> </div><h2 id="aada">Create the user-specific Secret to store the automation credentials</h2><p id="a515">Next I create <b>SandboxDevAutomationSecret</b> in Secrets Manager, encrypted with my <b>Sandbox KMS key</b>.</p><figure id="e15e"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*DQonCyF8UzPnZZoiGOKD9w.png"><figcaption></figcaption></figure><figure id="f7b3"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*zITxEtD__wFDwpPrBpqv4w.png"><figcaption></figcaption></figure><h2 id="2e63">Create a user-specific EC2 instance role for the SandboxDev user</h2><p id="3417">Next I create an EC2 instance role that the developer is allowed to pass to EC2 instances named <b>SandboxDevEC2Role</b>.</p><figure id="44ef"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*__fohZeTWjwdYrS__B4imQ.png"><figcaption></figcaption></figure><p id="eee9">The role will have a prefix with the username:</p><figure id="7afa"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*7dKW5KiQMivtKqjgzA_1Gw.png"><figcaption></figcaption></figure><p id="a338">This role is granted access to:</p><ul><li>Read the<b> SandboxDevSecret.</b></li><li>Pull containers from the <b>sandbox Elastic Container Repository.</b></li><li>Use the <b>sandbox KMS key </b>to access decrypt the secret and the container in the repository</li></ul><h2 id="df90">Create the Automation user</h2><p id="b752">Create the <b>SandboxDevAutomation</b> user. Do not give this user console access.</p><figure id="ddeb"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*QWVvQMA9aDCtmiVxSR61iw.png"><figcaption></figcaption></figure><p id="c19e">Remember that I already have a role (<b>CloneGitHubtoCodeCommitRole</b>) used by my batch job from prior posts. Create a policy that allows the SandboxDevAutomation user to use STS to assume that role.</p><p id="559f">The <b>SandboxDev</b> user needs permission to change the <b>credentials</b> <b>and</b> MFA device of the <b>SandboxDevAutomation</b> user.</p><h2 id="0f53">Edit the batch job role trust policy to allow the SandboxDevAutomation role to assume it</h2><p id="7f1d">We need to modify the trust policy to allow the <b>SandboxDevAutomation</b> <b>user</b> to assume the <b>CloneGitHubtoCodeCommitRole</b> role with MFA.</p><figure id="6ad1"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*xAHGslW3SSbv6c5NO8mhzg.png"><figcaption></figcaption></figure><p id="7ad0">Edit the trust policy:</p><figure id="cfaf"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*Vna71G_F2e-8Vdtw4yBwFw.png"><figcaption></figcaption></figure><p id="6a5a">Change the user to SandboxDev:</p><figure id="f788"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*vpSqEqjFa_qg59v_dnPCzQ.png"><figcaption></figcaption></figure><h2 id="49b3">Add permissions to KMS Key Resource Policy</h2><p id="8cf1">Next I need to allow the <b>SandboxDev</b> user to encrypt and decrypt and the <b>SanboxDevEC2Role</b> to decrypt with the <b>sandbox KMS Key.</b> I edit my automation to add those two roles to the encrypt and decrypt users.</p><figure id="380f"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*UkzCt10p0iqCR4OpMs6uhQ.png"><figcaption></figcaption></figure><h2 id="d015">Login as SandboxDev</h2><p id="725d">Log into the AWS Console with the SandboxDev user. If you’ve been following along, you have an account with a prefix specific to your organization and -Dev at the end if you used my deployment scripts.</p><figure id="13d5"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*5L-3C9ORVXOWv6KRdCkBLg.png"><figcaption></figcaption></figure><h2 id="d260">Add MFA devices</h2><p id="5cca">Add a Hardware MFA device to the SandboxDev User.</p><figure id="21f0"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*8s8rTuyWOsLAQUEqfwTtOQ.png"><figcaption></figcaption></figure><p id="c0e6">Add a Virtual MFA device to the SandboxDevAutomation User.</p><p id="5cec">I explain why I do not use a Yubikey to generate MFA codes here:</p><div id="1308" class="link-block"> <a href="https://readmedium.com/the-yubikey-cli-and-aws-mfa-50e6be0698a7"> <div> <div> <h2>The Yubikey CLI and AWS MFA</h2> <div><h3>ACM.11 Considering the attack surface and MFA choices for our Security Batch Jobs</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*SFAKbcK__GlbJbJJJVXK9w.png)"></div> </div> </div> </a> </div><figure id="5893"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*iFl4DTQNuplt-SGONHpNYw.png"><figcaption></figcaption></figure><h2 id="d7df">Create automation credentials</h2><p id="b9e4">Create an <b>Access key</b> for the <b>SandboxDevAutomation</b> user.</p><figure id="7f1e"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*KoVfxp-aJvzBiacPyFeMlA.png"><figcaption></figcap

Options

tion></figure><p id="217e">I have explained before that I disagree with the verbiage on this page. The CLI in the browser has a much larger attack surface and it depends how you are using the keys.</p><figure id="0423"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*_CCe4xu8AcNLloUHgvF5Aw.png"><figcaption></figcaption></figure><h2 id="8caa">Store the credentials in the SandboxDevAutomationSecret</h2><p id="24aa">Head to the Secrets Manager dashboard.</p><p id="432d">Click on the SandboxDevAutomationSecret.</p><figure id="6893"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*cz9jnYSnBsGXf9Y8VZjGPQ.png"><figcaption></figcaption></figure><p id="f616">Store the secret key id and secret access key.</p><figure id="4b95"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*-G9eR929nKSsGWrsOuzucg.png"><figcaption></figcaption></figure><h2 id="5496">Test Launching an EC2 Instance with the SandboxDev role</h2><p id="8907">Head over the EC2 dashboard and test launching an EC2 Instance. Recall that the Instance name needs to match what we specified in the policy above.</p><figure id="a1c7"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*FqCLLp7V854JJZa88TIdvA.png"><figcaption></figcaption></figure><p id="2bc8">If you need to decode any error messages I explained how to do that here:</p><div id="bb13" class="link-block"> <a href="https://readmedium.com/decoding-aws-error-messages-db0e0cbecf0d"> <div> <div> <h2>Decoding AWS Error Messages</h2> <div><h3>Free Content on Jobs in Cybersecurity | Sign up for the Email List</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div> </div> </div> </a> </div><p id="bd85">Choose the existing networking created for EC2 instances from prior posts.</p><div id="a149" class="link-block"> <a href="https://readmedium.com/automating-cybersecurity-metrics-890dfabb6198"> <div> <div> <h2>Automating Cybersecurity Metrics (ACM)</h2> <div><h3>A series of blog posts on cybersecurity metrics and security automation</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*L9lEIsaWt6xm2Op2ww-G5w.png)"></div> </div> </div> </a> </div><p id="2937">Choose the role we created under Advanced details.</p><figure id="8870"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/1*oHJior3Ueea6woDB1zqqKQ.png"><figcaption></figcaption></figure><p id="a822">One note that took me a bit to resolve. The message when your user does not have permission to pass the IAM role to the EC2 instance is a bit ambiguous.</p><div id="a0fb" class="link-block"> <a href="https://readmedium.com/ambiguous-error-message-when-a-user-doesnt-have-permission-to-pass-a-specific-iam-role-to-an-ec2-b005f338b6df"> <div> <div> <h2>Ambiguous Error Message When a User Doesn’t Have Permission to Pass a Specific IAM Role to an EC2…</h2> <div><h3>This error message needs to be more specific and doesn’t show up in CloudTrail for the User Name</h3></div> <div><p>medium.com</p></div> </div> <div> <div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div> </div> </div> </a> </div><p id="51b2">Getting the resources setup took some time because I realized I had to revise my approach. I didn’t automate any of this but I will in the future. For now I just want to make sure it works. I can also figure out what permissions each policy requires.</p><p id="1fb5">I will test the initialization script in the next post.</p><p id="2c31">Follow for updates.</p><p id="4a3a">Teri Radichel | <i>© <a href="https://2ndsightlab.com/?source=post_page---------------------------">2nd Sight Lab</a> 2023</i></p><div id="8b5f"><pre><span class="hljs-section">About Teri Radichel:

⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab</pre></div><div id="caae"><pre><span class="hljs-section">Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span>
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation</pre></div><div id="530b"><pre>Follow <span class="hljs-keyword">for</span> more stories like <span class="hljs-keyword">this</span>:

❤️ Sign Up my Medium Email List ❤️ Twitter: <span class="hljs-meta">@teriradichel</span> ❤️ LinkedIn: https:<span class="hljs-comment">//www.linkedin.com/in/teriradichel</span> ❤️ Mastodon: <span class="hljs-meta">@teriradichel</span><span class="hljs-meta">@infosec</span>.exchange ❤️ Facebook: 2nd Sight Lab ❤️ YouTube: @2ndsightlab</pre></div><figure id="eecf"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/0*H9Ew1KCl-29nZiPR.jpeg"><figcaption></figcaption></figure></article></body>

Gaming on Medium

Five Exciting New Games Releasing This Year

I briefly review each based on my years of gaming experience

Photo by Andrea Piacquadio on Pexels

Introduction

Dear Gamers,

I am the owner and chief editor of the ILLUMINATION Gaming publication on Medium, a new initiative of ILLUMINATION Integrated Publications. All gaming writers are invited.

As a passionate gamer, I’m always on the lookout for new games that are coming out which might be interesting. So I’ve compiled five games that are coming out this year that I’m looking forward to.

I briefly introduce each game and provide the release dates.

1 — Stray

Stray was initially announced on the 11th of June 2020 during the Playstation Future of Gaming event. This was the same event at which Sony’s Next-Generation Console was announced, the Playstation 5.

By checking the company’s website, I understand that Stray will be released on the 19th of July 2022. Stray will be released on multiple platforms such as Playstation 4, Playstation 5, and PC platforms. I wish it was on Xbox as well as some of my friends only use Xbox.

Stray is a third-person adventure game developed by BlueTwelve Studios. It’s set in the neon-lit alleys of a decaying cybercity.

In this game, we play as a cat while interacting with the environment in playful ways. The cat we play with is trying to find its way back to its family.

The game has you explore, platform, and puzzle-solve your way through the dystopian city. Once you find a friendly drone named B-12, you’ll gain access to certain items and even defend yourself against enemies called Zurks.

On launch, Stray will be part of the Playstation Plus Extra and Premium subscriptions which I wrote about in a recent article.

2 — Overwatch 2

Overwatch was announced three years after the release of the original Overwatch game. Blizzard Entertainment announced it at their annual gaming convention, BlizzCon.

Overwatch 2 is a first-person shooter and a direct sequel to the original Overwatch game, which was released in 2016.

Unlike the first game, Overwatch 2 will have a story/PvE (Player vs. Environment) mode. In addition, it will feature narrative-driven content to delve into the story of Overwatch’s setting and characters.

I am pleased to know that Overwatch 2 will be released on the 4th of October 2022. It will be available on several platforms like Playstation 4, Playstation 5, Xbox One, Xbox Series X/S, and PC platforms.

Additionally, much like the original game, Overwatch 2 will have multiple PvP (Player vs. Player) game modes.

Including the much-loved competitive ranked game mode, it will work mostly the same as the first game aside from the team size being reduced from six to five.

Therefore the teams will have one Tank, two Damage, and two Support roles.

I introduce this game in another article.

3 — Call of Duty: Modern Warfare II

Call of Duty: Modern Warfare II was announced on the 8th of June 2022.

I am pleased that Call of Duty: Modern Warfare II will be released on the 28th of October 2022. This game also will be available on Playstation 4, Playstation 5, Xbox One, Xbox Series X/S, and PC platforms.

My understanding of the Call of Duty: Modern Warfare II is a first-person shooter game. It is developed by Infinity Ward. The game is a sequel to the 2019 Modern Warfare reboot.

The story aspect of the game is a direct continuation of the first Modern Warfare reboot. The game features several returning characters and takes place in 2022.

Aside from the story aspect, this game will have a very popular multiplayer/PvP (Player vs. Player) factor, just like other Call of Duty games.

The multiplayer aspect will include various game modes, which can be an entertaining and competitive way to play with our friends or with other players in your region.

Although it most likely won’t be featuring a ranked competitive game mode, It will still be a blast to play. So I’m looking forward to playing it with my friends.

4 — Hogwarts Legacy

The fourth game is called Hogwarts Legacy. I am especially excited about this game.

The game was known to be in development for a while but was officially announced on the 18th of March 2022 for release during the Playstation State of Play event.

Hogwarts Legacy will be released in December 2022. This game will be available on multiple platforms like Playstation 4, Playstation 5, Xbox One, Xbox Series X/S, Nintendo Switch, and PC platforms.

Hogwarts Legacy is an open-world RPG (Role Playing Game) set in the Harry Potter universe.

Hogwarts Legacy includes scenes in the late 1800s. It means we won’t bump into any of the cast from the Harry Potter movies, unfortunately.

The story has you as a completely customizable character who joins the school of witchcraft and wizardry late as a fifth-year student.

While experiencing the life of a Hogwarts student, we will also “embark on a dangerous journey to uncover a hidden truth of the wizarding world” — Source Warner Bros. Games.

The gameplay will play like other fantasy RPG games. Specifically, those with magical classes since the weapon you’ll use most of the time will be your personal magic wand.

At the beginning of the game, we’ll be able to choose which Hogwarts house we are sorted into and take classes such as: Charms, defence against the dark arts, Herbology, and Potions.

I am excited about mysteries to discover outside and inside the Hogwarts school grounds. In terms of combat, you’ll learn to use the combination of spells and potions in order to take down your enemies.

There are multiple spells for you to learn and incorporate into your play style.

You also won’t be alone in this journey. You’ll encounter multiple student companions during your stay at Hogwarts.

5 — Skate 4

The fifth game on my list is called Skate 4. This game was initially announced on the 18th of June 2020 during the EA Play Live event.

Although there isn’t a set release date, play-testing for Skate 4 will begin this month which could mean a late 2022 release.

Skate 4 will be available on Playstation 4, Playstation 5, Xbox One, Xbox Series X/S, and PC platforms.

Skate 4 is a third-person skateboarding game.

Although there hasn’t been much information released to the public about the game, it is speculated the gameplay will be very similar to earlier skate games such as Skate 3.

I describe the previous version (Skate 3) as a realistic take on skateboarding with a nicely tuned reimaged control scheme. It features a fun story with a bunch of challenges to complete to become the best skater.

A few online game modes also relied on team-play and encouraged playing alongside other players and gaming friends.

There was even the ability to create our own skate park.

It is speculated that Skate 4 will have similar gameplay to Skate 3 but hopefully with better graphics.

I believe gamers find the updates exciting.

Thank you for reading my stories. I wish you happy gaming!

If you enjoyed this story, you might also check my recent articles related to gaming.

Sample Gaming Stories In My Collection

Beginners Guide to Gaming Gear and Peripherals

How Mobile Gaming Has Evolved

Let’s Talk About Game Launchers and Storefronts

High on Life: The Upcoming Game Set in the Rick & Morty Universe

Five Exciting New Games Releasing This Year

Massively Multiplayer Online Role-Playing Games

The All-New PlayStation Plus Is Finally Here

Overwatch 2 Is Almost Here

What Computer Games Mean to Me and Why I Play Them

Do You Want to Learn How Slot Machines Work?

Let’s Talk About Idiosyncrasies of Teabagging in Gaming

Tribute to Technoblade (aka Alex) RIP

Invitation to my Gaming and YouTube Publications

I am editor of two publications on Medium. One is for YouTubers and another one for gamers. If you are interested in these topics, I look forward to hosting your stories and promoting them.

Here are the invitations providing the scope of publications and details to join.

1 — Invitation to Write for ILLUMINATION on YouTube Publication

2 — Invitation: Join ILLUMINATION Gaming Publication as a Writer

Writer applications can be sent via this weblink.

Here is a collection including my videos introducing our top writers.

Connection with Writers and Readers

I post informative articles in my field covering gaming, film-making, media, and design. You can subscribe my account to get notification when I post on Medium. I also support Illumination Integrated Publications as an editor.

Gaming
Gaming News
Games
Social Media
Writing
Recommended from ReadMedium