Free AI web copilot to create summaries, insights and extended knowledge, download it at here
12411
Abstract
edium.com/v2/resize:fit:320/1*qEnNUfmUwWXxNajEWO2VVg.png)"></div>
</div>
</div>
</a>
</div><p id="f7b7">Keeping credentials out of GitHub when programs need them to perform actions at run time.</p><div id="06ed" class="link-block">
<a href="https://readmedium.com/keeping-credentials-out-of-github-53534dee341d">
<div>
<div>
<h2>Keeping Credentials Out of GitHub</h2>
<div><h3>ACM.48: Manually creating a Lambda function to retrieve secrets from secrets manager</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*yZ_RnQu-VtFVjNhpvvxCDQ.png)"></div>
</div>
</div>
</a>
</div><p id="2da8">I wanted to automate the process of creating a <a href="https://readmedium.com/components-for-a-static-web-site-on-aws-8ed895a8cf0f">static website on AWS S3</a>. Automating the GitHub repository creation is one of the steps.</p><div id="de47" class="link-block">
<a href="https://readmedium.com/create-a-new-github-repository-using-the-command-line-ed197a788052">
<div>
<div>
<h2>Create a New GitHub Repository Using the Command Line</h2>
<div><h3>ACM.228 git command line versus the git CLI and related credential issues</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*b7uktPAgKq1sfWdYbMDE3g.png)"></div>
</div>
</div>
</a>
</div><div id="d5db" class="link-block">
<a href="https://readmedium.com/preventing-sensitive-files-in-github-with-a-gitignore-file-b336c2012a29">
<div>
<div>
<h2>Preventing Sensitive Files in GitHub with a .gitignore file</h2>
<div><h3>ACM.233 Keeping sensitive data out of GitHub by default</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*9FiOMbpJS59Rqdt8KrPEvA.png)"></div>
</div>
</div>
</a>
</div><div id="92dc" class="link-block">
<a href="https://readmedium.com/protected-git-branches-e3267e798716">
<div>
<div>
<h2>Protected Git Branches</h2>
<div><h3>ACM.234 GitHub Protected branches and Rulesets to prevent unauthorized and unwanted deletions, merges, and unsigned…</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*hI5yJuS8o9Bhhqa-uAieBw.png)"></div>
</div>
</div>
</a>
</div><p id="752e">Populating a repository with files from an AWS S3 bucket.</p><div id="98f1" class="link-block">
<a href="https://readmedium.com/migrating-code-from-s3-to-a-new-github-repository-eebf6c9c0ada">
<div>
<div>
<h2>Migrating Code from S3 to a New GitHub Repository</h2>
<div><h3>Part of my series on Automating Cybersecurity Metrics. Secure Code. GitHub. The Code. Sign up for more stories like…</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*brsx3OJZzp4CLH79DVpJZA.png)"></div>
</div>
</div>
</a>
</div><p id="6a02">Github Actions ~ components and threat modeling</p><div id="abc5" class="link-block">
<a href="https://readmedium.com/github-actions-f4f7ba4cfdda">
<div>
<div>
<h2>GitHub Actions</h2>
<div><h3>ACM.255 Triggering an update to a website when code gets checked into GitHub</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*KqFWhWL1fKAJq9U7CyLh_w.png)"></div>
</div>
</div>
</a>
</div><div id="f95f" class="link-block">
<a href="https://readmedium.com/security-best-practices-for-github-actions-cabd40fd8bc7">
<div>
<div>
<h2>Security Best Practices for GitHub Actions</h2>
<div><h3>ACM.256 Options for Hardening GitHub Actions According to GitHub</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*0aI3LrDvtouQv0EQ5m1kFQ.png)"></div>
</div>
</div>
</a>
</div><p id="73e5">Other ways to trigger deployments with integrity checking and backups</p><div id="9656" class="link-block">
<a href="https://readmedium.com/alternatives-to-github-actions-541d2089abdb">
<div>
<div>
<h2>Alternatives to GitHub Actions</h2>
<div><h3>ACM.257 Push Versus Pull and Considering Who Can Deploy Resources On Your Behalf</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*_6UADSD-gkIJBNiHGz3ufQ.png)"></div>
</div>
</div>
</a>
</div><div id="69d3" class="link-block">
<a href="https://readmedium.com/a-script-to-checking-in-code-ebc3b7a9c235">
<div>
<div>
<h2>A Script For Checking In Code to GitHub</h2>
<div><h3>ACM.258 Create a function to check in code that can eventually trigger a deployment at the same time</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*zNsUW0F66Ha-cq-IjcmJGg.png)"></div>
</div>
</div>
</a>
</div><div id="4f28" class="link-block">
<a href="https://readmedium.com/create-an-aws-code-commit-repository-with-cloudformation-d0629cc7608d">
<div>
<div>
<h2>Create an AWS Code Commit Repository With CloudFormation</h2>
<div><h3>ACM.260 Automated creation and governance for source control repositories</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*PRwBXo8uylvMnurZo8cv4g.png)"></div>
</div>
</div>
</a>
</div><div id="2a90" class="link-block">
<a href="https://readmedium.com/using-git-commands-with-aws-code-commit-6f5e34703e9c">
<div>
<div>
<h2>Using Git Commands with AWS Code Commit</h2>
<div><h3>ACM.261 Setting up git credentials for AWS CodeCommit in the AWS IAM console</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*F8ZkG_30Ciyal1_HW83CHw.png)"></div>
</div>
</div>
</a>
</div><div id="e39d" class="link-block">
<a href="https://readmedium.com/network-security-for-aws-code-commit-a3a4d056c70b">
<div>
<div>
<h2>Network Security for AWS CodeCommit Git Repositories</h2>
<div><h3>ACM.262 Limiting access to your repositories to your private network</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*uTYePZc784CyU-H-x7XiYw.png)"></div>
</div>
</div>
</a>
</div><div id="4973" class="link-block">
<a href="https://readmedium.com/iam-policies-for-aws-codecommit-8e6c6d47847c">
<div>
<div>
<h2>IAM Policies for AWS CodeCommit</h2>
<div><h3>ACM.263 Creating granular permissions for AWS CodeCommit and cross-account options</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*UjXsMophpRo0DC296kN8Gg.png)"></div>
</div>
</div>
</a>
</div><p id="69c1">I had to fix my Python version and configuration on AWS EC2 to get MFA working with AWS CodeCommit.</p><div id="cf1b" class="link-block">
<a href="https://readmedium.com/fixing-your-python-version-on-aws-ec2-with-amazon-linux-149145d3a1d1">
<div>
<div>
<h2>Fixing Your Python Version on AWS EC2 with Amazon Linux</h2>
<div><h3>ACM.264 When you don’t get the version of Python you think you should be getting</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*lXiCvF176TZY7lnuOuxyfA.png)"></div>
</div>
</div>
</a>
</div><div id="a67d" class="link-block">
<a href="https://readmedium.com/require-mfa-for-git-commands-with-aws-codecommit-9a531dc5ba3e">
<div>
<div>
<h2>Require MFA for Git Commands With AWS CodeCommit</h2>
<div><h3>ACM.265 Leveraging short term, rotating credentials via an AWS Role Profile, no git credentials, and…</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*CG8Dq2ggUVOKpe0GX51OXQ.png)"></div>
</div>
</div>
</a>
</div><p id="1107">Creating a Lambda function and network that can access GitHub Cloud</p><div id="9ab6" class="link-block">
<a href="https://readmedium.com/lambda-networking-best-practices-4feb970d5b40">
<div>
<div>
<h2>Lambda Networking Best Practices</h2>
<div><h3>ACM.267 How A VPC would have protected your application from a Log4J vulnerability attack — or not</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*BrE2eA_L2-LyL6Vv8cy5sg.png)"></div>
</div>
</div>
</a>
</div><div id="7862" class="link-block">
<a href="https://readmedium.com/lambda-functions-as-batch-jobs-750ab73c48d">
<div>
<div>
<h2>Lambda Functions as Batch Jobs</h2>
<div><h3>ACM.268 Lambda functions for short-lived batch operations</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*on53exAVnJul9ZSGoAiILQ.png)"></div>
</div>
</div>
</a>
</div><div id="5bb5" class="link-block">
<a href="https://readmedium.com/aws-vpc-with-a-nat-1a1253f93b4b">
<div>
<div>
<h2>AWS VPC with a NAT</h2>
<div><h3>ACM.269 Setting up a NAT to allow outbound Internet Access From a Private VPC</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*SHuTSF4mzKG15jmOPCXcyw.png)"></div>
</div>
Options
</div>
</a>
</div><div id="f96d" class="link-block">
<a href="https://readmedium.com/aws-transit-gateway-with-a-nat-and-network-security-options-38e784efd62e">
<div>
<div>
<h2>AWS Transit Gateway with a NAT and Network Security Options</h2>
<div><h3>ACM.270 AWS Network Firewall, Packet Mirroring, and Open Source IDS and IPS</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/0*j1S15gsHwVdEV5SC.jpg)"></div>
</div>
</div>
</a>
</div><div id="ca40" class="link-block">
<a href="https://readmedium.com/architecture-with-transit-gateway-in-an-aws-organization-ee1c218ed469">
<div>
<div>
<h2>Architecture with Transit Gateway in an AWS Organization</h2>
<div><h3>ACM.271 There’s no one size fits all solution — design according to your business requirements</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*c7mTTFfkbAV1yDyr9A4yoQ.png)"></div>
</div>
</div>
</a>
</div><div id="8ace" class="link-block">
<a href="https://readmedium.com/deploy-a-public-and-private-subnet-in-an-aws-vpc-41b1b5dd6364">
<div>
<div>
<h2>Deploy a Public and Private Subnet in an AWS VPC</h2>
<div><h3>ACM.274 Creating multiple subnets with different route tables</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*lI3cnV-AnZKCJ2RTes47Ew.png)"></div>
</div>
</div>
</a>
</div><div id="8226" class="link-block">
<a href="https://readmedium.com/vpc-and-nat-and-a-vpcendpoint-deployed-with-cloudformation-229870a3d008">
<div>
<div>
<h2>VPC with a NAT and a VPC Endpoint Deployed With CloudFormation</h2>
<div><h3>ACM.276 Allow a Lambda function in a private network to access GitHub via a NAT and AWS CodeCommit via a VPC Endpoint</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*ATydmwQCAJMoXOh1zRHg8A.png)"></div>
</div>
</div>
</a>
</div><div id="3930" class="link-block">
<a href="https://readmedium.com/installing-git-in-a-container-8b1324985160">
<div>
<div>
<h2>Installing Git in a Container</h2>
<div><h3>ACM.278 Installing software in a container</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*7t5JM76TDzMuetflGUCdMg.png)"></div>
</div>
</div>
</a>
</div><div id="b6cc" class="link-block">
<a href="https://readmedium.com/cloning-git-repositories-in-a-container-e8b09c508d5f">
<div>
<div>
<h2>Cloning git Repositories in a Container</h2>
<div><h3>ACM.280 Executing commands when building an image versus when you run a container based on the image</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*QwIJ4lIuWqdUC-5r0XnJUw.png)"></div>
</div>
</div>
</a>
</div><div id="52ff" class="link-block">
<a href="https://readmedium.com/using-git-secrets-and-github-policies-to-keep-secrets-out-of-github-a760e07e07e2">
<div>
<div>
<h2>Using git-secrets and GitHub policies To Keep Secrets Out of GitHub</h2>
<div><h3>ACM.427 Checking the code before it gets into your GitHub repositories</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*TuHgR-KyEA0N7kOYMqHusg.png)"></div>
</div>
</div>
</a>
</div><p id="e7bd">GuardRails in GitHub. I tried out because I know one of the founders of this company (a very nice guy.) Full disclosure, I did get paid and they sponsored my blog in the process. The concept of preventing mistakes before they get to production is great! This is one way to do it.</p><div id="05a9" class="link-block">
<a href="https://readmedium.com/guardrails-in-github-74e860e0b530">
<div>
<div>
<h2>Guardrails on Github</h2>
<div><h3>The term “guardrails” has become very popular in the realm of cloud security lately. </h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*KDRlqz37ZzAnOEpvVehSOg.png)"></div>
</div>
</div>
</a>
</div><p id="8041">Error messages and troubleshooting with git, GitHub, and Code Commit:</p><div id="745d" class="link-block">
<a href="https://readmedium.com/github-admin-profile-not-showing-all-allowed-ip-addresses-0ecbb0004433">
<div>
<div>
<h2>GitHub Admin Profile Not Showing All Allowed IP Addresses</h2>
<div><h3>After switching to the new organization setup, something doesn’t seem right</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div>
</div>
</div>
</a>
</div><div id="e76a" class="link-block">
<a href="https://readmedium.com/pathspec-repository-did-not-match-any-file-s-known-to-git-b4c02842aa70">
<div>
<div>
<h2>pathspec ‘repository’ did not match any file(s) known to git</h2>
<div><h3>Nonsense git error message based on the actual problem</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div>
</div>
</div>
</a>
</div><div id="3005" class="link-block">
<a href="https://readmedium.com/error-src-refspec-master-does-not-match-any-71b0e0750e38">
<div>
<div>
<h2>error: src refspec master does not match any.</h2>
<div><h3>Similar to a prior git error when trying to push files but not exactly</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div>
</div>
</div>
</a>
</div><div id="6e98" class="link-block">
<a href="https://readmedium.com/pathspec-repository-did-not-match-any-file-s-known-to-git-b4c02842aa70">
<div>
<div>
<h2>pathspec ‘repository’ did not match any file(s) known to git</h2>
<div><h3>Nonsense git error message based on the actual problem</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div>
</div>
</div>
</a>
</div><div id="d6a8" class="link-block">
<a href="https://readmedium.com/removing-sensitive-files-from-github-and-all-their-history-1981b0c6e1c">
<div>
<div>
<h2>Removing Sensitive Files from GitHub and All their History</h2>
<div><h3>Errors trying to run git filter-repo — invert-paths</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div>
</div>
</div>
</a>
</div><div id="f8ad" class="link-block">
<a href="https://readmedium.com/git-rebase-3c564fffeef8">
<div>
<div>
<h2>Git Rebase</h2>
<div><h3>Every mess up your git commits?</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div>
</div>
</div>
</a>
</div><div id="814f" class="link-block">
<a href="https://readmedium.com/ssh-error-github-or-aws-cloudformation-d44b88fed703">
<div>
<div>
<h2>SSH Error — Github or AWS CloudFormation?</h2>
<div><h3>While trying to access the Github meta API to get a list of CIDRs to put into an AWS Prefix List…</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div>
</div>
</div>
</a>
</div><div id="497a" class="link-block">
<a href="https://readmedium.com/atom-is-being-deprecated-for-github-codespaces-419ceb4ead81">
<div>
<div>
<h2>Atom is being deprecated for GitHub Codespaces</h2>
<div><h3>Replacing free, open-source software with a paid product (that is not cheap)</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*4oxP4LXk8l8c3mpRvO7ejg.png)"></div>
</div>
</div>
</a>
</div><p id="8449">Follow for updates.</p><p id="4a3a">Teri Radichel | <i>© <a href="https://2ndsightlab.com/?source=post_page---------------------------">2nd Sight Lab</a> 2023</i></p><div id="8b5f"><pre><span class="hljs-section">About Teri Radichel:
⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab</pre></div><div id="caae"><pre><span class="hljs-section">Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span>
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation</pre></div><div id="5a42"><pre>Follow <span class="hljs-keyword">for</span> more stories like <span class="hljs-keyword">this</span>:
❤️ Sign Up my Medium Email List
❤️ Twitter: <span class="hljs-meta">@teriradichel</span>
❤️ LinkedIn: https:<span class="hljs-comment">//www.linkedin.com/in/teriradichel</span>
❤️ Mastodon: <span class="hljs-meta">@teriradichel</span><span class="hljs-meta">@infosec</span>.exchange
❤️ Facebook: 2nd Sight Lab
❤️ YouTube: @2ndsightlab</pre></div><figure id="faf5"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/0*H9Ew1KCl-29nZiPR.jpeg"><figcaption></figcaption></figure></article></body>
