Changes

Jump to: navigation, search

OSL840 Lab 1

7 bytes added, 21:56, 13 September 2022
no edit summary
* And the most common of all: resources that don't have a cost listed next to them at all.
So in order to learn anything about costs on AWS: pay attention whenever you see a note about the cost of anything, even though it will be a distraction from what you're trying to accomplish at that time. There are many places where such notes are scattered. Always keep cost in the back of your mind when doing ''anything'' on AWS. Then hopefully you'll get a general idea, so that when you're done with OPS345 OSL840 you can have an intelligent conversation about it.
= Basic security on a public-facing server =
** Delete all default usernames, except root which you can't delete.
** Make sure that root is never allowed to log in remotely.
** Whenever possible: don't use passwords at all, use SSH keys for logging in. You've learned how to use them in OPS245OSL640/OSL740.
* Learn how to use sudo and how to configure it.
* Get in the habit of organising organizing your SSH keys so you don't accidentally lose them.
Remember that unlike ULI101OSL640/OPS245 OSL740 your servers are on the real internet, and depending on how you configure them: they might be accessible by any attacker on the planet. You need to pay much more attention to security in this course than was required in ULI101OSL640/OPS245OSL740.
= First AWS VM =
* At the '''Configure Security Group''' step: select the security group "ops345first" which you just created.
After you review your configuration and click "Launch" a popup will come up asking you for a key pair. It's important for you to understand what it's asking for. It is the same type of SSH key pair that you've created and used in the [[OPS245 OSL740 Lab 7]]. Remember that your private key is yours, it's private to you, and not for anyone else to see. AWS is asking you to give them the public key which is the pair of the private key which you wish to use to log in to your new VM. In this case your private key is the effective equivalent of the root password.
* Create a new RSA key pair named ops345-first-key, and download it as ops345-first-key.pem on your workstation under a new directory ~/ops345/keys/ssh/
163
edits

Navigation menu