To request help from the Cloud Team, just email cloud-support@cornell.edu.
Featured Info
-
Access Keys for AWS CLI Using Cornell Two-Step Login - Shibboleth — This document shows how to setup and use the awscli-login tool to retrieve temporary AWS access keys using your Cornell netid credentials and Duo (i.e., Cornell Two-Step Login). Using temporary access keys associated with an AWS role to authenticate to the AWS Command Line Interface (CLI) is much safer than using fixed AWS access keys tied to an IAM user. Now that this option is available to Cornell AWS users, we recommend that fixed access keys no longer be used for humans using the AWS CLI.
-
AWS EC2 Reserved Instances — Reserved Instances at AWS provide a significant discount (up to 75%) compared to On-Demand pricing and can provide a capacity reservation when used in a specific Availability Zone.
-
AWS FAQs — Answers to questions about AWS that we often see at Cornell.
-
Azure FAQs — Answers to questions about Azure that we often see at Cornell
-
Benefits of AWS Accounts under the Cornell-AWS Umbrella — We encourage all Cornell teams, staff, and faculty to contact the Cloud Team (cloud-support@cornell.edu) if they have an AWS account that they use for Cornell business or research purposes and that is not part of the contract that Cornell has with AWS. Here are some of the benefits of getting a new AWS account, or bringing an existing AWS account to the master Cornell-AWS contract.
-
Common Azure and AWS Terminology — Folks familiar with AWS who are learning Azure or who are familiar with Azure and learning AWS commonly find it challenging to map terminology from one service to the other. This page provides a mapping between services and names of resource types from each vendor. We include only the most commonly used services and terms.
-
Connecting with the CIT Cloud Team and Cornell's Cloud Community — There are many ways to connect with the Cloudification Team and others at Cornell working on cloud technologies.
-
Cornell Active Directory Groups for use with AWS Shibboleth (Cornell Two-Step Login) — The integration between Cornell CUWebAuth (and Cornell Two-Step Login) and AWS requires Active Directory groups with specific characteristics. When the Cloud Team asks a Cornell AWS account owner to request an Active Directory group from their unit IT support for gating access to roles in the AWS console the following wording can be used in the request.
-
Cornell AWS Direct Connect Routing Diagrams — This page shows and discusses the different routing options over the Cornell Direct Connect to AWS VPCs.
-
Free or Open Source Resources to Help with AWS Security — An annotated list of free resources and open source tools to assist with AWS security
-
-
- About Cloud Infrastructure & Solutions Engineering Services
- AWS
- Adding Administrator Access Existing AWS Accounts for Onboarding
- After Onboarding to AWS
- Approaches for CLI, SSH, and RDP Access to AWS and AWS Resources
- AWS: Convert a server running from Instance Store to EBS ( possibility )
- AWS Certificate Manager
- AWS Client VPN
- AWS Cross-Account Secret Access
- AWS EC2 Reserved Instances
- AWS Elastic File Systems (EFS) Troubleshooting
- AWS FAQs
- AWS Networking
- AWS Network Reach Tool
- Baseline AWS Network ACL
- Cornell AWS Direct Connect
- Route 53 Subdomain Delegation
- AWS News
- AWS S3-Glacier migration and backup strategies and 3rd party tools
- AWS Stand Alone account : tools/thoughts on closing/decommissioning
- AWS Standard Tagging
- AWS Storage Pricing Models
- AWS Storage Services Cost Comparison Tool
- Benefits of AWS Accounts under the Cornell-AWS Umbrella
- Configure Oracle RDS to use AWS SES for SMTP
- Configure Oracle RDS to Use AWS SES SMTP
- Cornell User VPN and AWS Interactions
- Enabling MFA Delete for AWS S3 Buckets
- Examples of Email Sent to AWS Root Account Addresses and AWS Security Contacts
- How To Recover Management Access to AWS KMS Keys
- How to Request a Cornell AWS Account
- IAM Policy to Restrict Scope of Privileges
- Interactions of AWS Root Accounts and Amazon.com Accounts
- Login to AWS Console with Cornell Two-Step Login
- Microsoft Licensing within AWS
- Monitoring in AWS
- Regulated Data in AWS
- S3 Controls - Block Public Access
- Standard AWS Account Configurations
- Standard AWS Technical Solutions
- Access Keys for AWS CLI Using Cornell Two-Step Login - Shibboleth
- AWS Instance Retirement CloudWatch Event
- Backup and Archiving to AWS S3
- Configure Applications to Send Email with SES
- Creating Custom Roles to use With Shibboleth
- Encrypting AWS RDS Instances
- How to join an AWS Windows instance to Cornell AD
- MyISAM Tables in MySQL RDS Instances
- Restricting EC2 Actions using Custom IAM Policy
- Scheme to Route Traffic to On-Premises and AWS Endpoints
- Set Cache Control Header for S3 Object
- Use MFA With AWS Access Keys
- Azure
- Cloud Services Training
- 2019-05-28/29 AWS 101 & AI/ML
- 2019-07-09 Intro to Docker
- 2019-10-14 AWS 101 Training
- 2019-11-12 and 2019-11-13 AWS Training
- 2020-01-06 AWS Security Jam Game Day
- 2020-04-27 AWS Management Tools Immersion Day Remote Training
- 2021-04 AWS Security Immersion Days
- Presentations to On-campus Groups
- AWS re:Invent announcements - a sampling - SD-SIG 2019-02-20
- Cloud and DevOps Learning and Training Opportunities
- Deploying Services via OpsWorks/Chef - SD-SIG 2017-10-31
- Introduction to AWS Identity and Access Management
- Securing a Cloud Application - SD-SIG Presentation 2017-03-21
- Security Features of AWS Virtual Private Cloud
- Cloud Tools Training
- Common Azure and AWS Terminology
- Connecting with the CIT Cloud Team and Cornell's Cloud Community
- General "How To" Documents
- Public Projects
- Standard Tagging
- VDI, Application Streaming and Application Virtualization
Search within Cloudification Services
