Page History

• http://help.papertrailapp.com/kb/hosting-services/aws-elastic-beanstalk/
• https://github.com/papertrail/remote_syslog2/blob/master/examples/remote_syslog.ebextensions.config
• See also Papertrail Logging Tool : PapertrailSaaS

Elastic Compute Cloud (EC2)

Expanded Notifications for EC2 Instance Retirement 

• AWS Instance Retirement CloudWatch Event

Joining EC2 Instances to Cornell AD

• How to join an AWS Windows instance to Cornell AD

Elastic Block Store (EBS)

Anchor
ebssnapshots ebssnapshots

Snapshot EBS volumes attached to running EC2 instances

• Use snapshotting instead of a traditional file backup process.
• Locally developed solution
  • Configure a Jenkins job to run the auto-snapshot utility.
  • https://github.com/CU-CloudCollab/cucloud_utils#auto-snapshot
• Another open source solution
  • https://blog.rackspace.com/automate-ebs-snapshots-with-snapper
  • https://github.com/rackerlabs/ebs_snapper

Prune EBS snapshots

• Prune snapshots that are older than a specified age. Useful in conjunction with "Snapshot (backup) EBS volumes attached to running EC2 instances".
• https://github.com/CU-CloudCollab/cucloud_utils#clean-snapshots
• https://github.com/CU-CloudCollab/cucloud_utils/blob/master/bin/delete-ebs-snapshots-older-than.rb

Route53

Tie a cornell.edu hostname to an AWS service

• See How to Setup AWS Route53 to Work with Cornell-Managed DNS blog post.
• Scheme to Route Traffic to On-Premises and AWS Endpoints

Identity and Access Management (IAM)

Using IAM policy to restrict EC2 actions to specific users or role

• Restricting EC2 Actions using Custom IAM Policy

Allow a role from one AWS account assume a role in a different AWS account

• https://github.com/CU-CommunityApps/aws-examples/tree/master/cloudformation/iam/assume-role-example

Use Cornell Two-Step Login (Shibboleth + Duo) to get AWS CLI credentials

• Access Keys for AWS CLI Using Cornell Two-Step Login (- Shibboleth)

Relational Database Service (RDS)

• MyISAM Tables in MySQL RDS Instances - Before migrating a MySQL database to AWS Relational Database Service, be sure to understand the impact of that move if any tables in your MySQL database utilize the MyISAM engine.
• Encrypting AWS RDS Instances - You can encrypt your Amazon RDS instances and snapshots at rest by enabling the encryption option for your Amazon RDS DB instance.