Page History

...

1. Login to the cu-training AWS account using traditional Shibboleth login.
   1. Use this link to initiate login: https://signin.aws.cucloud.net/
      • This will start the usual process for Cornell Two-Step Login process. Complete your two-step login.
      • Once you have finished with DUO, you will be in one of two places. Take your next steps based on where you end up.
   2. If you are given the option of selecting a role, select shib-training under the "cu-training" AWS account, and click on Sign in. 
      Image Added
      
      

1. Once in the AWS Management Console, check which AWS region your console is pointed at. You want "N. Virginia". If your console is in any other region, change it to "US East (N. Virigina) us-east-1".
   Image Added
   
   
2. In the AWS Management Console, type "config" in the search box and click on Config under Services.
   Image Added
   
   
3. In the Config Dashboard, take note of the high numbers of non-compliant resources. (100+ resources)
   Image Added

Part 1B – Find "your" IAM user

1. Click on Resources from the left-hand navigation panel in the Config console.
2. Enter the "netid" form of your Cornell email address (e.g., netid@cornell.edu) in the Resource identifier search field and hit "enter" on your keyboard. This will start the search for "your" IAM user.
   Image Added
   
   
3. Config should show one search result, listing an IAM user named like "netid@cornell.edu". That IAM User resource will be labelled as non-compliant.
   Image Added
4. Click on the IAM user name (i.e., netid@cornell.edu) to drill into that resource.
5. Review the Rules at the bottom to confirm that "your" IAM user is indeed non-compliant with respect to the 251-MED-no-iam-users-except-whitelist rule.
   Image Added
   
   
6. In the top right of that page, click on Manage Resource.

...