Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.



Excerpt

Answers to questions about AWS that we often see at Cornell.


Table of Contents

 


...


Costs

What is the cost of the the Cornell standard AWS configuration?

...

This chart of recent billing data shows that Cornell is not near the 15% cap of the Data Egress Waiver.

Image Removed

(Previous chart from May 2017)

BIlling

Image Added


Billing

I got an invoice for AWS from CloudCheckr. What should I do with it?

...

Code Block
$ traceroute -T -p 389 ad10.cornell.edu
traceroute to ad10.cornell.edu (10.92.36.80), 30 hops max, 60 byte packets
 1  ip-10-92-36-80.ec2.internal (10.92.36.80)  7.740 ms  7.711 ms  9.136 ms

...


Working with Data

When should I use Direct Connect and when should I use the public internet to transfer data?

...

    1. Create a new or use default profile
    2. "aws configure --profile {name}"

 


  • AWS CLI
    1. Access Keys for AWS CLI Using Cornell Two-Step Login (Shibboleth)
  • rclone
    1. rclone config
      1. set id, secret and session token (under advanced config)
  • Cyberduck 
    1. Copy ID, Secret and Token from ~/.aws/credentials {name}
      1. aws_access_key_id = [ paste ID ]
      2. aws_secret_access_key = [ paste key ]
      3. aws_session_token = [ paste token ]
    2. Download Cyberduck STS token profile
    3. Open Connection - S3 (Credentials from AWS Security Token Service)
      1. Specify profile from #1
  • Mountain Duck now available with similar process as outlined above with CyberDuck.

...

See Examples of Email Sent to AWS Root Account Addresses and AWS Security Contacts