Moderniser.repo
  • 日本語
  • English✔️
Archive
【Guidelines】Consideration for introducing AWS Config to Corporate Organization/S... 【Guidelines】Consideration for introducing Amazon GuardDuty to Corporate Organiza...
Thorough explanation of the aws:executeScript action for SSM Automation
How to get information on multiple AWS resources in Terraform's Data Source 【IaC】CloudFormation template / SAM template coding rules
【Update in March 2024】Recommended plug-in summary of Visual Studio Code for clou...
Tips / Workaround
【Tips】How to use the latest AWS icon in Draw.io of Visual Studio Code
【Tips】How to create custom checks with Prowler 【Tips】How to scrape the reference of Security Hub control and convert it to data 【Tips】 Investigating security check tools that support CIS AWS Foundations Bench...
【Workaround】How to use the latest Boto3 with SSM Automation (or Lambda)
How to switch accounts for GitHub CLI commands using commands
Codes
【IaC】Amazon S3 sample code collection
【Python】How to write a CommaDelimitedList in List (array) format in samconfig.ym...
Others
Privacy Policy
Profile
...

Kanji

・ Cloud engineer / freelance
・ Born in 1993
・ Born in Ehime Prefecture / Lives in Shibuya-ku, Tokyo
・ AWS history 5 years

Profile details

Contact
Twitter(@kanji_aws_fl) Instagram(kanji_aws_freelance) Mail(kanji@cont-aid.com)


AWS Config is a service that allows you to manage configuration and record changes for AWS resources, as well as enable you to evaluate settings for AWS resources. In this article, we have provided an overview of AWS Config and provide some points to be checked when considering implementing it in your company organization/system.
【Guidelines】Consideration for introducing AWS Config to Corporate Organization/System

2025/02/11 Update

AWS Config is a service that allows you to manage configuration and record changes for AWS resources... [Read more]


CIS AWS Foundations Benchmark is a benchmark for checking AWS security settings. In this article, we investigated security checking tools that support CIS AWS Foundations Benchmark v3.0.0. The security checking tools we investigated were Security Hub, CFn Guard, and Prowler. We investigated the security check items that each security check tool supports.
【Tips】 Investigating security check tools that support CIS AWS Foundations Benchmark v3.0.0 (Security Hub, CFn Guard, Prowler)

2025/02/11 Update

CIS AWS Foundations Benchmark is a benchmark for checking AWS security settings. In this article, we... [Read more]


Prowler is a tool for checking the security settings of AWS, Azure, and GCP accounts. In addition to the checks provided by default, you can also create custom checks. Since the method for creating custom checks was not detailed in the official documentation, we analyzed the source code to confirm the method for creating custom checks. This article describes how to create custom checks with Prowler.
【Tips】How to create custom checks with Prowler

2025/02/11 Update

Prowler is a tool for checking the security settings of AWS, Azure, and GCP accounts. In addition to... [Read more]


When deploying using samconfig.yml in the SAM CLI, if you write parameters in CommaDelimitedList Type, they must be written as a string. If there are many elements, writing it as a string will make it longer and less readable. Since CommaDelimitedList is written in array format in samconfig.yml, the conversion process has been implemented in Python, so we will explain how to do that.
【Python】How to write a CommaDelimitedList in List (array) format in samconfig.yml

2025/02/09 Update

When deploying using samconfig.yml in the SAM CLI, if you write parameters in CommaDelimitedList Typ... [Read more]


Amazon S3 is a service that builds object storage in the AWS cloud. Save data includes static content, backup data, archive data, and log files on the website. In this article, we will describe the sample code collection of the Amazon S3 CloudFormation template.
【IaC】Amazon S3 sample code collection

2025/01/23 Update

Amazon S3 is a service that builds object storage in the AWS cloud. Save data includes static conten... [Read more]


Amazon GuardDuty is a service that monitors and threats activities in the AWS account. In this article, we have described the summary of the Amazon GuardDuty and the points to be confirmed when considering the introduction into a company organization/system.
【Guidelines】Consideration for introducing Amazon GuardDuty to Corporate Organization/System

2025/01/22 Update

Amazon GuardDuty is a service that monitors and threats activities in the AWS account. In this artic... [Read more]


By using the Visual Studio Code plug -in
【Tips】How to use the latest AWS icon in Draw.io of Visual Studio Code

2025/01/20 Update

By using the Visual Studio Code plug -in "Draw.io Integration", you can use Draw.io in a local envir... [Read more]


When using the GitHub CLI command, when switching the GitHub account, the `gh auth login` command was executed every time. When I was looking for a way to switch authentication information like a profile, I found a good method, so I will write it in an article.
How to switch accounts for GitHub CLI commands using commands

2025/01/04 Update

When using the GitHub CLI command, when switching the GitHub account, the `gh auth login` command wa... [Read more]


Visual Studio Code is an open source code editor provided by Microsoft. For cloud engineers these days, I think Visual Studio Code is often used when writing IaC code. In this article, we have compiled the recommended plugins of Visual Studio Code for cloud engineers.
【Update in March 2024】Recommended plug-in summary of Visual Studio Code for cloud engineers

2025/01/04 Update

Visual Studio Code is an open source code editor provided by Microsoft. For cloud engineers these da... [Read more]


SSM automation can execute Python or PowerShell script by using aws:executeScript action. When automating system operation with a script, it is common to perform regular processing with lambda or develop a script and execute locally. By using SSM automation, the authority of the system operator can be minimized. You can prepare a dedicated input field required to execute the process on the management console, or provide an approval phase. A function specialized in system operation is available. In this article, we will explain the aws:executeScript action of SSM automation.
Thorough explanation of the aws:executeScript action for SSM Automation

2025/01/04 Update

SSM automation can execute Python or PowerShell script by using aws:executeScript action. When autom... [Read more]


CloudFormation is a service for managing AWS resources with code. SAM CLI is a CloudFormation extension, a service that makes it easy to deploy server -less applications such as Lambda functions and API Gateway. By deciding the coording rules before using these tools when starting development in the project, you can maintain the quality of the code throughout the development team. In this article, we have summarized the coordination rules of CloudFormation template / SAM template so that it will be the foundation for consideration when starting a project in the future.
【IaC】CloudFormation template / SAM template coding rules

2025/01/04 Update

CloudFormation is a service for managing AWS resources with code. SAM CLI is a CloudFormation extens... [Read more]


SSM Automation aws:executeScript may not be able to run the latest API. For example, the Basseline API of Control Tower is now available on December 15, 2024, but at the time of writing this article, it is not available on aws:executeScript. SSM Automation aws:executeScript action and Step Functions are the same, and the latest APIs may not be available. In order to respond to this, we have examined the version of Boto3 in the SSM Automation aws:executeScript action and used the latest API. Simply upgrading Boto3 with pip did not work, so I will describe the corresponding method.
【Workaround】How to use the latest Boto3 with SSM Automation (or Lambda)

2024/05/19 Update

SSM Automation aws:executeScript may not be able to run the latest API. For example, the Basseline A... [Read more]


I had the opportunity to use Terraform's Data Source in construction projects, but since there were many AWS resources that were not supported, I summarized the usage cases and correspondence table. If Data Source is not compatible, a workaround using External Data Source is also described.
How to get information on multiple AWS resources in Terraform's Data Source

2024/05/15 Update

I had the opportunity to use Terraform's Data Source in construction projects, but since there were ... [Read more]


In Security Hub, you can enable security check rules called controls by enabling a feature called standards, and check security settings according to AWS best practices. By enabling controls, AWS Config rules are created, and the check results are displayed based on the importance defined for each control. These created AWS Config rules can be confirmed from the AWS Config management console if the standards are enabled, but it is not possible to confirm what rules are created using the AWS API. This article describes how to scrape the reference of Security Hub controls and convert it to data.
【Tips】How to scrape the reference of Security Hub control and convert it to data

2024/02/12 Update

In Security Hub, you can enable security check rules called controls by enabling a feature called st... [Read more]


©2025 ContAID