November 2019 – Akhil's Blog

MANAGING IAM (IDENTITY ACCESS MANAGEMENT) USERS

Posted on November 24, 2019 by Akhil

Create the user accordingly in IAM (Console) If required multiple. (In my case i use a IAM user named Harish). As the concept of IAM is unique among all other assets of AWS, the operations also differs with the user interface accordingly to the AWS Console and AWS-CLI.

Sign-in page (IAM Users only) :

AWS CONSOLE

Direct to the sign-in page using IAM users sign-in link from IAM Dashboard and customize if needed.

AWS-CLI

Initialize the configuration of the AWS and follow the onscreen commands for the default settings and follow the commands.
aws iam create-account-alias --account-alias cloudees // Customizing sign in link.
aws iam list-account-aliases // For detailed information.

Sign-in to the IAM User account with the help of the created alias account.

Identification of IAM users by AWS :

AWS CONSOLE

Every IAM User will be given their individual and unique name (usually) and can of-course differentiated based on their username.
In any case, a possibility of rehashing names is additionally a probability however it may be of less possibility, a concept of ARN (Amazon Resource Name) is used by AWS.
The ARN name of every IAM user can be seen in Identity and Access Management (IAM) > Users > Click on the username // where it shows

AWS-CLI

aws iam get-user --user-name Harish // To get complete details of the IAM User. To obtain the result as shown

A additional user id is also given for the user by the AWS which helps in differentiating the IAM user by AWS.

To view actions made by the IAM user :

AWS CONSOLE

Services> Identity and Access Management (IAM) > Users > Click on the username > Access Advisor

Detailed and beautiful graphical representation can be seen.

AWS-CLI

aws iam generate-service-last-accessed-details -- arn Arn details obtained above // The report need to be generated initially.
A job Id is returned as the output.
aws iam get-service-last-accessed-details --job-id obtained job id from above // To get complete details as followed

Adding Policies for IAM Users :

AWS CONSOLE

Services> Identity and Access Management (IAM) > Users > Click on the username > Add Permissions // For adding new policies.
The desired policies are selected form the listed bunch of predetermined policies.

AWS-CLI

aws iam attach-user-policy --policy-arn arn:aws:iam: :aws:policy/amazonS3Fullaccess --user-name Harish // Policy ARN for each policy differs.

Continuation of this differences in operations in many other aspects will be posted soon..

AWS, Linux, Windows

CREATING MULTIPLE USERS (IAM) IN AWS

Posted on November 23, 2019 by Akhil

Are you about to handle a lot of servers or users in various departments by providing each their login accreditation’s , then try to use the resource (IAM) Identity Access Management in AWS. When one sign in to the root account of AWS, select the option of IAM under Services where one can find out their IAM users sign-in link: // in the dashboard of IAM, which help the IAM users to redirect for the sign in page.

Services > IAM ( Security, Identity, & Compliance ) > Users > Add user
Provide the Username (as simple as shown below) > Allow the user to access through (AWS-CLI (if necessary)) AWS Console > Highlighted part is up to individuals.

Follow the onscreen commands to attach the existing policies directly > Filter the desired policies and attach to the user > Add Tags // precised separation of the users accordingly as shown > Create User.

Download the .csv file for the purpose of AWS-CLI.
Direct to the login page using IAM users sign-in link (IAM Dashboard).
Sign in using the default credentials provided by the root account as shown.
The use of the resources of IAM User in AWS will be according to the permissions provided by the root user.

Good news : The number of IAM users will be just a number as our age with no limitation.
The generated bill is only dependent on the resources used by the IAM user but not the count of IAM users.

Active Directory, AWS, Windows

CREATING A WINDOWS DOMAIN

Posted on November 22, 2019November 22, 2019 by Akhil

Changing the name of the server

Get access to a Windows 2019 server remotely on the host PC
Creating a domain controller with the name of of Domain_Controller_1 under windows > server manager > local server > computer name > change. After changing the name of the computer, a procedure of restart is recommended and also mandatory.

Setting up a static IP address

Windows > Settings > Network and Sharing Center > Ethernet > Details // Note down the IPv4 Address, IPv4 Subnet Mask, IPv4 Default Gateway.
In Ethernet status get down to the properties to select the option of properties of Internet Protocol Version 4 (TCP/IPv4) to enter the IP address, subnet mask and the default gateway.
Also set the DNS server as the IPv4 Address. // Setting the complete control on the domain. (Recommendation : Restart the server)

Assigning the Domain Controller

Windows > Server Manager > Dashboard > Add Roles and Features // Follow the onscreen commands> add a role of Active directory domain service in server roles which pop ups with its required default features > Install.
Configuring the active directory domain service Promote this server to a domain controller // In the notifications (exclamatory mark) > Add a forest // for the first time > specify the desired root domain name (something.something eg: cloudees.com) > follow the onscreen commands to install and followed by a restart procedure.

Confirmation of the Domain controller : Windows > Service manager > Local server (The computer name along with the Domain are changed respectively for the desired ones. ) > Tools (Top right corner of service manger)> Active directory Users and Controllers > Domain name > Domain Controllers (Where the current server should be seen as follows).

Connecting a client server

Get access to a Windows 2019 server remotely on the host PC .
Windows > Settings > Network and Sharing Center > Ethernet > Details // Note down the IPv4 Address, IPv4 Subnet Mask, IPv4 Default Gateway.
In Ethernet status get down to the properties to select the option of properties of Internet Protocol Version 4 (TCP/IPv4) to enter the IP address, subnet mask and the default gateway.
Also set the DNS server as the IPv4 Address of Domain Controller as shown. // Setting the complete control on the domain. (Recommendation : Restart the server)

Windows > Control panel > System (small icons) > Change settings (Computer name, domain and workgroup settings) > change from workgroup to domain (cloudees.com) > Username and password (Domain controller) // Cross the barrier of the domain by providing the details of the domain controller. Welcome to the () domain.

Confirmation of the client server in the domain : IN DOMAIN CONTROLLER Windows > Service manager >Tools (Top right corner of service manger)> Active directory Users and Controllers > Domain name > Domain Controllers (Where the domain controller should be seen as follows) > Computers (Where the all client servers should be displayed).

CAD, Design

TOWNSHIP

Posted on November 22, 2019 by Akhil

When ever I visited mahindra city in Chennai, I would always dreamt about a normal township. This made me to design SCHÖNE STADT. It really took me 24 hours to present and visualize my dream city.

A basic concept of building residential complexes in one side of the project resulting to the combination of many tech buildings on the other half called as IT TECH PARK can be seen the pictures.

Are you also dreaming about your dream city..then comment 👇
Let’s design it together..😃

CAD, Design, Interior designing

INTERIOR DESIGNING

Posted on November 22, 2019 by Akhil

My passion on learning design softwares had made me to step up and learn sketchup and proceed with few interior designing projects. One of them is design of a three plots residential complex in my hometown khammam. The following are few outputs which I could extrapolate from the start of the project.

**Perspective view of the residential plot.**

Walkthrough (VR)

In general the walkthroughs are the videos which give a glimpse of the project and make the clients to feel better in presentation aspect. To be special with what I do made me to go after the following option of presenting the walkthroughs as VR application with the use of modelo.io.

Do you have a VR in your hands then go for a small walk around the residential plot.
https://app.modelo.io/project/5dbabaa71d09c2010042b6ea/model/5dbabb851d09c2010042b6f9

AWS, Linux, Windows

AWS-CLI (AWS-COMMAND LINE INTERFACE)

Posted on November 21, 2019 by Akhil

Accessing AWS through Windows Powershell

https://s3.amazonaws.com/aws-cli/AWSCLI64PY3.msi // Download the MSI installer for windows (64-bit) and run the downloaded MSI installer by following the onscreen instructions. Open powershell as administrator and execute the following commands. Before continuing with the commands download the Access key ID and The Secret Access Key from the security credentials of the respected aws account as shown

aws configure // To get started with the aws -cli
Provide the Access key ID and the respective Secret access key to get access to the aws (Respective account).
Follow the onscreen commands by typing the default region name and the default output format.

Accessing AWS through Linux using AWS-CLI

Open any Ubuntu Linux operated system and follow the same steps, initializing with the configuration of aws using sudo aws configure.

Looking for the basic commands of aws-cli
https://docs.aws.amazon.com/cli/latest/userguide/aws-cli.pdf

Active Directory, AWS, Windows

CONNECTING TO A WINDOWS SERVER FROM WINDOWS OS REMOTELY

Posted on November 21, 2019 by Akhil

An windows 2019 instance was created in aws and held the status to be running.
mstsc // Typed in the Run to get access remotely on windows server.

The public IP address of the instance was pasted accordingly as follows.

In AWS, get the login credentials by using the Key-pair (.ppm) starting from the Get Windows Password > Choose the Key-pair (.ppm) > Decrypt the password

Use the credentials to get access remotely on the virtual instance generated.
Enjoy the remotely accessed windows server.

AWS, LAMP Stack, Linux

MYSQL DATABASE

Posted on November 21, 2019 by Akhil

Database : A database is an organized collection of data.

Installing MySQL-server in Ubuntu

sudo apt-get install mysql-server // Installing the mysql
sudo mysql_secure_installation // securing the mysql server

**A permission followed by the choice of strength of the password**, type the password and continue with the default settings.

Creating a database in MySQL

sudo mysql -u root -p
enter the password // Connecting to MySQL
create database Akhil0087 // Creating a database in mysql
use Akhil0087 // Entering into the database
create table Topics(
Topic VARCHAR(255) NOT NULL,
created_on DATE,
Author VARCHAR(255) NOT NULL
) ENGINE=INNODB; // Creating a table in the database
describe Topics; // To get the following output.

insert into Topics (Topic, created_on, Author) values ('AWS', '2019-11-21', 'Akhil'); // Providing the values for each described field.

Interested in further more operation related to database

AWS, Linux

SETTING UP A FIREWALL IN UBUNTU 18.04

Posted on November 21, 2019 by Akhil

For a Firewall with ufw to be settled up in Ubuntu is really an important aspect in the point of security. In spite of the fact that there may be various approaches to do as such, I pursue the accompanying steps.

sudo apt-get install ufw // Installing ufw
sudo ufw default deny incoming
sudo ufw default allow outgoing // Setting up the default policies
sudo ufw enable // Enabling the Firewall
sudo allow 80
sudo allow ssh // Allowing few ports and can also be deleted/ deny the ports.
sudo ufw disable

Have you also got in love with setting up firewall in ubuntu, then have a look into this

AWS, LAMP Stack, Linux

INSTALLING AN APACHE SERVER ON UBUNTU IN AWS

Posted on November 21, 2019 by Akhil

The IP Address (public) of the created instance is used to get access remotely either using putty or windows remote access control. In the following case putty is used to get access on a Ubuntu 18.04 (Created EC2 instance) remotely. The downloaded key-pair has been converted from .ppm to .ppk using puttyGen and loaded as shown in the figure.

sudo apt-get install apache2 // Installing Apache2
sudo systemctl status apache2 // Checking the status of Apache which display active (running)
http://server_IP_address // Testing of Apache server, server IP address should be entered in any browser which should result in the following output.

If someone could not be able to get the output please allude:
https://phoenixnap.com/kb/ubuntu-start-stop-restart-apache