Once you create a Managed AD in an AWS account, you can share this AD with other accounts.

This is a common use-case when you have AWS Managed Active Directory in a shared services account that needs to be shared with other workload accounts.

The following are few points to keep in mind:

• Sharing to another account can happen only within the same region where the Managed AD resides
• Shared directory will be visible to all the VPCs in the workload accounts
• The shared directory on the workload account will get a directory id that is different than the original directory id in the shared services account.
• If Managed AD directory is in an account where organization is enabled, then you also have the option of sharing it with all the accounts within the organization or with a specific account

(more…)

While working with PaloAlto firewall, sometimes you’ll find it easier to use CLI instead of console.

Working on CLI is very helpful when you are testing something on a dev/test firewall, where you repeatedly try-out the same thing with different values, and don’t want to do multiple clicks from the UI and retype everything.

In this tutorial, we’ll explain how to create and manage PaloAlto security and NAT rules from CLI. The following examples are explained:
(more…)

In our previous elasticsearch tutorial, we discussed how to install and setup a stand-alone elasticsearch instance.

While stand-alone installation is good for dev/test, for production, it is recommended to setup elasticsearch cluster. Elasticsearch cluster has many advantages over stand-alone.

(more…)

Exceptions in python are error thrown by syntactically correct statements.

They terminate the execution of the script. Some example of exceptions are NameError, TypeError, AssertionError, ConnectionAbortedError, etc.

These abortions can be handled to prevent the script from terminating unpredictable. Description of all python exceptions can be found here.

(more…)

Elasticsearch supports storing documents in JSON format. It also provides REST interface to interact with elasticsearch datastore.

In this article, we will discuss how to do basic CRUD operations on elasticsearch datastore using the following examples:
(more…)

Microservice is an architectural pattern, or we could say a system design pattern. It is based on Service Oriented Architecture.

Service Oriented architecture (SOA)

Service based architecture is a way of designing your system or applications in such a way that whole system is divided into small individual components where each provide different services to each other component over standard communication protocol shared by all the components, and together they are a complete system providing a useful service to other system/end user.
(more…)

In AWS, whether you perform an action from Console, use AWS CLI, use AWS SDK, or when a AWS service does an action on your behalf, all of those API activities are logged in AWS CloudTrail.

This tutorials explains the following 7 essential AWS Cloudtrail best practices with examples on how to do it from both Console and using AWS CloudTrail CLI command.
(more…)