Day 4 Capstone
Cloud Services
This module requires you to query information from the AWS lab range you used during the course labs. The credentials you received from your instructor will work for these challenges, as well. If you have already run aws configure on your course VMs, you'll be ready to go!
If you wish to use the PowerShell module for AWS, remember to run
Import-Module AWSPowerShell.NetCore
To validate your access, you can run the following command and ensure that it returns valid JSON data.
aws sts get-caller-identity
If you are not able to retrieve data from AWS, contact your instructor or teaching assistant for help before proceeding.
For questions which request property values, DO NOT include any quotation marks from your command output.
IAM - Users
How many IAM users are provisioned in the AWS account?
Hints
You need to get a list of IAM users and count them
The aws iam command can help you
Is there a subcommand to list users?
IAM - Password Policy
What is the minimum password length for IAM users in this AWS account? Your answer will be an integer.
Hints
The minimum password length is part of the password policy
The aws iam command gives you information about IAM settings
Find the subcommand to get the password policy and use it
IAM - Attached Policies
One user in the AWS account has an account name which begins with "JAllen". That user has an IAM user policy attached directly to their user account (not through a group or role). What is the name of the attached policy for that user? Your answer will be the contents of the PolicyName property for the policy.
Hints
Remember that the full username will not be "JAllen," since there's a random string at the end of many of the AWS objects we provision for the course. Find the correct username first.
Use the CLI or PowerShell to get a list of attached policies for the user
aws iam has a subcommand to list attached user policies for a user
S3 - Buckets
How many S3 storage buckets have been provisioned in the AWS account? Your answer will be an integer
Hints
Simply list the buckets and count them
The aws s3 command has a different format for subcommands than some other CLI commands
Is there an option to list the buckets?
S3 - MFA Delete
How many of the S3 buckets have MFA Delete enabled? Your answer will be an integer.
Hints
We find this one to be easiest to answer using PowerShell
Piping the output from Get-S3Bucket into another cmdlet can work well
Is there a cmdlet to get versioning information for S3 buckets?
S3 - Tags
One of the S3 buckets in the AWS account has a name which begins with "s3-website-test.aud1.com-" followed by a random string. How many tags are attached to that bucket?
Hints
Start by getting the full bucket name
Is there a command to get bucket tagging?
Remember that a single tag consists of a key=value pair
EC2 - Instance Size
One of the EC2 instances in the AWS account has a Platform property value of "Windows". What is the value of the InstanceType property for that EC2 instance? Include any letters and dots in the property value.
Hints
Only one of the instances has the Platform property set
It's the Windows domain controller you queried during the Active Directory exercises
Simply find the InstanceType property for that instance
EC2 - IMDS
What number of EC2 instances in the AWS account require the use of Version 2 of the Instance Metadata Service (IMDSv2)? Your answer will be an integer.
Hints
What command gets information about EC2 instances?
The MetadataOptions property for EC2 instances has information about IMDS
IMDSv2 requires the use of HTTP Tokens
EC2 - Tags
One of the EC2 instances in the AWS account has a tag whose Key value is SpecialTag. What is the Value property for that tag?
Hints
Tags are key=value pairs
Every instance can have its own tags
Search for a tag with a Key of "SpecialTag"
EC2 - VPC Count
How many virtual private clouds (VPCs) exist in the AWS account?
Hints
Find a command to list the VPCs
VPCs are managed by the EC2 service
Simply count the number of results returned
EC2 - VPC
One of the EC2 VPCs has a CIDRBlock property value of 10.55.0.0/16. What is the text value of the IsDefault property for that VPC? The answer is case-insensitive.
Hints
The default VPC is created when the AWS account is created
Any new VPCs created will not be the default
Find a command to get EC2 VPC information to find the answer
EC2 - Security Group Rules
One of the EC2 security group rules for the AWS account has a ToPort value of 22. What is the CidrIpv4 property value for that rule? Include the full network address, including any numbers, dots and slashes.
Hints
Security group rules are handled by the EC2 service
Find a command to get security group rules
Only one rule has a ToPort of 22