{"id":4307,"date":"2017-07-21T12:01:53","date_gmt":"2017-07-21T11:01:53","guid":{"rendered":"https:\/\/cybersmart.co.uk\/?p=4307"},"modified":"2017-07-21T12:01:53","modified_gmt":"2017-07-21T11:01:53","slug":"using-aws-automated-deployment-processes-securely","status":"publish","type":"post","link":"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/","title":{"rendered":"Using AWS and automated deployment processes securely"},"content":{"rendered":"\n\t\t<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained\">\n\t\t<div class=\"wp-block-wombat-hero-blog b-hero-blog has-color-night-100-background-color has-background\" style=\"margin-top:var(--wp--preset--spacing--section-spacing);margin-bottom:var(--wp--preset--spacing--section-spacing)\"><div class=\"b-hero-blog__inner\">\n\t\t<div class=\"wp-block-wombat-hero-blog-text b-hero-blog-text\"><div class=\"b-hero-blog-text__inner\"><h1 style=\"margin-bottom:var(--wp--preset--spacing--size-20);\" class=\"has-text-color has-color-porcelain-100-color wp-block-post-title\">Using AWS and automated deployment processes securely<\/h1>\n\t\t\n\t\t<div style=\"margin-bottom:var(--wp--preset--spacing--size-16);\" class=\"has-text-color has-color-porcelain-100-color wp-block-post-date has-20-font-size\"><time datetime=\"2017-07-21T12:01:53+00:00\">July 21, 2017<\/time><\/div>\n\t\t\n\t\t<div class=\"has-text-color has-color-porcelain-80-color wp-block-post-author-name\">Jamie<\/div><\/div><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-hero-blog-media b-hero-blog-media\"><div class=\"b-hero-blog-media__inner\"><figure style=\"aspect-ratio:16\/9;\" class=\"wp-block-post-featured-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"628\" src=\"https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1.jpg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"\" style=\"width:100%;height:100%;object-fit:cover;\" srcset=\"https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1.jpg 1200w, https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1-768x402.jpg 768w, https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1-200x105.jpg 200w, https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1-1024x536.jpg 1024w, https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1-578x302.jpg 578w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/figure><\/div><\/div>\n\t\t<\/div><\/div>\n\t\t<\/div>\n\t\t\n\t\t\n\t\t\n\t\t<section class=\"wp-block-wombat-blog-post-content-container b-blog-post-content-container\" style=\"margin-bottom:var(--wp--preset--spacing--section-spacing)\"><div class=\"b-blog-post-content-container__inner l-container\">\n\t\t<div class=\"wp-block-wombat-blog-post-sidebar b-blog-post-content-container__sidebar sidebar\"><div class=\"sidebar__inner\">\n\t\t<div class=\"wp-block-wombat-blog-post-sidebar-col-1 sidebar__col-1\"><div class=\"sidebar__col-inner\">\n\t\t<div class=\"wp-block-button is-style-secondary\"><a class=\"wp-block-button__link wp-element-button\" href=\"\/blog\/\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--size-16)\">Back to blog<\/a><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<p class=\"has-20-font-size\" style=\"margin-top:0;margin-bottom:var(--wp--preset--spacing--size-16)\"><strong>Table of contents<\/strong><\/p>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-blog-post-toc b-toc b-toc--1\" data-nest=\"1\"><\/div>\n\t\t<\/div><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-blog-post-sidebar-col-1 sidebar__col-1\"><div class=\"sidebar__col-inner\">\n<div class=\"wp-block-wombat-resource-box-container-box b-resource-box-container-box swiper-slide has-color-night-100-background-color has-background\"><div class=\"b-resource-box-container-box__inner\">\n<h2 class=\"wp-block-heading is-style-3 has-color-porcelain-100-color has-text-color\" style=\"margin-bottom:var(--wp--preset--spacing--size-16)\">Want to speak with sales?<\/h2>\n\n\n\n<div class=\"wp-block-button is-style-text-blue-2\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/calendly.com\/sales_cs\/book-a-discovery-call-v2?utm_source=blogglobal\">Book a call<img loading=\"lazy\" decoding=\"async\" width=\"24\" height=\"24\" class=\"wp-image-769\" style=\"width: 24px;\" src=\"https:\/\/cybersmart.com\/wp-content\/uploads\/2024\/03\/arrow-right.svg\" alt=\"\"><\/a><\/div>\n<\/div><\/div>\n<\/div><\/div>\n\t\t<\/div><\/div>\n\t\t\n\t\t\n\t\t\n\t\t<div class=\"wp-block-wombat-blog-post-content b-blog-post-content-container__content content\"><div class=\"content__inner\">\n<h4 class=\"wp-block-heading\">(1) AWS: Remove (or do not generate) root account access keys<\/h4>\n\n\n\n<p>To access Amazon Web Services (AWS), an access key is required to verify your identity and the identity of your applications. An access key consists of an access key ID and a secret access key. Anyone with the access key for your root account has unrestricted access to all of your account.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p>It is best practice to not have an access key for your root account. Instead, create AWS Identify and Access Management (IAM) users for each person so that you can give them specific permissions. When setting permissions, follow the standard security advice of granting least privilege. This means only giving a user permission which allows them to complete their specific tasks and no further access.<\/p>\n\n\n\n<p>The following image shows an access key being used for the root account:<\/p>\n\n\n\n<p>Image reference: <a href=\"https:\/\/blogs.aws.amazon.com\/security\/post\/Tx1GZCHQC7LR3UT\/New-in-IAM-Quickly-Identify-When-an-Access-Key-Was-Last-Used\">https:\/\/blogs.aws.amazon.com\/security\/post\/Tx1GZCHQC7LR3UT\/New-in-IAM-Quickly-Identify-When-an-Access-Key-Was-Last-Used<\/a><\/p>\n\n\n\n<p>For more information, see: <a href=\"http:\/\/docs.aws.amazon.com\/IAM\/latest\/UserGuide\/best-practices.html.\">http:\/\/docs.aws.amazon.com\/IAM\/latest\/UserGuide\/best-practices.html.<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">(2) AWS: Monitoring and logging<\/h4>\n\n\n\n<p>AWS provides several different logging options for different purposes. One particularly useful service is CloudTrail which \u201crecords AWS API calls for your account and delivers log files to you. The recorded information includes the identity of the API caller, the time of the API call, the source IP address of the API caller, the request parameters and the response elements returned by the AWS service\u201d.<\/p>\n\n\n\n<p>Monitoring API calls is a critical component of IT governance, security and compliance. CloudTrail helps you to build enhanced preventative and detective security controls for your AWS environment. You can also set up alerts so that you are notified when certain events happen.<\/p>\n\n\n\n<p>The image below is a screenshot showing example API activity history:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/cybersmart.co.uk\/wp-content\/uploads\/2017\/07\/cloudtrail_api_call_list_3.png\" alt=\"\" class=\"wp-image-4309\"\/><\/figure>\n\n\n\n<p>Image reference: <a href=\"https:\/\/aws.amazon.com\/blogs\/aws\/new-aws-api-activity-lookup-in-cloudtrail\/\">https:\/\/aws.amazon.com\/blogs\/aws\/new-aws-api-activity-lookup-in-cloudtrail\/<\/a><\/p>\n\n\n\n<p>For more information, see: <a href=\"https:\/\/aws.amazon.com\/cloudtrail\/.\">https:\/\/aws.amazon.com\/cloudtrail\/.<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">(3) Cloud deployment processes<\/h4>\n\n\n\n<p>Many businesses use automated deployment processes for their applications. This involves using tools such as Chef and Jenkins to achieve continuous integration and delivery. The process is usually as follows:<\/p>\n\n\n\n<p>A business might have their deployment process set up so that whenever code is pushed to the repository it automatically triggers a build followed by tests. If the tests pass, then the changes are deployed.<\/p>\n\n\n\n<p>If someone wanted to hack an application, it is easier for them to hack the repository than hack the application. As a result, it is critical to secure the source code repository. Some steps that can be taken to increase the security of a repository are as follows:<br>\n\u2022 Using user role permissions and access levels (for example, different development teams might only need push access to certain branches. Furthermore, a non-development team might only require read access)<\/p>\n\n\n\n<p>For example, different development teams might only need push access to certain branches. Furthermore, a non-development team might only require read access<br>\n\u2022 Using authentication methods such as SSH, external LDAP or 2-factor authentication<br>\n\u2022 Audit and access logging (this includes regularly checking commit logs).<br>\n\u2022 Building security into your DevOps cycle<\/p>\n<\/div><\/div>\n\t\t<\/div><\/section>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":6525,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[15,26],"tags":[102,22,38],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Using AWS and automated deployment processes securely - CyberSmart<\/title>\n<meta name=\"description\" content=\"An Access key is required to verify your identity and of your applications. Remember the root account key holder has complete access.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Using AWS and automated deployment processes securely - CyberSmart\" \/>\n<meta property=\"og:description\" content=\"An Access key is required to verify your identity and of your applications. Remember the root account key holder has complete access.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/\" \/>\n<meta property=\"og:site_name\" content=\"CyberSmart\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-21T11:01:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jamie\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jamie\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/\",\"url\":\"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/\",\"name\":\"Using AWS and automated deployment processes securely - CyberSmart\",\"isPartOf\":{\"@id\":\"https:\/\/cybersmart.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1.jpg\",\"datePublished\":\"2017-07-21T11:01:53+00:00\",\"dateModified\":\"2017-07-21T11:01:53+00:00\",\"author\":{\"@id\":\"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04\"},\"description\":\"An Access key is required to verify your identity and of your applications. Remember the root account key holder has complete access.\",\"breadcrumb\":{\"@id\":\"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/#primaryimage\",\"url\":\"https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1.jpg\",\"contentUrl\":\"https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1.jpg\",\"width\":1200,\"height\":628},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cybersmart.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Using AWS and automated deployment processes securely\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cybersmart.com\/#website\",\"url\":\"https:\/\/cybersmart.com\/\",\"name\":\"CyberSmart\",\"description\":\"Complete Cyber Confidnence\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cybersmart.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04\",\"name\":\"Jamie\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cybersmart.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g\",\"caption\":\"Jamie\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Using AWS and automated deployment processes securely - CyberSmart","description":"An Access key is required to verify your identity and of your applications. Remember the root account key holder has complete access.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/","og_locale":"en_US","og_type":"article","og_title":"Using AWS and automated deployment processes securely - CyberSmart","og_description":"An Access key is required to verify your identity and of your applications. Remember the root account key holder has complete access.","og_url":"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/","og_site_name":"CyberSmart","article_published_time":"2017-07-21T11:01:53+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1.jpg","type":"image\/jpeg"}],"author":"Jamie","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Jamie","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/","url":"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/","name":"Using AWS and automated deployment processes securely - CyberSmart","isPartOf":{"@id":"https:\/\/cybersmart.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/#primaryimage"},"image":{"@id":"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/#primaryimage"},"thumbnailUrl":"https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1.jpg","datePublished":"2017-07-21T11:01:53+00:00","dateModified":"2017-07-21T11:01:53+00:00","author":{"@id":"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04"},"description":"An Access key is required to verify your identity and of your applications. Remember the root account key holder has complete access.","breadcrumb":{"@id":"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/#primaryimage","url":"https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1.jpg","contentUrl":"https:\/\/cybersmart.com\/wp-content\/uploads\/2020\/10\/8-1.jpg","width":1200,"height":628},{"@type":"BreadcrumbList","@id":"https:\/\/cybersmart.com\/2017\/07\/using-aws-automated-deployment-processes-securely\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersmart.com\/"},{"@type":"ListItem","position":2,"name":"Using AWS and automated deployment processes securely"}]},{"@type":"WebSite","@id":"https:\/\/cybersmart.com\/#website","url":"https:\/\/cybersmart.com\/","name":"CyberSmart","description":"Complete Cyber Confidnence","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersmart.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cybersmart.com\/#\/schema\/person\/5f23eb4b6bf763170a51147370df2a04","name":"Jamie","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersmart.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4c8629de96048c65a367ce1066968a8f?s=96&d=mm&r=g","caption":"Jamie"}}]}},"_links":{"self":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/posts\/4307"}],"collection":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/comments?post=4307"}],"version-history":[{"count":0,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/posts\/4307\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/media\/6525"}],"wp:attachment":[{"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/media?parent=4307"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/categories?post=4307"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersmart.com\/wp-json\/wp\/v2\/tags?post=4307"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}