review at amazon: Azure for Architects

This weekend i read "Azure for Architects - Implementing cloud design, DevOps, containers, IoT and serverless solutions on your public cloud".

After i had some trouble to publish my review on amazon.de and i put in onto my blog (take a look here), i wrote a smaller review only about 2 chapters. And this worked...

One statement i liked, was:

This is not only true for security, but sometimes it is important to state the obvious.

If you are interested, take a look at my review at amazon.de (like all my reviews: written in german ;-).

AWS: overview of all postings

After nearly an half year of looking into AWS, here a summary of all postings related to that topic:

• Amazon Web Services: A Start into AWS  

ECS & S3 (Computing & Storage):

• AWS: Running a docker-image with ECS  
• AWS: Running a docker-image with ECS (part 2)
• AWS: Running a docker-image with ECS (part 3): Stop it!  
• AWS: Accessing S3 buckets from the internet and from ec2 instances
by granting acces via IAM and using AWS CLI on the server without a password
• AWS: Accessing S3 buckets from ec2 instances without using IAM
  by using network rules and service endpoints to reach out to S3 with AWS-unaware CLI commands

VPC (Networking):

• AWS: Networking - Virtual Privat Cloud

Billing

• AWS: Billing - how to delete a route 53   
• AWS: What services are free of charge? How to control your costs...
• AWS: What services are free of charge? How to control your costs...(part 2)
• AWS: What services are free of charge? How to control your costs...(part 3)

Automation

• AWS: Installing aws cli (Amazon Web Service Commandline)  
• AWS: Creating a static Website with S3 (simple storage service) with aws cli
• AWS: How to delete a static website via aws cli

Miscellaneous 

• AWS: Logging? CloudTrail! 
• AWS: AWS Solutions Architect Associate - Practice
• Review at amazon: AWS Certified Solutions Architect - Official Study Guide 
• AWS: IAM & security - Best practices: Using a non-root user 

Microsoft Azure: Adding user requires more work as expected

Just to try some things in Microsoft Azure i wanted to add an additional user to my test account. But this was not so easy:

Go to "Azure Active Directory" and "Users":

 

 But then:

I thought this is not really a problem, because openesb.eu is my domain, so let's try to verify this one:

The problem is, that i am not able to change this settings. So i tried, if i am lucky, but:

So only way to add users in such a minimal setup, is to add accounts from live.com etc..

Microsoft Azure: How to use waagent (Microsoft Azure Linux Agent)

After installation waagent on my ubunu server, i tried to use this tool.
First guess was to read the manpages, but there is no entry for waagent:

root@ubuntuserver:~# man waagent
No manual entry for waagent
See 'man 7 undocumented' for help when manual pages are not available.

So for documentation you have to visit the Microsoft Azure portal:
https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/agent-linux

Here are some commands i tried:

root@ubuntuserver:~# waagent -show-configuration
AutoUpdate.Enabled = True
AutoUpdate.GAFamily = Prod
Autoupdate.Frequency = 3600
CGroups.EnforceLimits = False
CGroups.Excluded = customscript,runcommand
DVD.MountPoint = /mnt/cdrom/secure
DetectScvmmEnv = False
EnableOverProvisioning = True
Extension.LogDir = /var/log/azure
Extensions.Enabled = True
HttpProxy.Host = None
HttpProxy.Port = None
Lib.Dir = /var/lib/waagent
Logs.Verbose = False
OS.AllowHTTP = False
OS.CheckRdmaDriver = False
OS.EnableFIPS = False
OS.EnableFirewall = True
OS.EnableRDMA = False
OS.HomeDir = /home
OS.OpensslPath = /usr/bin/openssl
OS.PasswordPath = /etc/shadow
OS.RootDeviceScsiTimeout = 300
OS.SshClientAliveInterval = 180
OS.SshDir = /etc/ssh
OS.SudoersDir = /etc/sudoers.d
OS.UpdateRdmaDriver = False
Pid.File = /var/run/waagent.pid
Provisioning.AllowResetSysUser = False
Provisioning.DecodeCustomData = False
Provisioning.DeleteRootPassword = True
Provisioning.Enabled = False
Provisioning.ExecuteCustomData = False
Provisioning.MonitorHostName = False
Provisioning.PasswordCryptId = 6
Provisioning.PasswordCryptSaltLength = 10
Provisioning.RegenerateSshHostKeyPair = False
Provisioning.SshHostKeyPairType = rsa
Provisioning.UseCloudInit = True
ResourceDisk.EnableSwap = False
ResourceDisk.Filesystem = ext4
ResourceDisk.Format = False
ResourceDisk.MountOptions = None
ResourceDisk.MountPoint = /mnt
ResourceDisk.SwapSizeMB = 0

or list all commands:

root@ubuntuserver:~# waagent -help
usage: /usr/sbin/waagent [-verbose] [-force] [-help] -configuration-path:-deprovision[+user]|-register-service|-version|-daemon|-start|-run-exthandlers|-show-configuration]