# various

A collection of simple guides to get stuff done.


## managing Cloudflare

Cloudflare is managed in [cloudflare-provisioning](https://github.com/TinkaTech/cloudflare-provisioning).
Dashboard login is [available](https://dash.cloudflare.com) using your Okta identity.

## managing the AWS Landing Zone

All things that concern the _AWS Landing Zone_ reside in a Terraform project in [aws-provisioning](https://github.com/TinkaTech/aws-provisioning) and
a Cloud Formation project in [aws-datacenter](https://github.com/TinkaTech/aws-datacenter). Typically, changes go in the Terraform project.
Cloud formation is managed by OBLCC.

## managing the AWS Legacy Environments

Ye old environments in AWS, managed in [blaze-platform-provisioning](https://github.com/TinkaTech/blaze-platform-provisioning).

## AWS Instance Login

**Requirements:**

| what                             | why                                           |
|----------------------------------|-----------------------------------------------|
| awscli                           | access the AWS resource, setup console tunnel |
| AWS SSO Console Access (in Okta) | create access tokens                          |

Get the required access tokens for the environment you need access to from your Okta AWS SSO tile and paste them in your local shell.

AWS instance login is done through SSM:

```bash
aws ssm start-session --target <instance-id>
```

To get the instance-id based on an ip-address you can use this command

```bash
aws ec2 describe-instances --filter Name=private-ip-address,Values=10.204.121.196 --query 'Reservations[].Instances[].InstanceId' 
```

To see all instances you can use this command

```bash
aws ec2 describe-instances | less
```