Code Monkey home page Code Monkey logo

assumer's Introduction

DevSecOps

Welcome to the DevSecOps initiative and software repositories. These repositories are meant to help build a community around DevOps + Security experimentation and lessons intended to help scale and deliver Rugged software. This is the primary repository to help with understanding the mission and getting involved. This is an actively evolving project and is intended to change over time.

This DevSecOps repository has been created to help security practitioners to understand DevSecOps, how to operate, and how to contribute to this effort.

#What is DevSecOps?

In summary, DevSecOps is a Rugged experiment intended to help us understand how to operate and scale Security to support DevOps. Several years ago, many of us realized that Josh Corman was right: "This is the end of Security as we know it." And to ensure the continued safety of the software developed via DevOps, we decided to lean in to experiment and learn what was required to scale security decisions and speed up security feedback for DevOps teams.

You can find more details here: What is DevSecOps? and also by reading the LinkedIn post first introduced on the DevSecOps web site.

assumer's People

Contributors

godinezj avatar jercherng avatar mechcozmo avatar slietz avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

assumer's Issues

Feature: Simplify CLI flags by supporting a pre-defined configuration file

DETAILS

Currently, as a user, I would have to assume a role with this command: assumer -a <target_account> -r <target_role> -A <control_account> -R <control_role>

But, I would like to set up a configuration file that contains my Control Plane Account, Control Plane Role, Target Plane Account, and Target Plane Role, so that I can just assume a role with a simple command.

Example

  • In .assumer.yml:
:ctrl:
  :account_number: 123456789012
  :role: prefix/security-role

:acct1:
  :account_number: 123456789000
  :role: prefix/read-only-role
  • In command-line:
$ assumer acct1

Gem will never install if downloaded and not cloned

gemspec file contains in-line git commands that will not work, which essentially makes gem install assumer* install nothing. Maybe note in documentation that repo needs to be cloned in order to install

xdg-open call fails in non-desktop environments

Context: the assumer executable
Environment: local/remote non-desktop environment, such as a docker/vagrant container or remote EC2 instance-- specifically any linux or bsd environment without (xdg-utils)[https://www.freedesktop.org/wiki/Software/xdg-utils/] installed.

For non-desktop environments the call to xdg-open will fail.
This occurs if you pass the --gui / -g commandline option, which is compounded by the fact that it is necessary to do so if you wish to retrieve the login url outside of passing the --pry flag and manually inspecting the target_creds object.

@mechcozmo @slietz

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.