3
votes
1answer
157 views

Grant temporary access to Ubuntu 14.04 EC2 machines

My company intends to hire an external contractor for some dev-ops jobs on our EC2 servers. We use Ubuntu accessed using a .pem certificate file. For obvious reasons, I do not want to share my .pem ...
-4
votes
1answer
66 views

Amazon Linux Breakin Attempt [duplicate]

I was having a look in /var/log/secure and noticed the following: Dec 9 06:03:20 ip-10-58-218-177 sshd[3794]: Did not receive identification string from 177.99.169.130 Dec 9 06:46:12 ...
0
votes
0answers
85 views

How to determine if my AWS/EC2 server has been compromised / resolution?

I have recently seen an increase in network in/out activity on my server and am trying to determine if my AWS/EC2 instance has been compromised, and if so, how to resolve? In my security group I ...
0
votes
2answers
68 views

Amazon EC2 security groups

I'm setting up my first instance on EC2, and trying to find clear information on the security group settings is a bit difficult for a newbie like me. Are there some suggested settings that give a ...
1
vote
1answer
113 views

Security of AWS automated backup via snapshots

I need to automate backup of a Linux AWS instance. I would like to do this via one of the many scripts available that rely on the API access of AWS to do snapshots of the underlying EBS volume. What ...
0
votes
1answer
41 views

Allow HTTP packet from specific hosts on an ec2 instance strictly

I have an ec2 instance (proxy) which is being used as http proxy server. There are some other hosts (hostA, hostB, hostC), I want the proxy server will only allow connection from those hosts. For ...
0
votes
1answer
69 views

Amazon EC2 - Help setting up security based on how my software works [closed]

I'm currently developing on a project of mine where I need some guidance on securing my server. My server is Ubuntu Server 64bit hosted at Amazon AWS EC2. I have my own software running on it. My ...
0
votes
1answer
66 views

Is ssl needed between 2 ec2 instances over private port

I have a general security question related to data sharing between ec2 services. I have 2 ec2 instances in the same aws region which communicate with each other over a Java Socket on a specific port ...
0
votes
1answer
65 views

Opening ec2 ports using security groups

I'm trying to open all ports up to a micro instance that I have set up, but it doesn't seem to be working. This is what I have: http://i.imgur.com/PHekagS.png Using paping, I find that port 22 is ...
0
votes
1answer
29 views

Limit access to an EC2 instance from different instances

I have an EC2 instance set up called Machine1. I specified the security group to be Group1. How can I allow access in Group1 to any machine that comes from an internal EC2 request? Do I have the ...
0
votes
1answer
50 views

SSL configuration for domain pointing to EC2 instance

I have my custom domain pointing to an EC2 instance. Say mydomain.com -> [Elastic IP address for my EC2] I would like to add SSL certificates so that I can access the site via https - ...
0
votes
1answer
298 views

Converting the ssh key

to clone my bitbucket project,I changed the /.ssh/authorized_keys content by adding my bitbucket key and I am able to clone into my bitbucket,but after that I was not able to access my server at EC2 ...
1
vote
2answers
165 views

How to implement firewall in LAN(out of users' os) like EC2 have done?

In aws ec2, users can set up security groups which works like a firewall, usually, firewall work behind a gateway/nat server, however, I found that firewall in EC2 works in the LAN, too. For example, ...
4
votes
2answers
769 views

Is it possible to have a 100% secure virtual private server?

I am curious if it is possible to have a VPS that has data on it that is not readable by the hosting provider, but is still usable on the VPS. Obviously there are some things that you could do to ...
1
vote
0answers
328 views

security group not allowing connection to postgres ec2 aws

Hey im having some trouble allow remote connections to postgres from other ec2 instances using the named security group feature to rules. I have set the listens directive in postgres.conf to "*" and ...
-2
votes
2answers
99 views

EC2 instance or spare laptop setup as server: which is safer? [closed]

I want to setup a small dev server, and I would like to be able to access it not only from home, but when I'm away from home too. I have an old laptop that I could use for this purpose, I would just ...
4
votes
1answer
88 views

Difference between Amazon Security group and firewall

Is there any difference between the Amazon EC2 "Security groups" and a regular firewall? Thanks!
1
vote
1answer
321 views

AWS EC2 security group source

I'm currently trying to configure a security group and allow MS SQL connections from my other instance. I want to be able to specify the security group's name as the source. But the connection is not ...
0
votes
2answers
264 views

Google 2 factor authentication on Ec2?

I have set up google two factor authentication on my local machine. So when I do : ssh localhost I need to verify the code along with password. But when I try to connect to my Ec2 instance like so ...
2
votes
1answer
336 views

Amazon EC2 Security Groups - IP ranges [duplicate]

Possible Duplicate: How does Subnetting Work? So if I add 62.234.231.65/32 to my allowed IPs in security groups, does that mean that everyone with an IP from 62.234.231.0 to 62.234.231.255 ...
3
votes
2answers
1k views

How do I view Security Group rules for an AWS EC2 Security Group using the command-line tools?

I know that you can set Security Group rules with ec2-authorize and ec2-revoke. How do you view the rules of a given security group?
0
votes
1answer
1k views

EC2 instance always ask me to enter passphrase for the pem during connection

The pem file is generated by AWS console I was able to connect using the EC2 remote web interface, using the same pem file The permission of pem is 600 already Error.. ssh -i ~/test.pem -v ...
5
votes
1answer
680 views

Possible to limit an EC2 key to just ec2-associate-address?

I have a regular EC2 instance with an elastic IP. The few times the instance has been stopped, I've just manually re-associated the IP with it via the AWS Management console. I'm now thinking about ...
0
votes
2answers
104 views

When running a typical LAMP stack for a public website on EC2, what is the proper firewall setting for port 3306?

I'm reviewing the security groups on my EC2 Ubuntu instance that runs a public website on LAMP. Presently my ports are as follows: 22 (SSH) 0.0.0.0/0 80 (HTTP) 0.0.0.0/0 443 (HTTPS) 0.0.0.0/0 ...
1
vote
3answers
89 views

How to give web users access to server securely?

I'm building an application that will enable users to write code from the browser. Once the code is written I save the contents to my webserver in a user-specific folder. I'd also like to add a ...
1
vote
1answer
352 views

Windows EC2 instances in same security group cannot communicate

I have 2 instances (windows machine) in the same security group. I create a network drive on instance machine(A) for share a folder to other instance machine(B). But when I map a network path on ...
0
votes
1answer
96 views

Amazon EC2: IP Lists with Security Groups

I end up repeating external IPs in my security profiles I understand how security groups can be used to specify Server to Server access. But is the following EC2 Security Group Configuration ...
7
votes
3answers
2k views

How to securely manage private keys for EC2-managed key pairs?

In order to launch an EC2 instance you need a key pair. How do you handle the situation where an engineer with acccess to the private key for that key pair leaves the company? Would it work to add ...
2
votes
2answers
701 views

How can I secure files on S3?

I want to control who can download a file via an app (as if it was held on the local FS). What's the right approach for doing this, considering S3 can't be mounted as a POSIX compliant file system?
2
votes
1answer
132 views

Amazon EC2: Explain Adding Security Groups to Security Groups

I have two instances in the same region using the same security group. I want to allow all the instances in this security group to shell into each other. I have added the security group to port 22 ...
1
vote
2answers
183 views

Amazon EC2 Morto worm and Windows RDP

We run an Amazon EC2 Windows instance and recently received an email from Amazon warning us that RDP is open to everybody and there is a new threat in the wild that may exploit this. The security ...
4
votes
1answer
402 views

EC2: can I provide default startup scripts to erase sensitive data in my AMI?

I'm trying to use EC2 to provide an easy-to-use way to bootstrap a hard-to-build web application. Trouble is, there is some sensitive configuration on the filesystem, such as password salts. I've ...
2
votes
1answer
114 views

Do I need to manually administer EC2 kernel updates?

I run some Ubuntu Server instances on EC2, and I always install the latest apt security updates. It only just occurred to me that AMIs have a fixed AKI (kernel ID) / that Amazon only has a certain ...
2
votes
2answers
643 views

How to set a passphrase for an AWS X.509 private key?

I was rotating my AWS X.509 certificate and private key (not to be confused with ssh private / public key pair) today and decided I wanted to set a pass-phrase on my private key to better protect it. ...
0
votes
2answers
575 views

What is the main difference between iptables and EC2's “security groups”?

If I block traffic via a security group, I assume I don't have to pay for it. But if I block traffic via iptables installed on my server then I assume it would be me that pays for any incoming ...
1
vote
1answer
183 views

ubuntu ec2 instance - apply security updates

Currently, my company has several ubuntu-based instances running on Amazon EC2, being released, in the meanwhile, multiple updates, including security related. Once all instances are ebs-based (for ...
0
votes
1answer
464 views

Multi-factor authenication at ec2 and in general

I noticed aws has multi-factory authentication: http://aws.amazon.com/mfa/faqs/#How_does_AWS_MFA_work This seems to be only for when you login via the web into the web console etc. In general, could ...
0
votes
1answer
44 views

How do I create a new user on AWS?

I want to give developers individual access to AWS Management Console, and have their own security keys for AWS command line tools. Is it possible for me to do this using the command line tools? And ...
3
votes
1answer
204 views

Flow for purchasing an SSL Certificate

I'm trying to understand the proper flow for installing SSL on a server (rather a couple of servers behind an AWS load-balancer). https://www.digicert.com/easy-csr/openssl.htm offers up a wizard. I ...
0
votes
1answer
273 views

Locking down *SQL better on Amazon EC2

Good morning all. We are currently build a SQL box on Amazon (currently MSSQL, but moving to MySQL soon...) and i have set the firewall in Amazon to only allow connections from our main network IP ...
1
vote
2answers
443 views

How to configure Amazon Security Groups to achieve multi-tier architecture?

What is the preferred way to configure Amazon Security Groups to achieve a multi-tier architecture? Each of my instances has its own Security Group, which I only want to use for rules specific to an ...
0
votes
2answers
1k views

How to secure a group of Amazon EC2 instances

I have several Amazon EC2 instances running Ubuntu 10.04 and I've recently started using Amazon's Route 53 as my DNS. The purpose of doing that was to allow the instances to refer to each other by ...
29
votes
3answers
18k views

What's best practice for communication between Amazon EC2 instances?

I've been setting up Amazon EC2 instances for an upcoming project. They are all micro instances, running Ubuntu Server 64bit. Here's what I've setup so far: Web Server -- Apache Database Server ...
2
votes
3answers
536 views

Securing a freshly installed LAMP + Virtualmin server

I just installed LAMP and Virtualmin on my Amazon EC2 instance. My domain name is mapped to the external IP and now everything is working well. But I feel like it is not very secure. When I visit my ...
2
votes
2answers
500 views

Is there an alternative to installing a domain controller on the EC2 cloud for administering users across all of your instances?

We have a bunch of servers up on the Amazon EC2 cloud running Windows 2003 Server, and I was wondering if you knew of any ways (apart from a domain controller, which sounds like a pain to do on EC2) ...
4
votes
5answers
1k views

Two Factor Authentication on EC2

I need to host stuff for a financial institution on EC2. The bank wants complete Two Factor Authentication so Stuff like having SSH with a key with password. Something like SecureID or similar would ...
0
votes
2answers
144 views

Linux EC2 Instance Security Consideration

I am going to host a web site in Amazon EC2 instance which would be a Linux instance. My web application will be developed using PHP, Apache and MySql. As I am new to Linux and Amazon EC2 environment, ...
1
vote
2answers
87 views

Linux EC2 Instance Security Consideration [duplicate]

Possible Duplicate: Linux EC2 Instance Security Consideration I am going to host a web site in Amazon EC2 instance which would be a Linux instance. My web application will be developed ...
3
votes
3answers
4k views

SSH access problem: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY

We have a server XXX ON Amazon EC2. SSH is running on a standard (22) port. I placed my pubkey at the /.ssh/authorized_keys file The fun thing is that YESTERDAY it was working great! But today, I ...
0
votes
4answers
2k views

monitoring outbound traffic on port 25

I just started up a new instance that i build using debian squeeze on amazon last night. This morning I just got an email saying that I reached a limit on the volume of email you were able to send ...