0
votes
2answers
58 views

EC2 Load balancer and wildcard/multi-domain SSL certificates

I am running three sites through one load balancer (and 2 child-application servers) One of the site's has an SSL certificate, but I'd like to add a certificate for the other two sites What is my ...
0
votes
2answers
46 views

Is there a use case when traffic needs to be secured between 2 AWS instances?

According to Amazon's security white paper, it is not possible sniff traffic by other tenants http://awsmedia.s3.amazonaws.com/pdf/AWS_Security_Whitepaper.pdf Question: Is there a use case when ...
2
votes
0answers
42 views

How can I find a security group's dependencies? [duplicate]

There is a similar question that didn't receive a proper answer. How can I find a security group's dependencies? These include EC2 instances, but other services also create dependencies, like the ...
1
vote
1answer
384 views

AWS: network ACL blocks outbound traffic

I am implementing a REST service in Amazon AWS. The internal servlets listen on numerous ports like 8080 and 9000, and an Apache configured as a reverse proxy serves them with proper URL schema using ...
0
votes
1answer
62 views

DDoS Attack Mitigation Techniques [duplicate]

Our hosting is set up on Amazon EC2 servers, which have been performing great. The problem we run into are spikes in requests for invalid URLs from scripts/bots looking for security holes. When ...
1
vote
1answer
134 views

Traffic in a AWS virtual private cloud

On Amazon AWS, should I encrypt sensitive traffic between instances in a virtual private cloud? More specifically, is the traffic between the instances in such a VPC private as in a virtual network, ...
1
vote
1answer
517 views

Bitlocker drive encryption on AWS Windows instance

I'm trying to figure out how best to protect the data of a single Windows Server 2012 instance on AWS and according to "AWS_Securing_Data_at_Rest_with_Encryption.pdf" it says: "Encrypting Amazon ...
0
votes
1answer
41 views

Allow HTTP packet from specific hosts on an ec2 instance strictly

I have an ec2 instance (proxy) which is being used as http proxy server. There are some other hosts (hostA, hostB, hostC), I want the proxy server will only allow connection from those hosts. For ...
0
votes
1answer
647 views

Blocking repeated http requests in Apache behind a load balancer

I have a number of EC2 servers on AWS running apache behind a load balancer (ELB). Every now and then some IP address abuses the API hosted on the EC2 servers and causes a denial of service. I have no ...
0
votes
3answers
825 views

Is It Possible to Copy an AWS Security Group?

We have some security groups that have quite a few rules in them. Rather than having to recreate the same rules for a number of security groups just to accommodate minor differences, is it possible to ...
1
vote
1answer
77 views

Given an Amazon Web Service Security Group, how can I find out what the IP's are?

I'm looking at using a cloud service which has an AWS Security group... I've got a hardware firewall and a software firewall. I have no idea how to say: Given that security group, allow any ...
0
votes
1answer
210 views

Network setup on AWS for NFS

I have a number of servers which all need external IP addresses, as they provide different services and need to be invidually accessible: server1.mydomain.com > 1.2.3.4 server2.mydomain.com > ...
-1
votes
1answer
234 views

What security assurances does a developer running a Windows EC2 hosted Web application need? [closed]

Being a developer, security is a completely new world for me! I have a windows EC2 instance running Windows server 2012 RTM, public facing .NET 4.5 Web application and SQL server 2012 web edition. ...
3
votes
2answers
163 views

Security group for a changing aws instance via external ip address

I have an issue I am sure other people have come across and I am trying to find the best solution. It may be a bit long winded so please bare with me. PLEASE NOTE: port 22 is just an example port ...
1
vote
0answers
363 views

security group not allowing connection to postgres ec2 aws

Hey im having some trouble allow remote connections to postgres from other ec2 instances using the named security group feature to rules. I have set the listens directive in postgres.conf to "*" and ...
1
vote
1answer
2k views

Allow any ip to connect to Amazon Web Services RDS using MySQL

Is it possible to allow any IP to connect to a Amazon RDS instance using MySQL? Explaining my scenario as requested in the comments: Amazon RDS by default blocks all the incoming connections which ...
3
votes
2answers
1k views

How do I view Security Group rules for an AWS EC2 Security Group using the command-line tools?

I know that you can set Security Group rules with ec2-authorize and ec2-revoke. How do you view the rules of a given security group?
0
votes
1answer
1k views

EC2 instance always ask me to enter passphrase for the pem during connection

The pem file is generated by AWS console I was able to connect using the EC2 remote web interface, using the same pem file The permission of pem is 600 already Error.. ssh -i ~/test.pem -v ...
5
votes
2answers
555 views

Options for PCI-DSS on AWS - file integrity monitoring and intrusion detection

I need to deploy some file integrity monitoring and intrusion detections software on AWS instances. I really wanted to use OSSEC, however it does not work well in an environment where servers can ...
1
vote
1answer
261 views

What are the likely threats to a public-facing DB instance?

Quick intro: Small company, VERY limited resources. I pretty much do everything including take out the trash. We've been running an instance of MySQL internally for years and it's worked OK, but I ...
1
vote
1answer
696 views

403 forbidden error going through aws load balancer

I am running a IIS 7 Server behind an aws load balancer. I am using a Verisign SSL certificate which is installed properly but whenever I put in the URL, or the DNS name of the load balancer I get a ...
0
votes
1answer
44 views

How do I create a new user on AWS?

I want to give developers individual access to AWS Management Console, and have their own security keys for AWS command line tools. Is it possible for me to do this using the command line tools? And ...
1
vote
2answers
445 views

How to configure Amazon Security Groups to achieve multi-tier architecture?

What is the preferred way to configure Amazon Security Groups to achieve a multi-tier architecture? Each of my instances has its own Security Group, which I only want to use for rules specific to an ...
0
votes
2answers
1k views

How to secure a group of Amazon EC2 instances

I have several Amazon EC2 instances running Ubuntu 10.04 and I've recently started using Amazon's Route 53 as my DNS. The purpose of doing that was to allow the instances to refer to each other by ...
1
vote
3answers
827 views

Alternatives to Amazon VPC

I currently have 20 Windows VMs that are running on Amazon EC2. There are LOTS of people in the company that need ad-hoc RDP access to each one of these boxes. Occassionally I also run Unix instances, ...
4
votes
1answer
1k views

AWS Amazon EC2 - password-less SSH login for non-root users using PEM keypairs

We've got a couple of clusters running on AWS (HAProxy/Solr, PGPool/PostgreSQL) and we've setup scripts to allow new slave instances to be auto-included into the clusters by updating their IPs to ...
0
votes
2answers
548 views

AWS EC2: How to determine whether my EC2/scalr AMI was hacked? What to do to secure it?

(See update below) I received notification from Amazon that my instance tried to hack another server. there was no additional information besides log dump: Original report: Destination IPs: ...
9
votes
3answers
6k views

Are Amazon EC2 Private IPs reachable from any instance running in EC2?

After searching previous questions here, the general consensus seems to be if an instance that I own is assigned a private IP of 10.208.34.55, that only OTHER INSTANCES I OWN can reach it at that ...
6
votes
2answers
2k views

AWS S3 Backup Strategies - How should I approach backing up S3 buckets?

I am in the process of building a web-app with potential for a massive amount of storage requirements which can be satisfied by amazon S3. My main concern is the usage of API keys on the server, and ...