May 5, 2022

Describe the Resources Required for Virtual Machines in Azure

AZ-900 : Resource Group

This is an excellent explanation about what is resource group in Azure within 6 min by John.

My notes:

  • Subscription-ID
    • Resource Group
      • VM, OS, Disk, Public-IP
      • VNIC, VNET and subnet, NSG, ip-config  

 

Links:

 

May 4, 2022

8 Essential Tips for Securing Networks

Here're the 8 tips I copied from Rapid7 for "emergency field security" that any defenders can take immediately. 

Given the urgency, many information security teams find themselves scrambling to prioritize mitigation actions and protect their networks. Some may not have time to make their networks less flat, patch all the vulnerabilities, set up a backup plan, encrypt all the data at rest, and practice a incident response scenarios before disaster strikes. 

With essential security, it helps identifying urgent steps to take right now.

  1. Starts prioritize those patches with CISA's KEV.
  2. Keep an eye on egress.
  3. Review Active Directory (AD) groups.
  4. Don't laugh off LOL.
  5. Don't push it.
  6. Stick to the script.
  7. Call for backup.
  8. Practice good posture.


Links

May 3, 2022

YAML Tutorial

YAML stands for “YAML Ain’t markup language” is a data serialization language which is designed to be human -friendly and works well with other programming languages for everyday tasks. 

Features:

  • YAML data is portable between programming languages
  • Includes data consistent data model
  • Easily readable by humans
  • Supports one-direction processing
  • YAML is case sensitive
  • The files should have .yaml as the extension
  • YAML does not allow the use of tabs while creating YAML files; spaces are allowed instead


Links:

May 2, 2022

Python and GitHub Secrets

This is a simple note to show how to access GitHub Secrets with Python.

First, to add a new secret, go to GitHub repository > Settings > Secrets > New Repository Secret.

Second, define a Name ('SEC_NAME') and put in the Value.

 

Next, map them as environment variables in GitHub Actions Workflow.

....

    - name: Run tests

        env:

            API_KEY: ${{ secrets.SEC_NAME }}

        run:  |

....

 

Finally, refer to the env variable in Python script.

import os

API_KEY = os.environ['API_KEY']

....



May 1, 2022

Upgrade to Ubuntu 22.04 LTS

Just upgraded to Ubuntu 22.04 today.

As a Jumpstart, I just search for some cheatsheets like, things to do after installing Ubuntu. And I also found a very good article for introducing basic terminal tips.

Overall, Ubuntu 22.04 is simple and sweet. 🤟


Links: