Skip to content

Latest commit

 

History

History
150 lines (103 loc) · 6.88 KB

A-step-by-step-guide-to-creating-credentials-of-each-cloud-service-provider.md

File metadata and controls

150 lines (103 loc) · 6.88 KB
Raw

Note - This article was edited on July 6th, 2021. You can freely improve this article whenever you want.

Credentials are unfamiliar for cloud beginners who use cloud management consoles for the first time 😓

I hope this article will be helpful to those who are having trouble creating credentials. 😎

This article was written based on poc-farmoni's README, and I would like to express my gratitude to the contributors, powerkimhub, seokho-son, and jihoon-seo.

Index

A step-by-step guide to creating credentials of each cloud service provider

Amazon Web Services (AWS)

Reference: Getting Started with the AWS SDK for Go

  1. Sign In to the Console

  2. Open the IAM console image

  3. Choose your IAM user name (not the check box). If the IAM user name doesn't exist, please add it. image

  4. Open the Security credentials tab, and then choose Create access key. image

  5. To see the new access key, choose Show. Your credentials resemble the following:

  • Access key ID: AKIAIOSFODNN7EXAMPLE
  • Secret access key: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
  1. To download the key pair, choose Download .csv file. Store the keys image

Google Cloud Platform (GCP)

Reference: Launching a Google Compute Instance via the API

  1. Sign In to the Console

  2. Create a project image

  3. Create a new Account including the roles "Compute Admin" & "Service Account User" image image

  4. Choose the created service account image

  5. Open the KEYS tab, choose ADD KEY, and choose to CREATE (The private key is automatically saved to your computer.) image

  6. Enable "Compute Engine API" image

Microsoft (MS) Azure

Reference: Manage credentials in Azure Automation - Create a new credential asset

Command-line interface (CLI)

  • Azure CLI 인증 키 설정
# curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
# az login
# mkdir ~/.azure
# cd ~/.azure
# az ad sp create-for-rbac --sdk-auth > azure.auth
  • VM SSH 접속 키
# cp ~/.gcp/gce-vm-key ~/.azure/azure-vm-key
# cp ~/.gcp/gce-vm-key.pub ~/.azure/azure-vm-key.pub
# ssh -i “~/.azure/azure-vm-key" <username>@<VM IP addr>

Portal

The following will be needed for API calls (Please make a note, when you see those).

  • Client ID
  • ClientSecret (i.e., Value)
  • Tenant ID
  • Subscription ID

  1. Sign In to the Portal

  2. Open Azure Active Directory image

  3. Open App registrations image

  4. Create a New registration
    NOTE - After creation, save the application (client) ID, Object ID, and Directory (tenant) ID image

  5. Open Certificates & secrets and create a New client secrets
    NOTE - Save client secrets' key and value because you won't be able to see it later image

  6. Open Subscriptions
    NOTE - Save the subscription ID image

  7. Choose a subscription to allocate the app image

  8. Add role assignment on Access control (IAM) image

Alibaba Cloud

Reference: Create an AccessKey pair for a RAM user

  1. Sign In to the console image

  2. Open the RAM console

  3. Choose Identities > Users and then choose Create User image

  4. Fill in the form image

  5. Click the username of the target RAM user in the User Logon Name/Display Name column image

  6. Click Create Access Key and download the Access Key
    NOTE - Save client secrets' key and value because you won't be able to see it later image

  7. Setup permission (if needed) image

The following will be needed for API calls.

  • AccessKeyId
  • AccessKeySecret

Additional contributions are always welcome 😍