Skip to content
This repository has been archived by the owner on Mar 3, 2021. It is now read-only.

DEPRECATED: A Lambda to help manage SSH access to EC2 boxes

Notifications You must be signed in to change notification settings

guardian/github-keys-to-s3-lambda

Repository files navigation

github-keys-to-s3-lambda

DEPRECATED: Please use ssm-scala for future deployments.

The CI build has now been disabled.

Lambda function used to store public keys for each team member on S3 to be used for authentication when logging into AWS instances via SSH. Keys are fetched from github for teams listed in TEAMS_TO_FETCH in index.js.

To get access to the bucket containing the shared keys, you'll need to add your account to the bucket policy Your AWS account id can be found in prism)

You will also need to submit a pull request to add your team's name on github (see here) to TEAMS_TO_FETCH in index.js to get the lambda to start fetching keys for your team.

This lambda is designed to be used with the ssh-keys role in amigo.

Deployment

  1. (Suggested) switch to the version of node used by the lambda (currently 4.3)
  2. npm install
  3. ./update-lambda.sh (requires deploy tools account credentials)

Notes

There is a legacy version of this lambda running in the composer AWS account, pusing to a bucket called github-team-keys in the same account. When everyone has switched over their setup to use the new bucket we can kill it.

When looking at the lambda function in the AWS console you may see a "Process exited before completing request" error - this is because we don't call context.succeed() at the end of the function. The function has probably completed successfully. This should be fixed at some point.

About

DEPRECATED: A Lambda to help manage SSH access to EC2 boxes

Resources

Code of conduct

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published