awscookbook/security

Chapter 1 of the AWS Cookbook

security's Issues

Error running prereq script

Describe the bug
Running cdk deploy creates error:

Traceback (most recent call last):
  File "D:\Temp\Security\106-Connecting-to-EC2-Instances-Using-Session-Manager\cdk-AWS-Cookbook-106\app.py", line 10, in <module>
    CdkAwsCookbook106Stack(app, "cdk-aws-cookbook-106",
  File "D:\Temp\Security\106-Connecting-to-EC2-Instances-Using-Session-Manager\cdk-AWS-Cookbook-106\.venv\lib\site-packages\jsii\_runtime.py", line 112, in __call__
    inst = super().__call__(*args, **kwargs)
  File "D:\Temp\Security\106-Connecting-to-EC2-Instances-Using-Session-Manager\cdk-AWS-Cookbook-106\cdk_aws_cookbook_106\cdk_aws_cookbook_106_stack.py", line 18, in __init__
    subnet_type=ec2.SubnetType.PRIVATE_ISOLATED,
  File "C:\Users\dave\AppData\Local\Programs\Python\Python310\lib\enum.py", line 437, in __getattr__
    raise AttributeError(name) from None
AttributeError: PRIVATE_ISOLATED

Subprocess exited with error 1
(.venv)

Desktop (please complete the following information):

• OS: Windows 10

Is this an easy fix? Alternatively, is there a way to just use CloudFormation templates from the AWS console? I'm not a Python developer so don't know how to resolve this.

Receipe 1.4 $AWS_ACCOUNT_ARN to be replaced by $AWS_ACCOUNT_NUM

Describe the bug
In Receipe 1.4 $AWS_ACCOUNT_ARN is not what needs to be used, instead the account number needs to be used.

To Reproduce
Steps to reproduce the behavior:
Follow all the steps of the receipe until you reach the validation checks (test the ec2:CreateInternetGateway action)

Expected behavior
The account ARN is not the right parameter here so this will fail and return a different error message than in the book. Instead of using the ACCOUNT_ARN I extracted my account number in a new variable I named AWS_ACCOUNT_NUM and it worked.

An error occurred (MalformedPolicyDocument) when calling the CreateRole operation: This policy contains invalid Json

Creating a role using AWS CLI generates the following error:
An error occurred (MalformedPolicyDocument) when calling the CreateRole operation: This policy contains invalid Json

1. Go to AWS Cookbook repo
2. Run ROLE_ARN=$(aws iam create-role --role-name AWSCookbook101Role --assume-role-policy-document assume-role-policy.json --output text --query Role.Arn)

Expected behavior
A clear and concise description of what you expected to happen.

Desktop (please complete the following information):

• macOS 12.4 ARM
• Chrome, Visual Studio Code, iTerm, AWS CLI 2.7.12, Python 3.10.5

JSON is happily accepted when creating the role through the AWS UI. I'm inclined to think I'm fat fingering something or something about AWS CLI doesn't like the formatting somewhere.