unfor19/iamlive-docker repository overview

⁠iamlive-docker

Run iamlive⁠ as a Docker container.

To read more about how iamlive works, see Determining AWS IAM Policies According To Terraform And AWS CLI ⁠

⁠Requirements

1. AWS Account Credentials Configured⁠
2. AWS CLI⁠
3. Docker⁠

⁠Getting Started

⁠Run iamlive

1. Git clone this repo, or curl⁠ relevant files

   curl -L --remote-name-all https://raw.githubusercontent.com/unfor19/iamlive-docker/master/{Dockerfile,.dockerignore,Makefile,entrypoint.sh,generate_ca.sh} && \
   chmod +x entrypoint.sh generate_ca.sh
   

   Copy
2. Terminal #1: Build the Docker image

   make build
   

   Copy
3. Terminal #2: Run the Docker image for the first time

   make run
   # Runs in the background ...
   # Average Memory Usage: 88MB
   

   Copy
4. Terminal #1: Copy CA certificate from the container to host; To keep ca.pem valid for future runs, do not remove the iamlive-docker container.

   make copy
   

   Copy

⁠Proxy IAM Requests Through iamlive

1. Terminal #1: Set AWS credentials

   export AWS_PROFILE=MY_AWS_PROFILE
   

   Copy

   OR

   export AWS_ACCESS_KEY_ID=MY_AWS_ACCESS_KEY_ID
   

   Copy

   export AWS_SECRET_ACCESS_KEY=MY_AWS_SECRET_ACCESS_KEY
   

   Copy

2. Terminal #1: Set required environment variables HTTP_PROXY, HTTPS_PROXY⁠ and AWS_CA_BUNDLE⁠

   export \
       HTTP_PROXY=http://127.0.0.1:80 \
       HTTPS_PROXY=http://127.0.0.1:443
   

   Copy

   AND

   export AWS_CA_BUNDLE="${HOME}/.iamlive/ca.pem"
   

   Copy

3. Terminal #1: Test it by making calls to AWS, using the CLI is the easiest way

   aws s3 ls
   

   Copy

   Terminal #2: iamlive output after aws s3 ls

    {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Effect": "Allow",
                "Action": [
                    "s3:ListAllMyBuckets"
                ],
                "Resource": "*"
            }
        ]
    }   
   

   Copy

4. Terminal #1: Stop the iamlive container

   make stop
   

   Copy

5. Terminal #2: Start iamlive container again (no need to invoke make copy)

   make start
   

   Copy

6. Terminal #1: Do your thing again ;)

⁠Authors

Created and maintained by Meir Gabay⁠

⁠License

This project is licensed under the DBAD⁠ License - see the LICENSE⁠ file for details