Aws - Revision history

Ekaanbj: /* what does it mean? */

2026-03-12T15:00:36Z

what does it mean?

← Older revision		Revision as of 15:00, 12 March 2026
Line 18:		Line 18:
	iam Identity and Access Management		iam Identity and Access Management
	imds Instance Metadata Service.		imds Instance Metadata Service.
			irsa IAM Roles for Service Accounts
	kenesis analyzing real-time streaming data		kenesis analyzing real-time streaming data
	kms key management Service		kms key management Service

Ekaanbj: /* list organizations */

2026-01-14T19:45:09Z

list organizations

← Older revision		Revision as of 19:45, 14 January 2026
Line 399:		Line 399:
	==list organizations==		==list organizations==
	aws organizations list-accounts \| jq -r '.Accounts[] \| "\(.Name) \t \(.Email) \t \(.Id) \t \(.Status)"' \| column_tab \| sort		aws organizations list-accounts \| jq -r '.Accounts[] \| "\(.Name) \t \(.Email) \t \(.Id) \t \(.Status)"' \| column_tab \| sort
			=Which permissions does user have=
			==aws sts get-caller-identity==
			{
			"UserId": "AROAWN2ZF2OSSO6EHQX42:andreas.bjorklund",
			"Account": "442031788965",
			"Arn": "arn:aws:sts::442031788965:assumed-role/aws-binero/andreas.bjorklund"
			}
			==aws iam list-role-policies --role-name aws-binero==
			{
			"PolicyNames": []
			}
			==aws iam list-attached-role-policies --role-name aws-binero==
			{
			"AttachedPolicies": [
			{
			"PolicyName": "AdministratorAccess",
			"PolicyArn": "arn:aws:iam::aws:policy/AdministratorAccess"
			}
			]
			}
			==aws iam get-policy-version --policy-arn arn:aws:iam::aws:policy/AdministratorAccess --version-id v1==
			{
			"PolicyVersion": {
			"Document": {
			"Version": "2012-10-17",
			"Statement": [
			{
			"Effect": "Allow",
			"Action": "*",
			"Resource": "*"
			}
			]
			},
			"VersionId": "v1",
			"IsDefaultVersion": true,
			"CreateDate": "2015-02-06T18:39:46+00:00"
			}
			}

Ekaanbj: /* delete public key */

2026-01-14T09:16:20Z

delete public key

← Older revision		Revision as of 09:16, 14 January 2026
Line 396:		Line 396:
	==delete public key==		==delete public key==
	aws ec2 delete-key-pair --key-name <name>		aws ec2 delete-key-pair --key-name <name>
			=organisations=
			==list organizations==
			aws organizations list-accounts \| jq -r '.Accounts[] \| "\(.Name) \t \(.Email) \t \(.Id) \t \(.Status)"' \| column_tab \| sort

Ekaanbj: /* ssm/parameters */

2026-01-13T14:55:26Z

ssm/parameters

← Older revision		Revision as of 14:55, 13 January 2026
Line 368:		Line 368:
	Get parameters recursive		Get parameters recursive
	aws ssm get-parameters-by-path --recursive --region eu-west-1 --path /		aws ssm get-parameters-by-path --recursive --region eu-west-1 --path /
	Get latest Amazon Linux 2		Get latest Amazon Linux 2023
	aws ssm get-parameters --names /aws/service/ami-amazon-linux-latest/~~amzn2~~-ami-~~hvm~~-x86_64~~-gp2~~ --query 'Parameters[0].Value' --output text		aws ssm get-parameters --names /aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64 --query 'Parameters[0].Value' --output text

	=list ecr repositories=		=list ecr repositories=

Ekaanbj: /* ssm/parameters */

2026-01-13T14:52:42Z

ssm/parameters

← Older revision		Revision as of 14:52, 13 January 2026
Line 368:		Line 368:
	Get parameters recursive		Get parameters recursive
	aws ssm get-parameters-by-path --recursive --region eu-west-1 --path /		aws ssm get-parameters-by-path --recursive --region eu-west-1 --path /
			Get latest Amazon Linux 2
			aws ssm get-parameters --names /aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2 --query 'Parameters[0].Value' --output text

	=list ecr repositories=		=list ecr repositories=
	aws ecr describe-repositories		aws ecr describe-repositories

Ekaanbj: /* Upload public ssh key */

2026-01-13T14:46:59Z

Upload public ssh key

← Older revision		Revision as of 14:46, 13 January 2026
Line 389:		Line 389:
	==Upload public ssh key==		==Upload public ssh key==
	aws ec2 import-key-pair --key-name <name> --public-key-material fileb://~/.ssh/id_ed25519.pub		aws ec2 import-key-pair --key-name <name> --public-key-material fileb://~/.ssh/id_ed25519.pub
			==list keypairs==
			aws ec2 describe-key-pairs
			==delete public key==
			aws ec2 delete-key-pair --key-name <name>

Ekaanbj: /* get info about saml provider */

2026-01-13T14:40:21Z

get info about saml provider

← Older revision		Revision as of 14:40, 13 January 2026
Line 386:		Line 386:
	=get info about saml provider=		=get info about saml provider=
	aws iam get-saml-provider --saml-provider-arn <arn>		aws iam get-saml-provider --saml-provider-arn <arn>
			=ssh=
			==Upload public ssh key==
			aws ec2 import-key-pair --key-name <name> --public-key-material fileb://~/.ssh/id_ed25519.pub

Ekaanbj: /* access policies */

2025-12-04T15:33:36Z

access policies

New page

=what does it mean?=
alb Application Load Balancer
acm AWS Certificate Manager
asg Auto Scaling Group
CloudFormation Iac Infrastructure as code
cloudfront cdn Content Delivery Network
cloudwatch monitoring and management service that provides data and actionable insights.
cwagent cloud watch agent.
DynamoDB NoSQL database
ebs elastic block storage
ecr Elastic Container Registry
ecs Elastic Container Service.
efs Elastic File System
eks Elastic Kubernetes Service
elb Elastic Load Balancing
eni Elastic Network Interface, is a virtual nic that can be attached to an EC2 instance within a vpc.
fargate Fargate is a serverless compute service that can run containers on ECS or EKS.
iam Identity and Access Management
imds Instance Metadata Service.
kenesis analyzing real-time streaming data
kms key management Service
lambda is an event-driven, serverless computing platform provided
lbc Load Balancer Controller
nlb Network Load Balancer
peering connection Networking connection established between two VPC.
sg Security group
sid "statement ID" as an optional identifier for the policy statement. Must be uniq in the json statement.
sns Simple Notification Service. message bus.
sqs Simple Queue Service
ssm "Amazon Simple Systems Manager" "Amazon EC2 Systems Manager" Now known as AWS Systems Manager
ssm agent Systems Manager Agent runs on EC2 makes it possible for Systems Manager to manage,resources.
sts Security Token Service
transit gateway service that simplifies and centralises the management of connectivity between multiple VPCs, VPN connections, and on-premises networks.
waf web application firewall
vpc Virtual Private Cloud
vgw Virtual Private Gateway. VPN endpoint on the AWS side of a Site-to-Site VPN connection.

=documentation=
https://awscli.amazonaws.com/v2/documentation/api/latest/reference/index.html
=aws completion=
complete -C '/usr/bin/aws_completer' aws

=version=
aws --version
=configure aws=
aws help config-vars

=whoami=
aws sts get-caller-identity
=which groups do I belong to=
aws iam list-groups
=list databases=
aws rds describe-db-instances
=List databases short version=
aws rds describe-db-instances --region=eu-west-1 --query 'DBInstances[*].[DBInstanceArn,Engine,DBInstanceIdentifier]'
aws rds describe-db-instances | jq -r '.DBInstances[]| [.DBInstanceIdentifier, .DBInstanceClass, .Engine, (.Endpoint|.Address, .Port)]|@tsv' | column -t -s $'\t'

=List databases in all regions=
aws account list-regions | jq -r '.Regions[]| select(."RegionOptStatus" == "ENABLED_BY_DEFAULT")|.RegionName' | while read REGION ; do echo '*' ${REGION} ; aws rds describe-db-instances --region=${REGION} | jq -r '.DBInstances[]| .DBInstanceIdentifier +"\t"+ .DBInstanceClass +"\t"+ .Engine +"\t"+ .DBName' | column -t -s $'\t' ; done

=list events=
export DB=<database> ; aws rds describe-events --duration 10080 --region=eu-west-1 --source-identifier ${DB} --source-type db-instance

=list logfiles=
aws rds describe-db-log-files --region=eu-west-1 --db-instance-identifier admin
=view logfiles=
aws rds download-db-log-file-portion --region=eu-west-1 --db-instance-identifier admin --log-file-name error/mysql-error-running.log.2022-05-05.14 --output text
=List files in s3=
aws s3 ls
=Create bucket=
aws --endpoint-url http://localhost:9000 s3 mb s3://minsio
make_bucket: minsio
=Push files to bucket.=
aws --endpoint-url http://localhost:9000 s3 sync . s3://minsio
=remove files from s3 bucket=
aws s3 rm s3://<bucket> --recursive --exclude '*' --include '<path>-*.gz'
=Do files expire=
aws s3api get-bucket-lifecycle-configuration --bucket <bucket>
=undelete revision controlled files=
Possible file that you are searching for
aws s3 ls s3://$(awk '/bucket/ {print $3}' tf-state-backend.tf | sed 's/"//g')/$(awk '/key/ {print $3}' tf-state-backend.tf | sed 's/"//g')
Recover expired file
export BUCKET=$(awk '/bucket/ {print $3}' tf-state-backend.tf | sed 's/"//g')
export PREFIX=$(awk '/key/ {print $3}' tf-state-backend.tf | sed 's/"//g')
aws s3api list-object-versions --bucket "${BUCKET}" --prefix "${PREFIX}" --output json --query 'DeleteMarkers[?IsLatest==`true`].VersionId' | jq '.[]' -r | xargs echo aws s3api delete-object --bucket "${BUCKET}" --key "${PREFIX}" --version-id

=save policy of s3 bucket=
aws s3api get-bucket-policy --bucket <bucket> | jq '.Policy | fromjson'
=Copy s3 files to local path=
aws s3 cp s3://abjorklund-kafka-external-bootstrap-lb-logs/AWSLogs/203144576027/vpcflowlogs/eu-north-1/2025/09/02/17/203144576027_vpcflowlogs_eu-north-1_fl-0d84f7269ca36d677_20250902T1700Z_d63c36ab.log.gz /temp/
=delete s3 bucket=
aws s3 rb s3://abjorklund-kafka-external-bootstrap-lb-logs --force

=eks=
==eksctl install==
curl --silent --location "https://github.com/weaveworks/eksctl/releases/latest/download/eksctl_$(uname -s)_amd64.tar.gz" | sudo tar xz -C /usr/local/bin

==configure for kubectl==
aws eks update-kubeconfig --name "${AWS_EKS_CLUSTER}"
aws eks update-kubeconfig --name "${AWS_EKS_CLUSTER}" --role-arn arn:aws:iam::<arn>:<arn>

==list eks clusters==
eksctl get clusters
aws eks list-clusters
==Version of eks==
aws eks describe-cluster --name "${AWS_EKS_CLUSTER}" --query "cluster.version" --output text

==Update eks==
eksctl upgrade cluster --name "${AWS_EKS_CLUSTER}" --version <new-version> --approve
aws eks update-cluster-version --name "${AWS_EKS_CLUSTER}" --kubernetes-version <new-version>
Follow upgrade
aws eks describe-update --name "${AWS_EKS_CLUSTER}" --update-id <update-id>
==View update status==
aws eks describe-cluster --name "${AWS_EKS_CLUSTER}"
kubectl get events -n kube-system --sort-by='.metadata.creationTimestamp'

==Update eks nodegroup==
Confirm that there is only one nodegroup.
eksctl get nodegroup --cluster "${AWS_EKS_CLUSTER}"
If there is only one nodegroup then you can set:
AWS_EKS_NODEGROUP=$(aws eks list-nodegroups --cluster-name "${AWS_EKS_CLUSTER}" --query 'nodegroups[0]' --output text)
eksctl upgrade nodegroup --name="${AWS_EKS_NODEGROUP}" --cluster "${AWS_EKS_CLUSTER}"

==View status==
aws eks describe-nodegroup --cluster-name "${AWS_EKS_CLUSTER}" --nodegroup-name "${AWS_EKS_NODEGROUP}"

==list addons and version number==
aws eks list-addons --cluster-name "${AWS_EKS_CLUSTER}" | jq -r '.addons[]' | while read AWS_EKS_ADDON ; do echo "${AWS_EKS_ADDON}" $(aws eks describe-addon --cluster-name "${AWS_EKS_CLUSTER}" --addon-name "${AWS_EKS_ADDON}" --query 'addon.addonVersion' | jq -r .) ; done
==List addons==
aws eks list-addons --cluster-name "${AWS_EKS_CLUSTER}"

==Look for versions of addons==
aws eks describe-addon-versions --addon-name kube-proxy
==Update eks add-on==
aws eks update-addon --cluster-name "${AWS_EKS_CLUSTER}" --addon-name <addon-name> --addon-version <version> --resolve-conflicts OVERWRITE
==list available supported add-on==
export AWS_EKS_CLUSTER=$(aws eks list-clusters --query 'clusters[0]' --output text)
export AWS_EKS_VERSION=$(aws eks describe-cluster --name "${AWS_EKS_CLUSTER}" --query "cluster.version" --output text)
aws eks list-addons --cluster-name "${AWS_EKS_CLUSTER}" | jq -r '.addons[]' | while read AWS_EKS_ADDON ; do echo '*' "${AWS_EKS_ADDON}" ; aws eks describe-addon-versions --addon-name "${AWS_EKS_ADDON}" --kubernetes-version "${AWS_EKS_VERSION}" | jq -r '.addons[].addonVersions[]|[.addonVersion, .compatibilities[].defaultVersion]|@tsv' ; done

==aws eks access can work i two modes. configmap or api==
aws eks describe-cluster --name $AWS_EKS_CLUSTER --query 'cluster.accessConfig'
"authenticationMode": "API_AND_CONFIG_MAP"
==list users in all eks clusters==
aws eks list-clusters | jq -r '.clusters[]' | while read EKS ; do echo '*' Eks cluster $EKS ; eksctl get iamidentitymapping --cluster $EKS ; done

==grant access to eks cluster(configmap)==
eksctl create iamidentitymapping --cluster "${AWS_EKS_CLUSTER}" --arn arn:aws:iam::442031788965:role/Administrator --group system:masters --username eks-admin

==who has access to cluster configmap==
oc get configmap aws-auth -n kube-system -o yaml
==Grant access to above==
Using eksctl
eksctl create iamidentitymapping --cluster "${AWS_EKS_CLUSTER}" --arn arn:aws:iam::442031788965:role/<role> --group system:masters --username eks-admin
Using kubectl
oc edit configmap aws-auth -n kube-system -o yaml

==Who has access api mode==
aws eks list-access-entries --cluster-name "${AWS_EKS_CLUSTER}"
===Add permissions to cluster from above===
aws eks create-access-entry --cluster-name $AWS_EKS_CLUSTER --principal-arn arn:aws:iam::442031788965:role/Administrator
===Add principal arn===
aws eks associate-access-policy --cluster-name $AWS_EKS_CLUSTER --principal-arn arn:aws:iam::442031788965:role/<role> --policy-arn arn:aws:eks::aws:cluster-access-policy/AmazonEKSClusterAdminPolicy --access-scope type=cluster

==access policies==
aws eks list-associated-access-policies --cluster-name $AWS_EKS_CLUSTER --principal-arn arn:aws:iam::442031788965:role/<role>

==list logs of aws-load-balancer-controller(loadbalancer)==
oc logs --tail=-1 -n kube-system $(oc get leases -n kube-system aws-load-balancer-controller-leader -o custom-columns=HOLDER:.spec.holderIdentity --no-headers | awk -F_ '{print $1}')
List corresponding pods
oc get pods -n kube-system -l app.kubernetes.io/name=aws-load-balancer-controller

==Manifest for creating an deployment that creates an nginx server and creating a service that provides a loadbalancer==
<pre>
oc apply -f - << 'EOF'
apiVersion: v1
kind: Namespace
metadata:
name: nginx
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: nginx-deployment
namespace: nginx
labels:
app: nginx
spec:
replicas: 2
selector:
matchLabels:
app: nginx
template:
metadata:
labels:
app: nginx
spec:
containers:
- name: nginx
image: nginx:latest
ports:
- containerPort: 80
volumeMounts:
- name: nginx-html
mountPath: /usr/share/nginx/html
volumes:
- name: nginx-html
configMap:
name: nginx-html
items:
- key: index.html
path: index.html
---
apiVersion: v1
kind: ConfigMap
metadata:
name: nginx-html
namespace: nginx
data:
index.html: |
<!DOCTYPE html>
<body>
<h1>Hello, World!</h1>
</body>
---
apiVersion: v1
kind: Service
metadata:
name: nginx-service
namespace: nginx
annotations:
service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
service.beta.kubernetes.io/aws-load-balancer-internal: "true"
service.beta.kubernetes.io/aws-load-balancer-ip-address-type: ipv4
service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip
service.beta.kubernetes.io/aws-load-balancer-scheme: internal
service.beta.kubernetes.io/aws-load-balancer-type: external
spec:
selector:
app: nginx
ports:
- name: http
port: 80
targetPort: 80
protocol: TCP
type: LoadBalancer
loadBalancerClass: service.k8s.aws/nlb
externalTrafficPolicy: Cluster
ipFamilyPolicy: SingleStack
ipFamilies:
- IPv4
EOF
</pre>

=list roles=
aws iam list-roles | jq -r '.Roles[].RoleName'
=List roles with specific attribute=
aws iam list-roles --query "Roles[?RoleName=='Administrator']"

=assume role=
aws sts assume-role --role-arn arn:aws:iam::288898264342:role/eks-cluster-role-kafka-prod-cluster --role-session-name eks-cluster-role-kafka-prod-cluster
=save assume role policy=
aws iam list-roles --query "Roles[?RoleName=='Administrator']" | jq '.[].AssumeRolePolicyDocument' > /temp/aws_iam_list-roles.$(date_file).json
=grant access to assume role=
aws iam update-assume-role-policy --role-name Administrator --policy-document file:///<full_path_to_file>.json
{
"Version": "2012-10-17",
"Statement": {
"Effect": "Allow",
"Principal": {"AWS": [
"arn:aws:iam::442031788965:root",
"arn:aws:sts::203144576027:assumed-role/rb-sso/abjorklund"
]},
"Action": "sts:AssumeRole"
}
}

=list users=
aws iam list-users | jq -r '.Users[].UserName'
=list all users and their accesstokens=
for user in $(aws iam list-users --query 'Users[*].UserName' --output text); do
echo "User: $user"
aws iam list-access-keys --user-name "$user" --query 'AccessKeyMetadata[*].AccessKeyId' --output text
done

=get info about certain user=
aws iam get-user --user-name abjorklund
=list ec2 instances=
aws ec2 describe-instances | jq -r '.Reservations[].Instances[] | [.PrivateIpAddress, .InstanceType, .KeyName, .PublicIpAddress, (.Tags[] | .Key, .Value)] | join("\t")' | column_tab | less
Filter running instances.
aws ec2 describe-instances --filters "Name=instance-state-name,Values=running"

=list vpcs=
aws ec2 describe-vpcs $@ | jq -r '.Vpcs[] | [.CidrBlock, .VpcId, (.Tags[]?|join(":"))] | @tsv'
=vpc peering=
List connections between vpc:s
aws ec2 describe-vpc-peering-connections | jq -r '.VpcPeeringConnections[] | .AccepterVpcInfo.CidrBlock +" "+ .AccepterVpcInfo.VpcId +" "+ .AccepterVpcInfo.Region +" "+ .RequesterVpcInfo.CidrBlock +" "+ .RequesterVpcInfo.VpcId +" "+ (.Tags[] | select(.Key=="Name").Value)'

=list securitygroups=
aws ec2 describe-security-groups | jq -r .SecurityGroups[].GroupName
aws ec2 describe-security-groups | jq -r '.SecurityGroups[]|{GroupName: .GroupName,VpcId: .VpcId, Description: .Description, IpPermissions:.IpPermissions[],IpPermissionsEgress:.IpPermissionsEgress[]}, (.Tags[]?|join(":"))'
=Show info about securitygroup=
aws ec2 describe-security-groups --group-ids sg-03b884a9f0fbc58c1 --query 'SecurityGroups[0].{ID:GroupId,Rules:IpPermissions,RulesOut:IpPermissionsEgress}' --output yaml

=list accounts=
aws organizations list-accounts --query 'Accounts[*].[Name, Id]' --output table
List info about Account.
aws organizations list-accounts | jq '.Accounts[]|select(.Id=="974752708905")'
=vip/irule=
cloudfront -> distribution -> behaviour
=origin=
Where to shoot request.
=list load balancers=
aws elbv2 describe-load-balancers | jq -r '.LoadBalancers[].LoadBalancerName'
=try to access listeners=
aws elbv2 describe-load-balancers | jq -r '.LoadBalancers[] | .DNSName +" "+ .VpcId +" "+ .LoadBalancerArn' | while read DNSName VpcId LoadBalancerArn ; do PORTS=$(aws elbv2 describe-listeners --load-balancer-arn $LoadBalancerArn | jq -r '.Listeners[]?|.Port') ; for Port in $PORTS ; do echo $DNSName $VpcId $(nc -w1 -zv $DNSName $Port 2>&1 ) ; done ; done

=route53=
==List names of hosted zones.==
aws route53 list-hosted-zones-by-name | jq -r '.HostedZones[]|.Id +"\t"+ .Name| sub("/hostedzone/"; "")' | column_tab

==List info about record==
aws route53 list-resource-record-sets --hosted-zone-id <hostedzone>

==Update cname==
aws route53 change-resource-record-sets --hosted-zone-id <hostedzone> \
--change-batch '{"Changes":[{"Action":"UPSERT","ResourceRecordSet":{"Name":"akhq.inter.net.","Type":"CNAME","TTL":300,"ResourceRecords":[{"Value":"internal-k8s-kafka-akhq-30d3a6b6ec-1805732719.eu-north-1.elb.amazonaws.com."}]}}]}'
==Create a zone==
aws route53 create-hosted-zone --name inter.net --caller-reference $(date_file) --comment <comment>
==Add record to zone==
aws route53 change-resource-record-sets --hosted-zone-id <hostedzone> --change-batch '{"Changes":[{"Action":"CREATE","ResourceRecordSet":{"Name":"in.ter.net.","Type":"A","TTL":300,"ResourceRecords":[{"Value":"1.1.1.1"}]}}]}'

=subnets=
List subnets
aws ec2 describe-subnets | jq -r '.Subnets[] | [.SubnetId, .CidrBlock, .VpcId, (.Tags[]?|join(":"))] | @tsv' | column -t -s $'\t' | less -ISRM
=direct connect=
List direct connect links
aws directconnect describe-connections

=ipsec vpn=
aws ec2 describe-vpn-connections | jq -r '.VpnConnections[] | .VpnConnectionId +" "+ (.Tags[] | select(.Key=="Name").Value)'
=list vpc endpoints interface/gateway=
aws ec2 describe-vpc-endpoints | jq -r '.VpcEndpoints[] | .VpcEndpointId +" "+ .VpcEndpointType +" "+ .VpcId +" "+ (.Tags[]? | select(.Key=="Name").Value)'
=imds=
Instance Metadata Service
TOKEN=`curl -s -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600"` && curl -s -H "X-aws-ec2-metadata-token: $TOKEN" http://169.254.169.254/latest/meta-data/
=List ecs services=
# List cms services. Count the tasks.
aws ecs list-clusters
aws ecs describe-clusters --clusters <cluster>
aws ecs list-services --cluster <cluster>
aws ecs describe-services --cluster <cluster> --services <service> | jq '.services[].desiredCount'
=cloud trail=
aws cloudtrail describe-trails
=cloudwatch=
# View metrics on aws in namespace.
aws cloudwatch list-metrics --namespace=ContainerInsights/Prometheus
# List alarms
aws cloudwatch describe-alarms
aws cloudwatch describe-alarms | jq -r '.MetricAlarms[]| [.AlarmName, .MetricName, .Namespace, .AlarmDescription]|@tsv' |column_tab | less
aws cloudwatch describe-alarms | jq -r '.MetricAlarms[]| [.AlarmName, .MetricName, .EvaluationPeriods, .DatapointsToAlarm, .AlarmDescription]|@tsv' | column -t -s $'\t' | less
# Get alarm history
aws cloudwatch describe-alarm-history --alarm-name <ALARM_NAME>

=ssm/parameters=
Get parameter
aws ssm get-parameters --with-decryption --region eu-west-1 --name /<name>
Get parameters recursive
aws ssm get-parameters-by-path --recursive --region eu-west-1 --path /
=list ecr repositories=
aws ecr describe-repositories
aws ecr describe-repositories | jq -r .repositories[].repositoryName
=list content of ecr repository=
aws ecr list-images --repository-name <repository>

=create ecr=
aws ecr create-repository --repository-name quay.io_strimzi_kafka_0.46.0-kafka-4.0.0_debezium_3.1.1
=list volumes=
aws ec2 describe-volumes | jq -r '.Volumes[]|(.Size|tostring) +"\t"+ (.VolumeId|tostring) +"\t"+ (.VolumeId|tostring)' | column_tab | sort -n
=delete volumes=
aws ec2 delete-volume --volume-id <volume-id>
=get console output from ec2=
aws ec2 get-console-output --instance-id i-013cc270ad69f885f --query Output --output text
=list saml providers=
aws iam list-saml-providers
=get info about saml provider=
aws iam get-saml-provider --saml-provider-arn <arn>