creating your sec545 aws account - sans information … ·  · 2017-10-26creating your sec545 aws...

8
Creating your SEC545 AWS Account To prepare for your upcoming SEC545 class, you will need to create and enable an AWS account. Based on testing all the labs and content, you will likely incur a total charge of $10 US or less, as most of the labs make use of the “free tier” for new customers. If you are using an existing account that does not have the “free tier” as readily available, you may incur up to $20 US (unlikely to be more). First, navigate to https://aws.amazon.com. You should see a screen like the following: Click on the button in the upper-right hand corner labeled “Create an AWS Account”. On the next page, you can choose to create a new AWS account (“I am a new user”) or sign in with your Amazon account (assuming you have one): Click “Sign in using our secure server” after choosing an option.

Upload: duongkien

Post on 03-Apr-2018

249 views

Category:

Documents


8 download

TRANSCRIPT

Page 1: Creating your SEC545 AWS Account - SANS Information … ·  · 2017-10-26Creating your SEC545 AWS Account ... AWS Secret Access Key ... Microsoft Word - Creating your SEC545 AWS

Creating your SEC545 AWS Account To prepare for your upcoming SEC545 class, you will need to create and enable an AWS account. Based on testing all the labs and content, you will likely incur a total charge of $10 US or less, as most of the labs make use of the “free tier” for new customers. If you are using an existing account that does not have the “free tier” as readily available, you may incur up to $20 US (unlikely to be more). First, navigate to https://aws.amazon.com. You should see a screen like the following:

Click on the button in the upper-right hand corner labeled “Create an AWS Account”. On the next page, you can choose to create a new AWS account (“I am a new user”) or sign in with your Amazon account (assuming you have one):

Click “Sign in using our secure server” after choosing an option.

Page 2: Creating your SEC545 AWS Account - SANS Information … ·  · 2017-10-26Creating your SEC545 AWS Account ... AWS Secret Access Key ... Microsoft Word - Creating your SEC545 AWS

Now you should choose “Personal Account” and enter your information:

Make sure you check the AWS Customer Agreement box at the bottom. Enter the Security Check characters, then click the “Create Account and Continue” button.

Page 3: Creating your SEC545 AWS Account - SANS Information … ·  · 2017-10-26Creating your SEC545 AWS Account ... AWS Secret Access Key ... Microsoft Word - Creating your SEC545 AWS

Now, enter your payment card information. This can be a personal card or a company credit/debit card you are authorized to use.

Click Continue when done. Now you must verify your identity - this is a good thing! Enter another Security Check, then verify your phone number. You will receive a call, and you should enter the PIN code provided on the screen into the phone.

Page 4: Creating your SEC545 AWS Account - SANS Information … ·  · 2017-10-26Creating your SEC545 AWS Account ... AWS Secret Access Key ... Microsoft Word - Creating your SEC545 AWS

If all goes well, you’ll be verified:

Now, select your support plan - choose “Basic”, which is free:

Then click “Continue” at the bottom. Your account will be ready momentarily, and you can log in! Click “Sign in to the Console”:

Page 5: Creating your SEC545 AWS Account - SANS Information … ·  · 2017-10-26Creating your SEC545 AWS Account ... AWS Secret Access Key ... Microsoft Word - Creating your SEC545 AWS

Once in the console, you should see something similar to the following:

First, pick a region in the upper-right hand corner. If you are in the US, I recommend choosing either US East (N. Virginia) or US West (Oregon). If you are in Europe or the Middle East, I recommend choosing EU (Ireland). In Asia Pacific, I recommend choosing Asia Pacific (Tokyo). This is only because these regions support the features we’ll be using in class. If you’re interested, a breakdown of the offerings in each region can be found here: https://aws.amazon.com/about-aws/global-infrastructure/regional-product-services/ Once you have selected your region, click your name and select “My Security Credentials”:

You will be presented with a screen informing you that you are accessing credentials, and to make sure that’s what you want to do. We’ll explore IAM later in class, but for

Page 6: Creating your SEC545 AWS Account - SANS Information … ·  · 2017-10-26Creating your SEC545 AWS Account ... AWS Secret Access Key ... Microsoft Word - Creating your SEC545 AWS

now, click “Continue to Security Credentials” (also check the box to prevent this showing up again):

You’ll be presented with the following screen:

Click “Access Keys”, and then click “Create New Access Key”:

Page 7: Creating your SEC545 AWS Account - SANS Information … ·  · 2017-10-26Creating your SEC545 AWS Account ... AWS Secret Access Key ... Microsoft Word - Creating your SEC545 AWS

You will see the following screen:

Click “Show Access Key” and you will be presented with the Access Key ID and Secret Access Key for your account (blocked out in this screenshot):

Copy and paste these to a file locally, as we will need these in class! Also download your key file by clicking “Download Key File”, and store this safely in the same directory or location with the access keys. PLEASE PROTECT ALL THIS MATERIAL CAREFULLY!! INSTALLING THE AWS CLI

Page 8: Creating your SEC545 AWS Account - SANS Information … ·  · 2017-10-26Creating your SEC545 AWS Account ... AWS Secret Access Key ... Microsoft Word - Creating your SEC545 AWS

A critical part of SEC545 is using the AWS Command Line Interface (CLI). This should be installed on the laptop you plan to use for class. AWS provides detailed instructions for how to install this at: http://docs.aws.amazon.com/cli/latest/userguide/installing.html We have included the Windows AWS CLI installers in the \Tools folder on your course USB, but these will be a backup - you need this done before class! ***Please Note*** - You will need Python installed for the AWS CLI to function properly. For Linux and Mac users, this may not be uncommon, but most Windows systems don’t have Python installed (especially if it’s a work laptop that has been freshly imaged for class, for example). We’ve included Python 3.6.3 installers for Windows in the \Tools folder on the USB, as well. This installer also includes Pip, which makes installing the AWS CLI easy. Finally, make sure your credentials are installed into the AWS CLI. More on this is described in detail here - please do this before class as well! http://docs.aws.amazon.com/cli/latest/userguide/cli-chap-getting-started.html The easiest way to get the AWS CLI configured is with the following command within the command prompt on your laptop (once the AWS CLI is installed): aws configure You should be prompted for the AWS Access Key ID, Secret Key, default region, and default output format. An example is shown here:

$ aws configure AWS Access Key ID [None]: AKIAIOSFODNN7EXAMPLE AWS Secret Access Key [None]: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY Default region name [None]: us-west-2 Default output format [None]: json

Be sure you specify your region properly - you can find the syntax for it here: http://docs.aws.amazon.com/general/latest/gr/rande.html The output format does not really matter for the class, and you should just hit enter for this. With these steps done, you are good to go. See you in class!