Mathew Werber matwerber1

Task planning and tracking

Every time I ask you to perform work, you MUST strictly adhere to the following rules:

You MUST create a new tracking file in ./task-tracking/ with a file name formatted as YYYY-MM-DD_ID_TITLE where YYYY-MM-DD is today's date, ID is a number you increment for each new file on a given day beginning with a value of 1 for the first file you create on that day, and TITLE being a snake_case title of no more than five words that characterizes the purpose of the work performed.
You MUST briefly summarize my request and your strategy to fulfill the request in a first-level heading of # Task Overview

Terraform to create an AWS Systems Manager (SSM) RunCommand that can be used to configure an EC2 Windows instance as a bitbucket pipeline runner.

The installation uses WinSW to wrap the runner process as a Windows service and configures it to restart on failure / reboots as described in https://jira.atlassian.com/browse/BCLOUD-21928, also based on https://support.atlassian.com/bitbucket-cloud/docs/set-up-runners-for-windows/

This is for a workspace-level runner.

A repository-level runner requires an extra parameter in the XML file and the SSM document.

Not all of the install scripts are included as they're pretty straightforward (e.g. choco install xyz, apart from the initial install of chocolately (see powershell-scripts/winEc2-choco-install-git.ps1) and disabling of pagefile+swapfile (see powershell-scripts/winEc2-disable-pagefile-and-swapfile.ps1).

DDL for Athena Table

This could be improved, but does the trick for now. This is for a report configured as "daily" with resource IDs:

CREATE EXTERNAL TABLE IF NOT EXISTS `org_data`.`curv2` (
  `discount_bundled_discount` string,
  `discount_total_discount` string,
  `identity_line_item_id` string,
  `identity_time_interval` string,

CloudTrail Lake Snippets

CloudTrail Lake supports Presto SQL. This doc focuses less on SQL itself and more on snippets specific to CloudTrail Lake schema.

Example Query

This query ties together key concepts and, in one shape or another, is often the starting point for my analyses of events:

SELECT

AWS Resource Regex Patterns

AWS Backup

These were extracted from the open source AWS CLI code on GitHub for AWS Backup:

ruleName: /^[a-zA-Z0-9\-_\.]{1,50}$/,

	#! /bin/bash -i
	set -e

	# Constants
	PROFILE_NICKNAME_FILE=".awsprofile.env"
	AWS_CONFIG_FILE="$AWS_CONFIG_FILE"

	# Variables
	original_request="$1"
	requested_profile=""

	version: "3.8"

	services:
	AwsCLI:
	image: public.ecr.aws/aws-cli/aws-cli
	container_name: aws-cli
	platform: linux/x86_64
	volumes:
	- ~/.aws/:~/.aws/ # Mount local credentials into container to use AWS CLI/SDK
	environment:

	# Example command
	eksctl create iamidentitymapping \
	--cluster YOUR_CLUSTER_NAME \
	--arn arn:aws:iam::999999999999:role/AWSReservedSSO_YOUR-ROLE_NAME_xxxxxxxxxxxc \
	--username cluster-admin \
	--group system:masters

	/* eslint-disable no-prototype-builtins */
	var express = require('express');
	var ip = require("ip");
	var fetchTimeout = require('fetch-timeout');

	/*
	This app creates a simple HTTP listener and responds to GET / requests by
	displaying basic info about the container (e.g. IP address) and, optionally,
	ECS metadata if the container is running on EC2 or Fargate via ECS.

	astroid==2.15.6
	autoflake==2.2.1
	autopep8==2.0.4
	boto3==1.28.52
	botocore==1.31.52
	certifi==2023.7.22
	chardet==5.2.0
	charset-normalizer==3.2.0
	contourpy==1.1.1
	coverage==7.3.1