This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
CREATE EXTERNAL TABLE cloudtrail_logs( | |
eventversion STRING, | |
useridentity STRUCT< | |
type: STRING, | |
principalid: STRING, | |
arn: STRING, | |
accountid: STRING, | |
invokedby: STRING, | |
accesskeyid: STRING, | |
username: STRING, |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
CREATE EXTERNAL TABLE cloudtrail_logs ( | |
eventVersion STRING, | |
userIdentity STRUCT< | |
type: STRING, | |
principalId: STRING, | |
arn: STRING, | |
accountId: STRING, | |
invokedBy: STRING, | |
accessKeyId: STRING, | |
userName: STRING, |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Policy Scope | Policy Name | Type | |
---|---|---|---|
Organization | Allowed locations | Policy | |
Organization | Do not allow deletion of resource types | Policy | |
Organization | Network interfaces should not have public IPs | Policy | |
Organization | Inherit a tag from the subscription | Policy | |
Organization | Not allowed resource types | Policy | |
Organization | Storage accounts should have the specified minimum TLS version | Policy | |
Domain | Allowed virtual machine size SKUs | Policy | |
Domain | Enable Azure Monitor for VMs with Azure Monitoring Agent(AMA | Initiative | |
Team | Allowed resource types | Policy |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
provider "azurerm" { | |
features {} | |
} | |
module "lz_vending" { | |
source = "Azure/lz-vending/azurerm" | |
version = "4.0.2" # change this to your desired version, https://www.terraform.io/language/expressions/version-constraints | |
# Set the default location for resources | |
location = "${var.location}" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Job Role | Description | Resource | RBAC Role(s) | |
---|---|---|---|---|
Fabric Administrator | Create, delete and update workspace | PowerBI | Fabric Administrator | |
Data Platform Administrator | Update and delete workspace, manage onbarding of user and update configuration. | PowerBI | Workspace Administrator | |
Management of SQL pools, Data Explorer pools, Apache Spark pools and integration runtimes | Azure Synapse | Synapse Administrator | ||
Create, edit and delete data factory and child resources including datasets, linked services, pipeline, triggers and integration runtimes. | Azure Data Factory | Data Factory Contributor | ||
Management of Domains & Collections | Microsoft Purview | Domain Admin, Collection Admin, Account Create | ||
Containers and data mangement | Azure Data Lake Storage | Storage Blob Data Owner | ||
Management of Keys, certificate and secret | Azure Key Vault | Key Vault Administrator, Key Vault Data Access Administrator |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Description: CloudFormation template to create AWS Lake Formation workshop resources | |
Metadata: | |
'AWS::CloudFormation::Interface': | |
ParameterGroups: | |
- Label: | |
default: Database Configuration | |
Parameters: | |
- TPCDBName | |
- DBMasterUser | |
- DBMasterPassword |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
FILENAME="instances_list.txt" | |
# Build output filename with date | |
now=$(date +"%m%d%Y") | |
outfile=$(echo "linux_agent_install_status_${now}.csv") | |
# Write the headers | |
echo "InstanceId, Status, Output" > $outfile |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
AWSTemplateFormatVersion: '2010-09-09' | |
Description: 'Aurora PostgreSQL Cluster' | |
Parameters: | |
vpcId: | |
Type: 'AWS::EC2::VPC::Id' | |
Description: 'VPC Id' | |
SubnetList: | |
Type: 'List<AWS::EC2::Subnet::Id>' | |
Description: 'List of Subnet' |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
"AWSTemplateFormatVersion" : "2010-09-09", | |
"Description" : "Permission Boundary for Developers", | |
"Resources" : { | |
"DeveloperBoundary" : { | |
"Type": "AWS::IAM::ManagedPolicy", | |
"Properties": { | |
"ManagedPolicyName": "cdk-boundary", | |
"Description": "CDK Permission Boundary", | |
"Path": "/", |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Description: This stack includes resources needed to deploy AWS CDK apps into this environment | |
Parameters: | |
TrustedAccounts: | |
Description: List of AWS accounts that are trusted to publish assets and deploy stacks to this environment | |
Default: "" | |
Type: CommaDelimitedList | |
TrustedAccountsForLookup: | |
Description: List of AWS accounts that are trusted to look up values in this environment | |
Default: "" | |
Type: CommaDelimitedList |
NewerOlder