public key Archives - Digi Hunch

Infrastructure deployment in Terraform 1/2

January 3, 2023August 11, 2021 by Digi Hunch

Terraform is an excellent Infrastructure-as-Code (IaC) tool based on Hashicorp Configuration Language (HCL). Compared to JSON or YAML based declarative templates (e.g. CloudFormation and ARM), HCL is more concise, thanks to the flexibility of HCL. On the other hand, HCL is not as flexible as general purpose languages. For that sake, I see HCL as … Read moreInfrastructure deployment in Terraform 1/2

Public Key Infrastructure (PKI)

March 19, 2023April 8, 2021 by Digi Hunch

A public-key infrastructure (PKI) is a set of roles, policies, hardware, software and procedures needed to create, manage, distribute, use, store and revoke digital certificates and manage public-key encryption. The algorithms are based on Publick-key cryptography. The format of the digital certificate is defined in X.509 standard. Certificate Authority – CA digitally signs and publishes … Read morePublic Key Infrastructure (PKI)

Cryptography Basics 1 of 2

March 20, 2022July 10, 2019 by Digi Hunch

I have been dabbling with OpenSSL commands to achieve what I needed during IT implementation, but I decided to spent some time to overcome the conceptual hurdles around cryptography. In this domain, following other people’s instructions through the project does not produce much learning value when too many concepts cloud around. Let’s take the bull … Read moreCryptography Basics 1 of 2

SSH key pair for access between instances in CloudFormation

January 3, 2023June 13, 2019 by Digi Hunch

Update 2023: the practice outlined in this post has been outdated. This post is for archive ony. We use CloudFormation to deploy infrastructure including private and public subnets, as well as EC2 instances. It is a good practice to place as many instances as possible in private subnet and access those only from Bastion Host … Read moreSSH key pair for access between instances in CloudFormation