SRE文档

深浅模式

1. aws-cli部署 ​

下载AWSCLI并配置上AKSK

1.1 卸载old ​

bash
yum remove awscli
yum remove awscli

1.2 安装 ​

官当

bash
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"

unzip awscliv2.zip

./aws/install
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"

unzip awscliv2.zip

./aws/install
  • 下载特定版本
bash
curl -o awscliv2.sig https://awscli.amazonaws.com/awscli-exe-linux-x86_64-2.0.30.zip.sig
curl -o awscliv2.sig https://awscli.amazonaws.com/awscli-exe-linux-x86_64-2.0.30.zip.sig
  • 查看版本号
bash
aws --version
aws --version

1.3 更新 ​

bash
./aws/install --bin-dir /usr/local/bin --install-dir /usr/local/aws-cli --update
./aws/install --bin-dir /usr/local/bin --install-dir /usr/local/aws-cli --update

查找使用 which 命令查找符号链接 which aws

2. win下部署 ​

要在 Windows 上更新当前安装的 AWS CLI，请在每次更新以覆盖以前版本时下载一个新的安装程序。AWS CLI 会定期更新。要查看最新版本的发布时间，请参阅 GitHub 上的 AWS CLI 版本 2 更改日志。

1.下载并运行适用于 Windows（64 位）的 AWS CLI MSI 安装程序：

https://awscli.amazonaws.com/AWSCLIV2.msi

2.安装

msiexec.exe /i https://awscli.amazonaws.com/AWSCLIV2.msi
msiexec.exe /i https://awscli.amazonaws.com/AWSCLIV2.msi
  • 查看版本
aws --version
aws --version

3.案例 ​

3.1 修改安全组 ​

vi update_sg.sh

#! /bin/bash

# get ip
response=$(curl -s https://api.ipify.org)

if [ $? -eq 0 ]; then
    
    # get ip address
    real_ip=$response
    echo "您的公网IP地址是: $real_ip ，更新安全组中，更新完毕会显示返回结果True"
    sleep 5
    
    # update security group
    aws ec2 modify-security-group-rules \
    --group-id sg-08fb252aczb0f64c1 \
    --security-group-rules SecurityGroupRuleId=sgr-02fb32a8442611dc1,SecurityGroupRule='{Description=single_ip,IpProtocol=tcp,FromPort=3389,ToPort=3389,CidrIpv4='$real_ip'/32}'
else
    echo "无法获取IP地址,请检查网络连接"
fi
#! /bin/bash

# get ip
response=$(curl -s https://api.ipify.org)

if [ $? -eq 0 ]; then
    
    # get ip address
    real_ip=$response
    echo "您的公网IP地址是: $real_ip ，更新安全组中，更新完毕会显示返回结果True"
    sleep 5
    
    # update security group
    aws ec2 modify-security-group-rules \
    --group-id sg-08fb252aczb0f64c1 \
    --security-group-rules SecurityGroupRuleId=sgr-02fb32a8442611dc1,SecurityGroupRule='{Description=single_ip,IpProtocol=tcp,FromPort=3389,ToPort=3389,CidrIpv4='$real_ip'/32}'
else
    echo "无法获取IP地址,请检查网络连接"
fi