#aws aurora tutorial | Explore Tumblr posts and blogs

every1studio · 6 years ago

Text

SERIES: “stages of love: words left unsaid” [ateez: wooyoung]

genre: a dash of angst + small fluff + some smut + kind of long

ficstyle: bulletpoints + series [1] [2] [3] [4] [5] [6] [7] [8] [END]

prompt: inspired by “1,2″ by Lee Hi [listen to Hanbin demo version for max. effects] + “We Don’t Talk Together” by Heize ft Giriboy + “Hold Me Tight” by BTS

note: [this fic as some smut, so if you are uncomfortable with smut; DO NOT READ // also has mentions of alcohol and self-harm ): ]

your heart was caught in your throat when you got that text from Mingi

the one saying that he was still touring in Japan and wasn’t going to meet up with Yunho at the airport

so why did Yunho text you that

why would he lie to you?

all of your trust for him slowly started to crumble

right then and there, you get a call from Yunho

your shaking hands fumbled as you swiped to answer the call

“h-hey?” you didn’t want to suspect him of anything without any evidence

“hey are you free? I... I wanna see you..” you could see his puppy-like smile through the tone of his voice

but this could all be a facade; maybe you didn’t know everything about him like you thought you did

“yeah! sure! did...” you prayed that this conversation wouldn’t be the break of your relationship

“did you pick up Mingi from the airport?”

you hear him nervously chuckle, “his flight got cancelled so I just went to dance studio to get ready for this week’s classes..”

you wish he was telling the truth

what was so bad that he had to lie to you?

you just recently reunited with your best friend from your childhood

not only was he your best friend.. but he was your crush

you couldn’t talk to him in person about this

with the safety of being in your own bed, you HAD to know the truth

you had dealt through too many problems with your love life

you had enough

“I texted Mingi”

there was no reply on the other side of the line

“Y/N...can I please talk to you in person..”

you felt your tightening the grip on your phone

“whatever you need to say, you can say it right now.. if you feel like there’s nothing you NEED to say... then I don’t want to talk to you.. at all”

the line was still on but the only thing you heard was his devastation

“that’s it then...goodbye Yunho”

you hung up the phone and blocked him right away

you didn’t want to feel so pathetic but you did

you clenched your fists so tight you could feel your fingernails digging pain into your hands

but nothing hurt more than having the concept of love failing you

over and over and over again

you got a text from San

-hey! there’s a party tonight at a friend’s place, wanna come with?

that was all you needed to get all of this off of your mind

even though you were more of the reserved type and would consider yourself to be more of an introvert than an extrovert, you wanted to go to that party

and have fun without worrying about anything or anyone

you wanted to feel like expensive version of yourself

you always covered your body but tonight was the night you were going to show off your curves

you wanted to stand out so you found the brightest and tightest dress you owned; which was a bright, true red bodycon dress with piped linings that extenuated your boobs and your chest

it was shorter than what you usually wore but having it be held up by two non functional strings that were meant to be straps that constantly fell off of your shoulders

you matched this dress with some nude, red-bottom heels that your mom got you for Christmas

you let your hair out of your usual messy ponytail and lightly curled it

watching makeup tutorials for fun made you inspired to get more into this new character of yours; your followed an easy smokey eyeshadow look that wouldn’t be overwhelming for some mascara

paired it with a transferproof darker red lip and packed on some highlighter so you could glow to the gods

and pray that with a look like this, you can finally find a guy who appreciates you

San sends you a text saying that he’s at the door as you were spraying on some luxurious perfume

he could hear you trotting to the door in what sounded like high heels

his brows were raised as his eyes were about to pop out of his sockets

you were absolutely stunning and breathtaking and all of the words in the dictionary could not describe how beautiful you looked

San almost forgot the promise he made to himself when you loop your arm around his

“ready?”

he smiles and nods as he walks you to his car

San was trying hard to keep his eyes on the road when you were right there next to him

“so... is Mingi in town?”

you clenched your teeth so that you try and control your tears from welling up

“no... I.. don’t wanna talk about Mingi... or Yunho..”

it broke his heart to see you so sad but he nods and changes the subject

you were so surprised to see that there was a parking lot for house near a college campus

you didn’t know that it was a GRAND party

“how do you know someone like this?” you were in awe as the cool air hit you as you got out of the car

“you could say he is just a classmate who has become a pretty good friend of mine..”

you started to feel self-conscious of yourself; maybe you wouldn’t fit in

right when the door open was when you saw the closest thing you’ve seen of a Greek God

“oh.. San.. is this your plus one?” the boy’s voice was just as charming as his face

San put his arm around your shoulder, “this is Y/N, my friend.. Y/N, this is Wooyoung.. who’s also my friend..”

Wooyoung reached out for a hug, “a friend of San is a friend of mine”

you could get intoxicated by his scent

how could a guy be so infuriatingly handsome in every way?

a group of girls were passing by when Wooyoung politely stops them, “excuse me ladies, could you help my friend here get settled in with some drinks?”

they giggled and nodded as they took your hand and led you into the house

you look back at San and Wooyoung as they nodded at you indicating that is was okay

San turns back to Wooyoung

“so what’s up?”

Wooyoung massaged the back of his neck in a shy manner

“Y/N.. you said she was just a friend right?”

San’s stomach began to churn, “yup.. just a friend..”

San could see the glimmer of hope in Wooyoung’s eye

“it’s okay if I... get to know her?” he moves his head in the direction you walked in

“maybe you should just... yeah... just get to know her I guess...”

you were surrounded by the bunch of girls that escorted you to the table with the drinks

“how do you know such a handsome guy?”

“are you close with Wooyoung?”

“what’s the other guy’s name?”

“you’re so pretty! no wonder the guys are into you! who are you interested in?”

you were so confused by the choices of questions that were asked, you had no idea how to answer them

but before you could say anything, you felt a gentle hand on your back

“sorry ladies, I’m gonna have to steal Y/N from you for a moment..”

they nodded as they giggled about finding San

you looked up and saw Wooyoung

he was such a gentleman; you found yourself blushing

he refills your drink then leads you out to the area where the music was blaring

small talk led to a heart to heart talk

“so... are you seeing anyone?” you were surprised that someone like Wooyoung would be interested in someone like you

“well... it’s kind of complicating but-”

“Y/N?”

that familiar voice made chills rush down your spine

you turned as saw Yunho

with Aurora clinging onto his arm

as if this girl couldn’t stop ruining your life, she had to take your best friend, your childhood friend, your first love

you wanted to hide and runaway; you subconsciously gripped the shirt

Wooyoung reading your body language, he slithered his arm around your waist and pulled you closer

“what business do you have with Y/N?”

Yunho sobered up right when he saw you

he wanted to push Aurora off of his arm but she was clinging in a little too tightly for comfort

“I wanted to check up on her-”

“are you her boyfriend?” Wooyoung cuts him off

but you answer instead of Yunho, “no, he isn’t.. I wouldn’t want a boyfriend who would lie to me...”

you pulled Wooyoung into the dance circle

Aurora wanted to follow suit and tried to drag Yunho

Yunho doesn’t budge, “what are you doing?”

“who does she think she is? now she’s with some rich guy? come on we have to show her that we’re better than her..”

Yunho still doesn’t budge when Aurora tries to tug a little harder

“what is it to you anyways? just leave her alone..”

“because all the guys that I want to be with always talk about her, okay? I’m sick of it!” Aurora screams only for a couple of people around her to hear her through the blasting music

when Aurora went for Hongjoong, all he kept talking about was how amazing you were at composing and singing and playing the guitar

when she went back to Seonghwa to sabotage you, he ended up not going back with her because he was the one missing you and not her

when she dated Jongho, he would say that he would be better being single than ever dating someone as toxic as her, then saw him smiling at your little gestures a couple days after

she was sick of hearing about you and seeing you

she wanted to be the one with the attention; you were in her way

so when Yunho confronted her about ruining your love life, she blackmailed him saying that if he didn’t date her, she would continue to destroy your life in ways that couldn’t even be explained

Yunho only wanted your happiness and was scared for you, so he agreed

he hated every moment of it; she made sure that he would lie to you via texting or calling

taking up all of his free time so that you couldn’t even meet up with him

she even told him that if he told her, she would injure herself because of him

although he didn’t like her, he didn’t want her to inflict self-harm

he knew she needed some sort of mental help so he decided to be her “boyfriend” to help her out

in exchange, he didn’t have the chance of telling how he felt about you and how much he cared for you

seeing you with another guy shattered his heart in pieces but he knew that he probably shattered yours into fine dust

and all of this was his fault

Yunho let Aurora drag him like a ragdoll

when you saw Yunho and Aurora in your sight, you turned yourself to them as you started to dance on Wooyoung

Wooyoung gently sweeps your hair off of your shoulders as he leans in to ask, “are you okay? is there anything I can do? do you want me to kick them out?”

you could feel the tears accumulating as you interlocked your hands around his neck

“please make me forget about him..”

without another word, Wooyoung pulls you in closer to his body and cups his other hand on your face as he leans in to kiss you

it was a needy yet gentle kiss; you couldn’t get enough of it

you felt a little pride swell up inside of you knowing that Yunho and Aurora were watching the two of you

Aurora wanted to copy you and Wooyoung but Yunho just couldn’t take his eyes off of you

he was so angry at himself; he could’ve been the one kissing you and holding you tight

“shall we take this elsewhere?” Wooyoung lets you catch your breath

when your eyes meet his, it’s like the world stopped for a minute

you could tell that he was genuinely worried about you and that you were okay with everything that he asked of

you nodded and he led you to another part of the house where no one was allowed

how classy was it to be escorted to his room while getting frisky in the elevator

his thick thigh kept some friction for you inbetween your legs

your hands were tugging his hair to his shirt

his hands were all over your body yet you were comfortable with it

if anything you wanted more

it was like..

“it’s like my hands are made for your body”

he said exactly what you were thinking

right when you heard the ding of the elevator, Wooyoung swept you up like a princess as he was huffing through his smile

“I’m gonna make sure that you’ll only be thinking about me tonight, princess”

maybe it was the alcohol but you felt a certain type of warm tingling sensation fill you up to the brim

despite of the lust in his eyes, he was really gentle with you

he placed you comfortably on the bed as he peppered you in kisses from your forehead down to your pooling heat as he hikes your dress up to get access to where you needed attention

before he continues he looks to meet eyes with you, “I want to know that you’re okay with this..”

you nod but he wasn’t satisfied with just that; he cowers over you so that you could look at him, face to face

“I want to hear you say if you are.. I want you to be comfortable with-”

you cut him off with a passionate kiss

you had sex before but it was only a one-night stand kind of deal

but this time, you felt like it was going to be different

“I’m okay.. I’ll let you know if it isn’t...”

you could feel him smile through the kiss

“you’re absolutely beautiful... I want you to feel like the most beautiful girl in the world because you are”

he goes back down to take off your panties with his teeth

if you didn’t feel yourself growing wet since you were dancing with him

you definitely did now

Wooyoung leaned in to take in all of your essence; you whined at the lack of pleasure

“Wooyoung.. please..”

“so eager for me..”

with that he dove himself right into your heat; his nose continuously hitting your clit

you didn’t know that he was going to go that hard but you loved every moment of it

he was working you up so good that you didn’t know what to do between pushing his head away or pushing closer to you

you felt yourself quickly spiraling into an abyss of pleasure

“Woo-Wooyoung.. I-I..”

he quickens the pace of his tongue as he adds in his finger

for every time that you clench around his tongue and finger, he adds another finger

by the time he got to three fingers, you were seeing the Milky Way

your body convulsively shook under Wooyoung

he was just in awe watching you come down from your high

you were sprawled out for him; your straps hanging off of your shoulders, hair placed as if you were an art piece from the Renaissance and just panting as you squeezed tears of pleasure from your eyes

Wooyoung leans down to kiss them with the scent of you still covering his mouth, “how’s my baby doing?”

you didn’t know why; you just met this guy and yet you have completely fallen head over heels for him

the way he called you baby made you feel like he was just about everything you wanted and more

“I want more”

that was all Wooyoung needed to unravel

he unbuttoned his black satin shirt showcasing his toned-body

although he left his shirt on, he completely took off everything from the lower part of his body

you drooled at the sight of his proudly standing member; you couldn’t keep your eyes off of it

Wooyoung chuckles as he lifts your chin up to look at him, “eyes up here, princess..”

you too wanted to take off your clothes but Wooyoung stops you

“leave them on.. you look so good I want to remember me fucking you in this dress so that every time I see this dress I can remember how we met..”

Wooyoung reaches over to grab a condom but you gently grab his wrist

“it’s okay, I’m on birth control... I want to feel all of you...”

he lines himself up to your entrance as he leans into your neck, “you really know how to drive a man crazy...”

there was a mix feeling of pain and pleasure as you could feel him stretching you out

your hands ran through his hair as he continued to work on his deep, purple love bites on your neck

you didn’t notice how spacious his room was until you heard the echos of the lewd sounds of Wooyoung slamming himself into you

you couldn’t stop saying his name

it was as if it was the only word you knew

“nngh..Y/N.. baby please... don’t clench like that or I’ll cum in seconds...” Wooyoung grunted

surprised by how much strength he had while still being able to fuck you, he picked you up to flip you around

you were propped up on your elbow as he placed his hands on your raised hips

he never stopped pumping his dick in and out of you

as soon as you were adjusted into your new position, you started to clench around him again; you couldn’t help it

Wooyoung exhales through his smiles as he could feel himself reaching his peak

“baby, please tell me that you’re getting close because I am-”

but you reached it before you could even reply to him

your body shook even harder than the first time he made you orgasm; making you squeeze around him harder than you have before

he came a couple seconds after

you could feel how his thick cum fill you up inside to the point that you could feel it overflowing out of you

Wooyoung lightly swept the hair away from your neck to kiss it before slowly taking himself out of you

you were and looked completely spent

he gets up to get you something to clean you up

you took this time to look around his room

although it was a spacious room, it wasn’t heavily decorated; if anything it was kind of empty, kind of lonely

he returns with his pants back on, holding a wet towel and some water

“you’re really something you know that?” he’s always smiling but you feel like there’s something more to his smile

you chuckle trying to hide your blush, “are you like this with all of the girls?”

he gets up from cleaning you up and fixes your dress and hair

“I actually don’t do this as often as you think..” Wooyoung brushes his sweat-covered hair back so that it’s not sticking to his forehead

“even though you host all of these glamorous parties?” you were feeling pretty exhausted but you wanted to talk to him and get to know him

you didn’t want this to be another one-night stand for the books

Wooyoung wraps his arm around you and has your head in the crook of his neck and shoulder

“hey now, I’m not your typical college fuckboy, you know..”

you both laughed softly over the muffled sound of the party downstairs

“so I’m guessing the guy with Aurora was the guy you were seeing but it was complicated?”

you nodded, “everyone knows Aurora huh...”

Wooyoung sees you sulking, so he pulls you back onto the bed so that your head falls onto his chest, “she’s just a homewrecker... she’s not worth your time, sweetie.. trust me”

“I don’t know.. he was my best friend, childhood friend and first love all in one.. and she’s ruin my life more than just one time a year...”

you wanted to change the topic, “what about you? what’s going on in your life?”

it was like you knew that Wooyoung’s smile was just a mask under his worries, “well.. my dad wants me to take over his plane company.. but I don’t want to. I want to pursue being a pilot. I can’t be a pilot and run a company at the same time. he wants me to run the company, even though my brother is the one who wants to run it...so you can say me and you have it pretty tough huh”

“are you kidding? you’re dealing with grown up stuff and I’m still caught up on the idea of love!”

you didn’t notice that Wooyoung was just looking at you the whole time as you raised your voice

“I think that love is some pretty hardcore group stuff too...”

you nodded and you both just sat there in the dimmed room with the music still playing in the background

“you wanna go back down to the party? to show off your battle scars?” Wooyoung broke the silence, “or do you want to runaway, to start over?”

your eyes widened as you looked up at him, “runaway?”

“we could start over? I know we just met.. but I’m willing to take that chance and give you everything to be happy”

you were feeling kind of skeptical, “you wish happiness upon a stranger at first sight?”

“I wish happiness for a girl who deserves more than what the world has to offer”

you got up from his bed to get a better look at him, “I need a couple days...”

Wooyoung follows your action and grabs your hands, “take all the time you need.. it was just an option... maybe we could just get to know each other before we take a big step..”

Wooyoung escorts you back downstairs with his black denim jacket thrown over your shoulders

you were wobbly from how hard he went on you; he couldn’t help chuckle at his handiwork

you’d jokingly give him a side glare every time he did

you met San on the other side of the elevator

the first thing he saw was how you clung onto Wooyoung

how the hickies he gave you popped under Wooyoung’s denim jacket

to be frankly speaking, San was already heartbroken when he knew he didn’t have a chance with you

but he was even more broken to see that you would never see him the way you saw a potential lover

but nevertheless, he smiles, “looks like the two of you were busy. ready to go home?”

you kissed Wooyoung on the cheek before looping your arm through San’s, “I’ll text you when I get home?”

“I’d rather you call,” Wooyoung said with a seductive smile

San gives Wooyoung a handshake before taking you back to the car

you and San walked passed all the guys that have affected your love life since you started college

Hongjoong, Seonghwa, Yeosang, Yunho, Jongho

every time you saw one of them, you clung closer and tighter to San

San stares at all of them; knowing who they were and how they broke your heart

and what he could’ve done to be the one by your side making you happy

earlier when Wooyoung took you upstairs, San pulled Yunho over to talk to him when Aurora went to the bathroom

“are you trying to break Y/N’s heart? you already broke it once and you’re gonna do it again?”

Yunho shoves San, “don’t talk about Y/N like you know her-”

“I know that she loved you.. I know that she was head over heels for you.. I know that Aurora was the bitch that made you lose hope in love.. so seeing her with you? you’re basically ripping her heart out of her chest..”

San shoves Yunho back and walks away

Yunho couldn’t take it anymore

he had to find you

he had to tell you the truth

so when he finally found you exiting the elevator, clearly having moved on with Wooyoung, he lost hope

maybe he should just keep the truth to himself

you already seem like you’re happier in the last hour with Wooyoung than you have with Yunho for all your life

but Hongjoong had words he wanted to say to you too

so did Seonghwa

and Yeosang

and San

and Mingi

and Jongho

but they would’ve all kept it to themselves.. because you were glowing now

you had shelled out of your cocoon and had transformed into a beautiful, unattainable butterfly

these were the boys that left their words unsaid; for the happiness of the girl that they love

PLEASE LEMME KNOW IF YOU WANT A SEPARATE ENDING FOR EACH MEMBER OR ONE FINAL ENDING WITH ONE SPECIAL MEMBER???

[ masterlist + guidelines ]

298 notes · View notes

yellowishsims · 6 years ago

Text

Begining!

So, since The Sims 3 I had this wonder for the builds and builders of the game. I could watch HOURS of speed build or let's build and I wouldn't get tired (I still do).

I remember watching Deligracy's builds and be so amused by the talent! And so I wanted to also build.

But I was an awful builder back then.

Like, I loved Aurora Skies because the houses were a solid vibrant color box and that was me building.

But I have evolved and after watching MANY build videos, getting the sims 4 and finding a curious love for architecture, I realized that my builds are considerably better now.

I also wanted to have a YouTube channel since I was like, 12?? But I never had a camera and got down easily because of that. I had a channel for my covers (it flipped because of me not having a camera or a particularly outstanding voice), I had a tutorial channel (I didn't have content) BUT NOW, now I can share with everyone my creativity the same way I do with my poems or draws, because I found confidence in my builds, I trust myself and many simmers have inspired me so much that I'm almost done with my first video and it will probably be up next week! Isn't that exciting? The dream of a lifetime!

So, if you stumble upon this and take the time to read it, thank you! And if you'll like to see my builds, stick around! You are welcomed here, this is the nice cozy hufflepuff common room and you can stay here as long as you want.

I hope we all can become friends and may this journey we begging is full of warm yellow light pouring over us.💞

- S💫

#sims4build #simsbuilds #simsbuild #sims4 #sims 4 #sims 4 gameplay #the sims supply #deligracy #devon bumpkin #plumbella #steph0sims #architecture #inspo #creations #share #family #yellow

4 notes · View notes

zero2hero-training · 4 years ago

Photo

Credit:• @computer_science_engineers Follow @computer_science_engineers #django #developer #development #juniordev #code #java #javascript #nodejs #python #dotnet #dotnetcore #training #tutorial #technology #softwaretraining #workshop #cloudtechnology #aws #azure #gcp #alibabacloud #dynamodb #aurora #graphql #mariadb #msaccuess #python #pythonflask (at Strata SE1) https://www.instagram.com/p/CNUz211Ap59/?igshid=52fuxphbzwxj

0 notes

globalmediacampaign · 4 years ago

Text

Preparing on-premises and AWS environments for external Kerberos authentication for Amazon RDS

As database security becomes more and more essential to the success of a business, managing user access to databases effectively has always been a challenge to database administrators (DBAs) and security officers. Traditional database authentication is based on a username-password mechanism. This method unfortunately requires effort from both DBAs and users to maintain the credentials; it also incurs extra work for security officers from an auditing perspective. Integrating relational database authentication with a centralized authentication service such as Microsoft Active Directory (AD) is a common and proven practice to address this challenge. Kerberos is a network authentication protocol developed by the Massachusetts Institute of Technology (MIT). It uses tickets and symmetric-key cryptography to eliminate the need to transmit passwords over the network. The Kerberos ticket is a certificate issued by an authentication server, encrypted using the server key. Kerberos has been built into Microsoft AD and is designed to authenticate users to network resources, such as Amazon RDS for PostgreSQL, Amazon RDS for Oracle, Amazon Aurora PostgreSQL and Amazon RDS for SQL Server. Amazon RDS for PostgreSQL, Amazon RDS for Oracle, Aurora PostgreSQL and Amazon RDS for SQL Server support external authentication of database users using Kerberos and Microsoft AD, including those running on premises. This feature provides the benefits of single sign-on (SSO) and centralized authentication of database users. Keeping all your user credentials in the same AD saves you time and effort because you can have a centralized place for storing and managing them for multiple database instances. In this series of posts, we demonstrate how to authenticate database users for Amazon RDS for PostgreSQL, Amazon RDS for Oracle, and Aurora PostgreSQL with Kerberos, your on-premises Microsoft AD, and AWS Managed Microsoft Active Directory provided by AWS Directory Service. For external Kerberos authentication for Amazon RDS for SQL Server, please refer to this Blog. Trust between the on-premises AD domain and AWS Managed Microsoft AD domain For the users in your on-premises AD domain to access the Amazon RDS resources in the AWS managed domain, we need to establish a trust relationship between the two domains. Trust relationships provide a mechanism for one domain to allow access to the resources based on the login authentications of another domain. The flow of communication over trusts is determined by the direction of the trust: One-way trust – A unidirectional authentication path created between two domains. In a one-way trust between Domain A and Domain B, when Domain B has configured to trust Domain A, users in Domain A can access resources in Domain B; however, users in Domain B can’t access resources in Domain A. Two-way trust –Domain A trusts Domain B, and Domain B trusts Domain A. This configuration means that authentication requests can be passed between the two domains in both directions. AWS Directory Service supports both one-way and two-way trust. Unless you have specific business requirements, one-way trust is recommended for better security. With one-way trust between your on-premises domain and AWS managed domain, you configure the trust in your on-premises domain as one-way: incoming, and configure the trust in your AWS managed domain as one-way: outgoing. With this configuration, the on-premises domain takes the role of the trusted domain, and the Directory Service managed domain takes the role of the trusting domain. Validated authentication requests travel between the domains in only one direction—allowing accounts in your on-premises domain to authenticate against resources in the AWS managed domain. In this case, users are authenticated by the on-premises domain, whereas Amazon RDS interact only with the AWS managed domain. Directory Service supports two types of trusts: Forest trusts – When you configure a forest trust, you can allow any contiguous namespaced domain in the trusting forest to be accessible to any security principal in the trusted forest. You most likely configure forest trusts if your organization has two or more AD forests. Forest trust provides name suffix routing, which routes the Kerberos authentication requests to the correct domain. External trusts – External trusts enable you to configure one domain in one forest to trust a domain in another forest without enabling a transitive trust. With external trust, name suffix routing is not provided. Microsoft recommends forest trusts where possible. Forest trusts ensure that Kerberos is used whenever possible. Different database management applications running on different platforms (Windows or Linux) for different Amazon RDS engines require different trust types. Amazon RDS for PostgreSQL and Aurora PostgreSQL have the following requirements: Forest trust is required by psql and pgAdmin running on a Windows client. These tools rely on name suffix routing, which is only provided by forest trusts to forward Kerberos authentication requests from an on-premises AD domain to an AWS Managed Microsoft AD domain. Both forest trusts and external trusts work for Java-based software on Windows (such as DBeaver) and for applications running on a Linux client (such as psql). For Linux and Java-based software, Kerberos can forward the authentication requests to the AWS Managed Microsoft AD domain based on the [domain_realm] section in the Kerberos configuration file (commonly known as krb5.conf). For Amazon RDS for Oracle, the trust type can be either forest trust or external trust, because the Kerberos configuration file (commonly known as krb5.conf) is required by SQL Developer and SQL*Plus (on both Windows and Linux) for cross-domain Kerberos authentication. In this post, we use one-way (on-premises domain: incoming and AWS managed domain: outgoing) forest trust between the on-premises domain and AWS managed domain, as shown in following architectural diagram. Initial infrastructure configurations For demonstration purposes, we created three AWS accounts. The account on-prem-account simulates your on-premises environment. Accounts aws-acc-1 and aws-acc-2 simulate your AWS environment: AWS Managed Microsoft AD is created in aws-acc-1 and is shared with aws-acc-2; Amazon RDS resources are created in both aws-acc-1 and aws-acc-2. AD users in on-prem-account log in to the Amazon RDS resources in aws-acc-1 and aws-acc-2 via Kerberos and Microsoft AD authentication from the Windows and Linux client joined the on-premises domain. Important Note: To follow this tutorial you’ll need 3 AWS Accounts. This tutorial will also incur costs of services involved in this demo including following services: Amazon Amazon Elastic Compute Cloud (EC2) AWS Transit Gateway AWS Managed Active Directory Amazon RDS You are responsible for the costs related to your use of any AWS services used while running this Quick Start reference deployment. Prices are subject to change. For more information, see the Cost and Licenses section. The following are the details about the three accounts: on-prem-account – This account has two VPCs: one for the on-premises AD domain onprem.local and one for the on-premises Windows and Linux clients where the on-premises users log in to. The following table summarizes these details. VPC/Subnet CIDR on-prem-ad-vpc 10.10.0.0/16 on-prem-ad-vpc-sn 10.10.0.0/24 on-prem-client-vpc 10.11.0.0/16 on-prem-client-vpc-windows-sn 10.11.0.0/24 on-prem-client-vpc-linux-sn 10.11.1.0/24 aws-acc-1: We create Directory Service in this account. It has two VPCs. The first is for AWS Managed Microsoft AD ad.myaws.com; this directory service is shared with aws-acc-2. The other VPC is for Amazon RDS resources. The following table summarizes these details. VPC/Subnet CIDR aws-acc-1-mad-vpc 10.20.0.0/16 aws-acc-1-mad-sn-1 10.20.0.0/24 aws-acc-1-mad-sn-2 10.20.1.0/24 aws-acc-1-rds-vpc 10.21.0.0/16 aws-acc-1-rds-sn-1 10.21.0.0/24 aws-acc-1-rds-sn-2 10.21.1.0/24 aws-acc-1-rds-sn-3 10.21.2.0/24 aws-acc-2: This account has one VPC for Amazon RDS resources; details shown in following table. VPC/Subnet CIDR aws-acc-2-rds-vpc 10.31.0.0/16 aws-acc-2-rds-sn-1 10.31.0.0/24 aws-acc-2-rds-sn-2 10.31.1.0/24 aws-acc-2-rds-sn-3 10.31.2.0/24 We build our environment for external Kerberos and Microsoft AD authentication for Amazon RDS resources based on the preceding environments. Creating network connections between VPCs To allow on-premises users to access the Amazon RDS resources, network connections need to be in place among on-prem-account, aws-acc-1, and aws-acc-2. There are different options to build network connections between your on-premises infrastructure and the VPC, and network connections between VPCs. AWS Transit Gateway is one of the options and is recommended. AWS Transit Gateway connects on-premises networks and VPCs through a central hub. This simplifies your network and puts an end to complex peering relationships. It acts as a cloud router—each new connection is only made one time. We use AWS Transit Gateway to link VPCs when the VPC connection is required. The solid blue lines in the following diagram indicate the required network connections between VPCs. On-premises AD and AWS Managed Microsoft AD After you create the network connections between VPCs, complete the following steps: In the on-prem-account, we create a Windows EC2 server and promote it to be our on-premises AD and domain controller server with following details: VPC – on-prem-ad-vpc Subnet – on-prem-ad-vpc-sn IP – 10.10.0.192 Domain – onprem.local For instructions, see Set Up Your Environment for Trusts. In the aws-acc-1 account, we create an AWS Managed Microsoft AD with the following details: Edition – Standard Directory DNS name – ad.myaws.com Directory NetBIOS name – ad VPC – aws-acc-1-mad-vpc Subnet – aws-acc-1-mad-sn-1, aws-acc-1-mad-sn-2 IP – 10.20.0.59, 10.20.1.188 Directory ID – d-97671c6bae After creating the AWS Managed Microsoft AD, share it with aws-acc-2. The Amazon RDS resources in aws-acc-2 join this shared AWS Managed Microsoft AD. From aws-acc-1, sign in to the Directory Service console. On the Directories page, select myaws.com. On the Actions drop-down menu, choose Share directory. Select Share this directory with other AWS accounts. For AWS account IDs, enter the ID for aws-acc-2. Choose Add. The share status shows as Pending acceptance. From aws-acc-2, sign in to the Directory Service console. Under Active Directory, choose Directories shared with me. Select the directory ad.myaws.com shared by aws-acc-1 and choose Review. Review the directory sharing invitation, acknowledge the cost, and choose Accept. The directory share status in aws-acc-1 changes from Pending acceptance to Shared. Establishing a one-way forest trust Amazon RDS for PostgreSQL and Aurora PostgreSQL require a forest trust to enable name suffix routing. Name suffix routing allows us to configure how Kerberos authentication requests are routed when we configure a forest trust between two AD forests. Kerberos authentication for Amazon RDS for Oracle works with forest trusts and external trusts because the domain-to-realm mapping is provided by the Kerberos configuration file (krb5.conf). We use a one-way (on-premises domain: incoming, AWS managed domain: outgoing) forest trust in this series of posts because a forest trust is recommended and works for Amazon RDS for PostgreSQL, Amazon RDS for Oracle, and Aurora PostgreSQL. In on-prem-account, create a security group to have the following ports open between the onprem.local server and the VPC and subnets of the AWS Managed Microsoft AD: TCP/UDP 53 – DNS TCP/UDP 88 – Kerberos authentication TCP/UDP 389 – LDAP TCP 445 – SMB The following screenshot is an example of the inbound rules of a security group associated with the onprem.local server. For an on-premises corporate network, the firewall must have the following ports open between your on-premises clients and the VPC and subnets of the AWS Managed Microsoft AD: TCP/UDP 53 – DNS TCP/UDP 88 – Kerberos authentication TCP/UDP 389 – LDAP TCP/UDP 445 – SMB TCP/UDP 464 – Kerberos authentication UDP 123 – NTP UDP 137-138 – Netlogon TCP 135 – RPC TCP 139 – Netlogon TCP 636 – LDAPS (LDAP over TLS/SSL) TCP 3268-3269 – Global Catalog TCP 1024-65535 – Ephemeral ports for RPC ICMP – All In aws-acc-1, open the Amazon VPC console. Choose Security groups. Search for your AWS Managed AD directory ID. In the search results, select the item with the description “AWS created security group for directory ID directory controllers.” On the Outbound rules tab of that security group, choose Edit. Choose Add another rule. For the new rule, enter the following values: Type – All traffic Protocol – All Destination – The traffic that can leave your AWS managed domain controllers and where it can go in your on-premises network. Specify a single IP address or an IP address range in CIDR. Log in to the onprem.local domain controller server. In DNS, choose New Conditional Forwarder. For DNS Domain, enter the domain name of the AWS Managed Microsoft AD. For IP addresses of the master servers, provide the two IPs of the AD. You can ignore the red icon that appears next to the IPs. Choose OK. Creating an incoming forest trust You now create a one-way: incoming forest trust with AWS Managed Microsoft AD ad.myaws.com. On the loprem.local domain controller server, in Active Directory Domains and Trusts, choose Properties. On the Trusts tab, choose New Trust. Choose Next. For Name, enter the name of AWS Managed Microsoft AD (ad.myaws.com). Choose Next. For Trust Type, select Forest trust. Choose Next. For Direction of Trust, select One-way: incoming. Choose Next. For Sides of Trust, select This domain only. Choose Next. For Trust password, enter a password to use when we create the trust relationship in AWS Managed Microsoft AD in aws-acc-1. Choose Next. In the Trust Selections Complete section, review your settings and choose Next. In the Trust Creation Complete section, review your settings and choose Next. For Confirm Incoming Trust, select No, do not confirm the incoming trust. Choose Next. In the final section, choose Finish. Creating an outgoing forest trust Now you can create a one-way: outgoing forest trust in AWS Managed Microsoft AD ad.myaws.com on the Directory Service console in account aws-acc-1. On the Networking & security tab, choose Add trust relationship. For Trust type, select Forest trust. For Existing or new remote domain, enter onprem.local. For Trust password, enter your password. For Trust direction, select One-way: outgoing. For Conditional forwarder, enter 10.10.0.192. Choose Add. The one-way forest trust is established and verified successfully. After the trust is created, log in to the onprem.local domain controller server. On the Trusts tab, choose your domain (ad.myaws.com) and choose Properties. Make sure that the on-premises Microsoft AD domain name includes a name suffix routing that corresponds to the newly created trust relationship. Joining Windows and Linux clients to an on-premises domain Now we create an AD user joedoe@onprem in on-premises AD, and join one Windows client and one Linux client to the on-premises domain onprem.local. Later on, we log in to the Windows and Linux client as joedoe@onprem and connect to Amazon RDS resources with Kerberos and Microsoft AD authentication. Create an AD user joedoe in onprem.local, and make sure that Do not require Kerberos preauthentication is deselected. Create one Windows EC2 server and one Linux EC2 server in on-prem-client-vpc, and join the Windows and Linux server to the on-premises local domain. For the Linux client, configure the /etc/krb5.conf file as the following: [joedoe@ip-10-11-1-23 ~]$ cat /etc/krb5.conf # Configuration snippets may be placed in this directory as well includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] dns_lookup_realm = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = true rdns = false default_realm = ONPREM.LOCAL default_ccache_name = /tmp/kerbcache [realms] AD.MYAWS.COM = { kdc = ad.myaws.com admin_server = ad.myaws.com } ONPREM.LOCAL = { kdc = onprem.local admin_server = onprem.local } [domain_realm] .ad.myaws.com = AD.MYAWS.COM ad.myaws.com = AD.MYAWS.COM .onprem.local = ONPREM.LOCAL onprem.local = ONPREM.LOCAL .rds.amazonaws.com = AD.MYAWS.COM .amazonaws.com.cn = AD.MYAWS.COM .amazon.com = AD.MYAWS.COM Summary In this post, we talked about the difference between two domain-trust directions, one-way and two-way trust, and the difference between two trust types: forest trust and external trust. To enable external Kerberos authentication for Amazon RDS, a one-way (on-premises domain: incoming, AWS managed domain: outgoing) forest trust is recommended between the on-premises domain and AWS managed domain. We then created the infrastructure and resources for the external Kerberos authentication for Amazon RDS based on three AWS accounts. Now we have achieved the following: Network connections on the on-premises account, aws-acc-1, and aws-acc-2 via AWS Transit Gateway. An AWS Managed Microsoft AD ad.myaws.com in aws-acc-1 and shared with aws-acc-2. A one-way (on-premises domain: incoming, AWS managed domain: outgoing) forest trust between the on-premises AD domain onprem.local and AWS Managed Microsoft AD domain ad.myaws.com. A Windows client and Linux client joined to the on-premises AD domain. An on-premises AD user joedoe@onprem, who can log in to the Windows and Linux client with AD authentication. With this infrastructure in place, we’re now ready for the forthcoming series of posts: Using external Kerberos authentication with Amazon RDS for PostgreSQL, in which you create Amazon RDS for PostgreSQL instances in aws-acc-1 and aws-acc-2 and enable Kerberos and Microsoft AD authentication for database users; Using external Kerberos authentication with Amazon RDS for Oracle; and Using external Kerberos authentication with Amazon Aurora PostgreSQL. About the Authors Zhen Wang is an RDS Cloud Support Engineer at Amazon Web Services. Sundar Raghavan is a Senior Specialist Solutions Architect at Amazon Web Services. https://aws.amazon.com/blogs/database/preparing-on-premises-and-aws-environments-for-external-kerberos-authentication-for-amazon-rds/

0 notes

codeonedigest · 2 years ago

Text

Amazon Relation Database Service RDS Explained for Cloud Developers

Full Video Link - https://youtube.com/shorts/zBv6Tcw6zrU Hi, a new #video #tutorial on #amazonrds #aws #rds #relationaldatabaseservice is published on #codeonedigest #youtube channel. @java @awscloud @AWSCloudIndia @YouTube #youtube @codeonedig

Amazon Relational Database Service (Amazon RDS) is a collection of managed services that makes it simple to set up, operate, and scale relational databases in the cloud. You can choose from seven popular engines i.e., Amazon Aurora with MySQL & PostgreSQL compatibility, MySQL, MariaDB, PostgreSQL, Oracle, and SQL Server. It provides cost-efficient, resizable capacity for an industry-standard…

View On WordPress

1 note · View note

phungthaihy · 5 years ago

Photo

AWS Certification Training Free AWS Amazon Tutorials: How to create an Amazon Aurora Global Database http://ehelpdesk.tk/wp-content/uploads/2020/02/logo-header.png [ad_1] Watch this FREE AWS Hands-On Lab... #amazonaws #amazonwebservices #aws #awsamazon #awsaurora #awsauroradatabase #awscertification #awscertificationtraining #awscertified #awscertifiedcloudpractitioner #awscertifieddeveloper #awscertifiedsolutionsarchitect #awscertifiedsysopsadministrator #awscloud #awscloudtraining #awsexam #awsfree #awsfreetutorialsforbeginners #awsfreetutorialsseries #awshandson #awshowto #awssolutionsarchitect #awstraining #awstutorialonline #ciscoccna #cloudcomputing #comptiaa #comptianetwork #comptiasecurity #cybersecurity #ethicalhacking #freeaws #it #kubernetes #linux #microsoftaz-900 #microsoftazure #networksecurity #software #webamazonservices #windowsserver

0 notes

codezup · 4 months ago

Text

A Step-by-Step Guide to Creating a Highly Available AWS Database with Amazon Aurora and RDS

Introduction Creating a highly available AWS database with Amazon Aurora and RDS is a crucial task for any organization that relies on a scalable and reliable database solution. In this tutorial, we will guide you through the process of setting up a highly available AWS database using Amazon Aurora and RDS. This tutorial is designed for developers and system administrators who have some…

0 notes

cloudolus · 5 months ago

Video

youtube

Amazon RDS Proxy | Enhance Database Performance and Security

Amazon RDS Proxy is a fully managed database proxy service that improves the performance, scalability, and availability of your relational databases. It acts as an intermediary between your application and the database, ensuring optimized connections and enhanced security without requiring changes to your application code.

Key Features Covered in This Video: 1. Connection Pooling: - Efficiently manages thousands of database connections to handle high-concurrency workloads. - Reduces overhead by reusing existing database connections.

2. Improved Database Performance: - Minimizes connection establishment overhead for high-traffic applications. - Optimizes resource usage, especially during traffic spikes.

3. Enhanced Security: - Protects database credentials with AWS Secrets Manager integration. - Ensures secure connections to your database by handling authentication and encryption.

4. Automatic Failover: - Seamlessly switches to a standby instance during database failovers, ensuring high availability.

5. Compatibility with Major Engines: - Supports Amazon Aurora, MySQL, and PostgreSQL databases.

Hands-On Demonstration: - Setting Up RDS Proxy: Step-by-step guide to creating and configuring an RDS Proxy for your database. - Integrating with Applications: How to update your application to connect through the RDS Proxy. - Testing Performance and Security: Evaluate the benefits of connection pooling and automated failovers in real-time scenarios.

Who Should Watch This Video? - Developers and architects looking to optimize database performance for high-concurrency applications. - DevOps engineers focused on improving database availability and scalability. - AWS users aiming to enhance security for database connections.

Benefits of Using Amazon RDS Proxy: - Reduced Latency: Ideal for serverless applications and microservices requiring fast and consistent database access. - Cost Optimization: Efficient connection management reduces database resource consumption. - Simplified Authentication: Securely connect applications to databases without storing credentials.

Tools and AWS Services Covered: - Amazon RDS Proxy - AWS Secrets Manager - Amazon Aurora (MySQL and PostgreSQL compatible) - AWS Management Console - AWS SDKs

By the end of this tutorial, you’ll understand how to configure and utilize Amazon RDS Proxy to improve your database’s performance, scalability, and security.

#amazon #rds #database #S3 #aws #devops #amazonwebservices #free #awscourse #awstutorial #devops #awstraining #cloudolus #naimhossenpro #ssl #storage #cloudcomputing #dbs #free

*🔔Subscribe & Stay Updated:* Don't forget to subscribe and hit the bell icon to receive notifications and stay updated on our latest videos, tutorials & playlists! *ClouDolus:* https://www.youtube.com/@cloudolus *THANKS FOR BEING A PART OF ClouDolus! 🙌✨*

#youtube #amazon rds proxyaws rds proxyaws database proxycloudamazon proxycloud computingamazonaws tutoriallalicat proxyrds proxyamazon web servicesaw #cloudolus #aws #free #AWS Bangla #ClouDolusPro

1 note · View note

shrus3758 · 5 years ago

Text

Chasing the Best View of the Northern Lights - Iceland

One of many attractions for visitors to Iceland will be the potential for a sighting in the spectacular Upper Lighting. Iceland is perfectly located in the northern hemisphere in order to offer excellent views and regular sightings with this phenomenon. There are many techniques for the greatest areas, however, and also this is key to have the best experience. Northern Lights Iceland and Northern Lights Norway.

Timing Is Everything

The very best instances of the season to find out the North Lighting, Iceland's very best lighting present, is in between the several weeks of October to Mar. It is especially important to select an area with consistently clear skies and something that is nicely away from any man-made metropolis lamps. Consequently, it is not unusual to be led to quite remotely located hotels if viewing the Aurora Borealis is your goal. As location and timing is everything, it is strongly advised to travel with expert specialized companies, who are skilled in creating the best possible experience for their guests.

Expert Guides

If you allow a local expert to guide you to the best-known sighting locations at the most appropriate times, the lights may not be immediately apparent or visible to first-time viewers, so it is a much more rewarding experience. These guides are also very familiar with the fascinating technology right behind North Lighting. Iceland also provides a wealthy culture and history packed with folklore and superstitions all around the lighting fixtures, which numerous tutorials really like to share. They are likewise capable to aid visitors in locating the best taking photos of locations and opportunities to record pictures from the lights.

Best Methods of Transportation

The land has a pretty durable ground that is certainly very best navigated by an expert. A lot of the adventures are going to be via off of-highway paths inside a four-wheel travel 'super jeep'. These automobiles are prepared to handle the tough terrain and versatile ample to access several of the more far off places, that provide the best viewing prospects of your lighting fixtures away from unnatural lighting. Obviously, climatic conditions will likely affect watching opportunities.

A Unique Experience

For a lot of, the chance to observe the mesmerizing Aurora Borealis is a once in a lifetime expertise. For the best view of the Northern Lights, Iceland provides more than just an ideal location. In the gorgeous volcanic landscaping and geographic spectacles, like glaciers and geysers, to the beautiful food, a visit to this outstanding country is truly awe-inspiring. The slightly milder temperature ranges of the country (compared to other sighting spots), also help make the experience considerably convenient and reachable for many.

0 notes

cladeymoore · 6 years ago

Text

How the Coinbase Security team deployed CTFd to Power our First Capture the Flag contest at Defcon…

How the Coinbase Security team deployed CTFd to Power our First Capture the Flag contest at Defcon 27

By Nishil Shah and Peter Kacherginsky

We recently ran Coinbase’s first Capture the Flag (CTF) competition called Capture the Coin. As part of running the CTF, we needed to setup the underlying infrastructure. In this guide we’ll describe our process from choosing a CTF platform to getting it production ready. This CTF definitely would not have been possible without all the open source contributors, projects, tutorials, and free services we leveraged, so we’re making this guide as a small contribution back to the community. Overall, the process took us a few weeks to setup, but with this guide, you’ll only spend a few days.

Choosing a CTF Platform

We chose CTFd as our CTF platform based on the following criteria:

Challenge Input Interface

Support for Types of Challenges

Free Response (Static and Pattern-Based)

Dynamic Value

Multiple Choice

Custom Plugins

Public Scoreboard

User and Team Registration

Admin Panel

Player Communications

Hints

Active Maintainers

CTFd had support for most of our requirements except for multiple choice questions. However, requirements like having active maintainers was useful when the maintainers quickly patched a bug in a few hours. We also wanted to write challenges that forced users to interact with a real blockchain. This would require some custom development, so we also wanted the ability to build our own custom modules. Anecdotally, a few other CTFs had run successfully on CTFd. Given these requirements, CTFd matched our needs the closest.

CTFd mostly worked out of the box by following the README instructions; however, we did run into one issue. Out of the box, CTFd started running really slow. We did some basic debugging like looking at memory and CPU utilization to see if we needed to upgrade our EC2 instance. In general, resource consumption was generally less than 1%. We eventually found out that using Sync workers was inefficient. We changed the settings to use async gevent workers and correctly setting worker_connections and workers using the advice from this post. This solved our issue and CTFd worked great with very little latency.

Capture the Coin Infrastructure

Setting up and running this CTF was a great learning experience in getting hands-on with AWS and debugging real issues. As appsec engineers reviewing code or infrastructure, we often times can become unsympathetic to how hard an engineers’ job can be when defining security requirements even in a #SecurityFirst engineering culture. Just for something as simple as a CTF, the bill of materials starts to pile up as you can see below.

Cloudflare Free Tier

CTFd

Google Recaptcha v2

Infura

Let’s Encrypt/CertBot

Redis (AWS-managed or locally running)

SES Email Forwarder Lambda (Here’s a guide we found very helpful to setup this lambda)

AWS (Paid Tier)

EC2

IAM

Lambda

RDS Aurora

SES

Here’s a network diagram of what our AWS infrastructure looked like at a high level.

Our vendor choices were typically determined by our own familiarity. We used AWS as our infrastructure provider, and we used Cloudflare as our DoS protection for similar reasons. For email and email verification, we used SES to trigger an email forwarder lambda and save a copy of the email to an S3 bucket. The lambda then pulled the email from the S3 bucket and forwarded the contents to the recipients defined in the lambda. Eventually, we swapped out our EC2 instance hosting an Ethereum node with Infura as this gave us reliable connectivity to the ETH blockchain for the smart contract challenges. Our infrastructure is rather simple compared to the complicated microservice environments today, but there was still some complexity involved.

Our Setup Notes

Signup for AWS Account.

Buy a domain with your favorite provider.

Set up Route53 NS DNS records in AWS.

Set up Route53 MX DNS records in AWS.

Set up Route53 SOA DNS records in AWS.

Set up Route53 SPF DNS records in AWS.

Set up Route53 DKIM DNS records in AWS.

Note: The AWS SES Domain Verification step will require an additional TXT record.

Spin up an EC2 micro instance. You can always resize later.

Attach the right security groups. Initially, we limited external access to private IP ranges so that we didn’t accidentally leak challenges until we started the competition.

Spin up RDS instance. We went with the AWS managed solution because this was the simplest and we wouldn’t have to worry about load balancing or patching.

Follow this guide to get inbound and outbound emails working under your CTF domain.

Install CTFd by cloning the repo and installing dependencies. (We used v2.1.3)

Setup Google Recaptcha v2 for spam and DoS protection.

Setup Infura or your own node if you want Ethereum smart contract challenges.

Setup Let’s Encrypt/Certbot for HTTPS during testing and eventually for connections from Cloudflare to CTFd.

Setup AWS-managed Redis or use a Redis instance locally.

Setup port forwarding 80 to 443 and 443 to 8443 so CTFd doesn’t have to run with sudo and http:// is auto-redirected to https://.

Run CTFd! Note that Unix security best practices still apply like running the application under a limited user.

Run the following commands to set all the environment variables.

# CTFd Database

export DATABASE_URL=

# Web3

export WEB3_PROVIDER_URI=

export GETH_ACCT_PASSWD=

# Redis Caching

export REDIS_URL=

# Infura

export WEB3_INFURA_API_KEY=

export WEB3_INFURA_API_SECRET=

# reCAPTCHA

export RECAPTCHA_SECRET=

export RECAPTCHA_SITE_KEY=

cd CTFd

gunicorn3 -name CTFd —bind 0.0.0.0:8443 —statsd-host localhost:8125 —keyfile /etc/letsencrypt/live/capturethecoin.org/privkey.pem —certfile /etc/letsencrypt/live/capturethecoin.org/fullchain.pem —workers=5 —worker-class=gevent —worker-connections=5000 —access-logfile /home/ubuntu/access.log —log-file /home/ubuntu/error.log “CTFd:create_app()”

We found this guidance for optimizing workers and worker-connections helpful.

When finished testing with your running CTFd instance, setup the competition dates in the CTFd admin interface.

Install the Ethereum Oracle CTFd extension and generate contracts.

Add SES SMTP credentials to CTFd admin interface for user registration if you want email verification.

At this point, the CTF should be entirely setup. Only keep going if you’d like to setup Cloudflare for DoS protection.

Setup Cloudflare DNS and modify the AWS security group for the CTFd box to allow ingress from Cloudflare IPs.

Setup Cloudflare SSL/TLS. SSL — Full (strict) if you still have a valid cert from Let’s Encrypt

Setup Edge Certificates — Cloudflare Universal SSL certificate unless you have the budget and security requirements for a dedicated cert or uploading your own cert.

Setup Cloudflare by enabling Always Use HTTPS, HSTS, TLS 1.3, Automatic HTTP Rewrites, and Certificate Transparency Monitoring

Setup Cloudflare by using minimum TLS version 1.2

You can also setup whitelisting for known good IP addresses in Firewall Tools so that Cloudflare doesn’t challenge requests from these ranges.

Dynamic Oracle

One requirement for the competition was to support Ethereum smart contract challenges, after all, this was called Capture the Coin. If no (testnet) coins could be captured, we would not have lived up to the name.

The contest included the excellent CTFd Oracle plugin by nbanmp which allowed us to process on-chain events such as determining whether or not the deployed smart contract was successfully destroyed by the player. We have modified the original oracle to allow for contract pre-deployment since Ethereum Ropsten network may sometimes be unreliable.

You can find the source code for the oracle and contract deployer here: https://github.com/iphelix/ctc-eth-challenge

Future Steps

In the future, we plan to use the dockerized setup so that it is easy to spin up and down the entire CTFd platform. CTFd already allows for codification of the settings which is helpful in being able to get predictable application deploys. We also would like to codify our infrastructure so that we can get predictable and simple deploys.

Thank you to all the open source contributors without their contributions hosting this CTF would not have been possible.

If you’re interested in working on solving tough security challenges while also creating an open financial system, please join us!

This website contains links to third-party websites or other content for information purposes only (“Third-Party Sites”). The Third-Party Sites are not under the control of Coinbase, Inc., and its affiliates (“Coinbase”), and Coinbase is not responsible for the content of any Third-Party Site, including without limitation any link contained in a Third-Party Site, or any changes or updates to a Third-Party Site. Coinbase is not responsible for webcasting or any other form of transmission received from any Third-Party Site. Coinbase is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement, approval or recommendation by Coinbase of the site or any association with its operators.

All images provided herein are by Coinbase.

How the Coinbase Security team deployed CTFd to Power our First Capture the Flag contest at Defcon… was originally published in The Coinbase Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

from Money 101 https://blog.coinbase.com/how-the-coinbase-security-team-deployed-ctfd-to-power-our-first-capture-the-flag-contest-at-defcon-eeb8da3bf2b0?source=rss----c114225aeaf7---4 via http://www.rssmix.com/

0 notes

ronyxfic · 8 years ago

Text

Educating the Victim - Act V, Chapter XXVIII

Pairing: Pearl/Amethyst, Yellow Pearl/Yellow Zircon, Yellow Pearl/Yellow Diamond (mentioned)

Rating: Mature

Warnings/Tags: none for this chapter!

Read it on AO3!

Educating the Victim Masterpost

(Previous chapter) (Next chapter)

CHAPTER 28: Moving on

Introspection sometimes cut through her fears like a samurai sword, and that evening, Pearl found herself with the courage to finally send Amethyst a message.

‘Hey. I'm really sorry. Could we maybe please talk? Even if all you do is tell me how much you hate me. I just want some closure.’

Amethyst, having returned from the meeting, looked at her phone.

Frowned.

After about half an hour of careful deliberation, she finally texted back.

‘Fine.’

The fact that she was using capital letters and punctuation should probably serve to show Pearl that she was taking this Seriously, with a capital S.

‘Wanna meet up somewhere? idk. A cafe or something.’

She sighed.

‘And I don’t hate you.’

‘Isn't it late?’ Pearl frowned, ‘nowhere is going to be open. We could call.’

Knowing she wasn't hated was fairly relieving.

‘i was more thinking like tomorrow or something’

‘dunno if i wanna call’

‘that's alright.’

It wasn't. She sighed and tried to swipe away the messenger bubble. She noticed an earlier conversation she'd had with Sapphire.

‘so, uh. There's a rave tonight. I'm kind of grounded but might try and sneak out.’

Amy frowned.

On impulse, pressed the call button.

Oh.

Pearl picked up. "Hey." She said, nervous. "I'm sorry."

“Nah man, forget about it. Did you say rave? I was talking to Ruby earlier and she told me about one – this wouldn’t happen to be the same one?”

"Down by the junkyard? I'm not too sure how safe it is but Sapphire wouldn't invite me out to something dangerous."

“Oh, man, so we are talking about the same thing!” Amy grinned. “I saw Sapphire texting but I didn’t realise she was talking to you. I wasn’t gonna go, got no one to go with. Well, until now. You down?”

Pearl then frowned.

"Um. What are you doing with... them?"

Amethyst cocked her head.

Oh yeah, Pearl didn’t know.

“We were just hanging with your ex,” she said casually, “nothing you need to worry about.”

"Um!" Pearl was flabbergasted. "UM!"

“Dude, chill, I’ll tell ya about it later. Though, ya know, ratting her out to Diamond? Not cool. Anyway. Whatever. Do you wanna-“ Wait, inviting Pearl over was probably not a great idea. “Uh, I could come to yours? Or we could just meet there?”

"Meeting there. Parents aren't letting me have anyone over."

“Ok, sure. Uh. When?”

"Hang on. Need to ask Sapphire when it starts."

Amethyst laughed. “No you don’t,” she said. “It starts at eleven. I talked to them, remember? Ruby told me everything. She’s gonna be there too.” She then realised her mistake. “I mean they.”

Pearl paused.

Oh.

She felt envy. Upset. Amy wasn't meant to know them.

"I'll see you there at eleven. "

“Cool! See you soon then,” Amy said, and waited for Pearl to hang up.

Her voice betrayed her heartbreak. "Can't wait!" She promptly dropped the call.

"Amy!" Aurora called out. "I'm going out!"

Amy instantly jumped up. “Yo, where are you off to?” she said. “I didn’t realise you had plans.”

"Um, I forgot to mention." Aurora looked awkward. "I set up a tinder account. I have a date."

“Oh man, that’s so cool! Incidentally,” Amethyst nodded at her phone, “so do I. I’m going to the rave Ruby was talking about, and Pearl’s gonna join me there.” She grinned at Aurora.

"Oh!" Aurora seemed surprised. "You're friends again?"

“As of like five seconds ago, I guess,” Amethyst said. “So who’s your date?”

"She's really cute. Rich, too. A lawyer. She's from out of town, but look." Aurora swiped up a profile and passed her phone to Amy for a look.

“Aw! Cute. Not as cute as Pearl, though.” Amy grinned at Aurora. “Anyway, yeah, I’m going to the rave. I guess you can’t drive, but I can take the bus. You have fun, yeah?”

"You... take care of her, okay? Don't get too drunk and just lemme know if you're going to crash somewhere. Even if it's a very drunk call, lemme know you're safe."

“Will do, mum.” Amy grinned and came in for a hug. “You stay safe too, yeah? Don’t let lawyer girl kidnap you. She’d win the court case for that, probably.”

"Oh, she might. I'll try and not let her steal my heart." Aurora winked. "There's lamb chops in the fridge to heat up when you get back."

“Thank you!” Amy waved. “I’ll go back to my room, I need to find a cute outfit.”

Aurora watched her leave and finally allowed her face to drop. An odd pang of envy sent ripples of upset through her. She shrugged it off.

She had a date. They'd arranged to meet up at a conveyor belt sushi bar that was open until late. She was ready to try and move on for tonight. Amethyst had been right. Everyone seemed to be enjoying some form of romantic love in her life and she was tired of lagging behind over her loss of Marigold.

Adorned with her usual pretty yellow evening dress, she pulled up at the location they'd agreed on.

Zaira Giallo was already there; she’d only ever been late for anything once, and that had been a complete embarrassment.

(She was fairly sure everyone else involved had long forgotten about it.)

She was intrigued by this girl she’d managed to find online. Several years younger than her, but Aurora didn’t seem to mind that in the slightest.

She caught Aurora’s eye and waved her over. Eyes wandering over the flattering yellow dress she was wearing.

“Good evening,” she said when Aurora was close. She leant in to kiss Aurora’s cheek. “A nice location. Sushi isn’t usually my fancy, but it’s always nice to try something different.” Her English was accented, but otherwise perfect.

Aurora blushed, not quite expecting the contact, but heavily appreciating it all the same. "This place is pretty good, they do a lot more than just the fish, so it's not that bad. What do you usually enjoy?"

Zaira smiled as they settled down. “Well, I’m from Italy,” she said, “I have high standards. This country...” She grimaced. “Well, let’s just say, it could do better in many ways. How has your day been?”

"Oh yes, you mentioned it on your profile. What brings you here?" Aurora smiled. "I've had a... busy day. Had to meet up with a friend since she's been suspended from work."

“My boss is here investigating something,” Zaira said. “I can’t disclose details, but it’s an odd little case, and she’s called me here to help her sort out things. I won’t be staying for long,” she added, “so I do hope you’re not looking for anything permanent. I don’t do long distance.”

"Just some fun from a pretty older woman. I'd appreciate a distraction and," she pressed a soft, seductive stroke against Zaira's hand. "I'll try my best to help you have a good time."

Zaira frowned, displeased. “I am really not that old,” she said, “and if you insist on making me feel like I am, I might just leave.”

Aurora could only apologise. "Sorry; I didn't mean for it to come out like that. Wanna order drinks?"

“It’s forgiven.” The smile was back. She held on to Aurora’s hand before Aurora could pull it away. “Of course. They actually have some decent wines. What will you have?”

"Oh, I'm feeling just the cider for now. That might change if something else catches my eye, though."

Zaira nodded, then waved the waiter over to order their drinks.

When he was gone, she turned to Aurora again.

“So, tell me a little about yourself, Aurora Jaune,” she said.

"Well, I'm not very special. I'm local from here. A personal assistant and secretary for now but I'm planning to go to university soon." She looked a little mournful for a second. "If there's anything interesting is that my high school sweetheart was the headteacher."

“Gosh, you’re so young. But that sounds exciting. What was your headteacher like?”

"Tall. Loud." Beautiful. "Annoying. It wasn't a good time, but hey. Kept me close to my sister for a while."

Zaira frowned mildly. “How so?”

"I graduated high school five years ago. I could have gone to university then, but I didn't trust my parents to look after my sister. I raised her, you see." She looked a little distracted for a second. "We had a decent relationship for that time until last summer."

“Sounds like quite a ride,” Zaira said. “Tell me about your sister, then.”

"She's unfortunately rather vulnerable. Gave me this number on my nose." She laughed, unable to really be bitter about it anymore. "A fighter. The thing was that I was really a permanent part of her life until my boss started to chip into more and more of my personal life."

“Hmm. I don’t have any brothers or sisters, or children, so I wouldn’t know what that’s like. Almost all my life is work, which is how I like it.” A small, slightly cheeky smile played around her lips; almost like she had made a joke that Aurora wasn’t in on.

"Oh, yes!" Aurora blushed a little. It felt like she was somehow being made fun of. She wasn't going to let it make her feel defeated, however. "Your job does sound incredibly exciting. I must admit it was one of the things that drew me to you. Tell me about it."

“Oh, being a lawyer is really not all that exciting. Unless you’re very good. Like me,” she smirked. “I got hired by someone rich. So I get to do their court cases. Have been for several years. And it’s Italy, so yes, occasionally, the Mafia is involved.” She winked.

"Oh my god." Aurora gasped. "Now that is exciting. Though, I take it that disclosure agreements mean that you can't tell me much."

“You have the right idea, bella.” The way she said it was sincere, a little arrogant, but didn’t cross the line to condescending yet. “I’m sure there’s things about your job that you wouldn’t be able to tell me about. So let’s not talk about jobs, hm? What is it you like to do in your spare time?”

"Now that I have a little more time to myself, I've been getting more enthusiastic at reviving some of my old video games in my spare time. I also spend way too much time watching makeup tutorials on the Internet." Aurora laughed, awkward. But unashamed in her earnest glance. "What do you do?"

Zaira smiled. Aurora was cute.

“I don’t get much free time, and I tend to spend a significant amount of it trying to find someone to spend it with,” she said, nodding at Aurora. “But when I do have time, I like roleplay. Any kind – Dungeons and Dragons, online, or … sexual.” She deliberately held Aurora’s eyes.

Aurora bit her lip, eagerly. "Oh, that's exciting. My twin was always into that, so I was kept up to date. Never really tried it, but I could be persuaded to try anything." She rubbed her own wrist. Her dates had never been this forward. This open.

She liked it.

Zaira’s smile widened. Her gaze going from calculating to seductive in a heartbeat.

“Well, if you’re up for it, you could come back to my hotel after we’re done here,” she said.

As if on cue, their waiter brought their drinks. “Would you like to order any food?”

"It would be a pleasure." She winked back and then paused, picking up her cider. "Hmm... I'll start off with just salmon sashimi."

Zaira shot her a look and then looked at the waiter. “I’ll have whatever she’s having.”

Displaying an air of confidence even though she really did not know her way around sushi.

"Tell me, then," Aurora said, sipping as they were left alone. "What's the main appeal in role play for you?"

Zaira took her time answering, taking a long and calculated sip of her wine.

Not too bad.

She then smiled at Aurora again. “Should I be honest with you?”

"I won't run, I swear." Aurora was charmed by that mysterious smile.

Zaira could tell. She chuckled. “Okay then,” she said. “Well, my job… excites me. More than it should. I like the power it gives me over people, the legal means to… interrogate. I like to imagine that power in different settings… what I would do to them if I was given the chance… but I like how controlled it is. I’m held back only by the law, or, in roleplaying scenarios, by my own moral code… and yet that is the strongest force there is. That balance – between being in power and being controlled… well, I’m sure you know how it is.” She gave a soft little giggle. “Even in non-sexual settings, I always play a lawyer. Or judge. Somebody who has power, but only as far as the law allows. It excites me.”

Aurora was somewhat aflush by the time Zaira was finished, watching her with net typical adoring intensity she'd only shared with Marigold in prior.

"My goodness," she finally replied. "That really is something. Is the fact that you're getting off to it something you can hold a keen poker face to? Or have you ever been accused of enjoying proceedings a bit too much?”

“No, no. Please, Aurora, I’m a professional.” Zaira laughed. “The only people who ever know about this are my sexual partners. Who I tend to keep strictly separate from my work. Hence the dating app.”

"I figured it was worth asking." Aurora giggled. It had been a dumb question. "It's clever, though."

“It’s just the way I am.” Zaira shrugged, still smiling. “So, what do you like? What… excites you? I can tell you’re into women who are a little older than you. Anything else?”

"I suppose I'm drawn to an imbalance of power. But I'd like to explore it with a fair bit of control. I feel that regardless of the amount of self empowerment I feel, I'm naturally fairly submissive and enjoy being led around."

“Oh, I feel we are going to get along splendidly,” Zaira said.

Their food hadn’t even arrived yet and Zaira was getting impatient, ready to leave. Aurora seemed like the perfect girl for a one-off thing, just casual play, nothing serious. And the way she took Zaira’s interest…

It was all so exciting.

Aurora noticed the slight fidget and lightly smiled. She'd found the same impatience in Amy.

Once the slices of fresh sashimi arrived, adorned prettily with vegetables, Aurora broke apart her chopsticks. "I take it you would like to head back to yours fairly soon?"

“Please. Though I won’t hold it against you if you want to eat your fill. If the evening goes as planned, you’ll need your energy later.” She winked before digging into hers as well.

She was a little clumsy with the chopsticks, but managed.

“Oh, this is really good. Maybe I should have sushi more often,” she said after having a few bites.

"Oh," Aurora flushed and dug in, spreading some wasabi paste over the pink fish and then letting it soak in a tiny dish of soy sauce. "I like it the best when it's so salty I can't feel my face. My twin likes hers completely on it's own and thinks I'm utterly mad."

“Hmm.” Zaira hadn’t tried the condiments yet. “The wasabi is spicy, right?” She picked up a tiny bit with her chopsticks and laughed. “White people spicy,” she commented before spreading some of it on her sushi, copying Aurora. “I have to say I probably agree with you. It’s a little dry on its own.”

"It's just the right amount of controlled spice for me, I feel." Aurora beamed, licking her lips and picking up a bowl of edamame beans off of the conveyor belt.

“You do seem to like controlled spice, hm?” Zaira chuckled. Watched Aurora pick up beans off the belt and let her eyes wander along. “Anything on there you’d particularly recommend?”

"The wafu salad here is pretty excellent." She smiled. "And the gyoza - that's the veggie ones passing us by on the purple plate."

Zaira picked up one of each. She started with the salad.

“Unusual,” she commented, “but I like it.”

"It's the weird seaweed crunch that gets me every time. " Aurora watched, finding a selection of tuna and vegetables.

Zaira nodded, concentrating on eating. Maybe if she ate fast (which she knew how to do; five-minute lunch breaks were a regular occurrence for her) they’d get to the actual interesting part of the evening more quickly.

Aurora finished her food and ordered another cider. It would be her last but she already felt more drunk than she had been in a while. "I'm just going to head to the bathroom," she said, flushed. "I'll be right back."

“Okay,” Zaira said. In the time Aurora was gone, she topped up her makeup a little and fixed her hijab. Which, hopefully, she would not be wearing for much longer.

She also took the opportunity to pay the bill for both of them, not even giving Aurora the the chance to protest. By the time Aurora got back, they’d be ready to leave.

Aurora made it to the bathroom and ran her hands under the water. She neatened her fringe and spritzed on a new wiff of perfume. She'd even shaved down there. Shaved.

In her many years of physical and sexual services to Marigold, most of her expectations were more behavioral. Marigold had never mentioned her hair. Nor her body in any way that wasn't calling it beautiful.

Why did she even care? Her date hadn't expressed anything about her appearance and yet...

And yet she found herself under pressure. She had standards. She needed to meet them and prayed she'd done enough to not disgust Zaira.

She sighed and walked back, a pleasant smile on her face. "Oh! Is that the bill?"

“All paid. You ready to go?” Apparently Zaira hadn’t been the only one to neaten herself up. Excitement boiled in her belly. It was so rare to find someone she could do this with – she only hoped Aurora wouldn’t wimp out later on.

"Oh, would you like me to pay you back at all?" Aurora asked, grabbing her jacket. "I'm all set."

“Oh, please don’t worry about it. I’m sure you’re doing well, but I probably still earn significantly more than you. Shall we?” She slid out of her seat and held her hand out for Aurora. “We could take a taxi, or we could walk. It’s not very far.”

"I'm quite tipsy," Aurora gently took that hand, cheeks indeed rosy. "Maybe a taxi would be a good idea."

> Insert 7

> Act V, Chapter XXIX

#educating the victim #etv act 5

12 notes · View notes