AWS CLI

Konfigurace

Konfigurace poductu a asume role

[default]
region = eu-central-1

# Define master account and configure credentials in .aws/credentials
[profile firma1]
region = eu-central-1

[profile f1-prod]
role_arn = arn:aws:iam::PROD_ACCOUNT_ID:role/OrganizationAccountAccessRole-prod
source_profile = firma1

[profile f1-devel]
role_arn = arn:aws:iam::DEVELOP_ACCOUNT_ID:role/OrganizationAccountAccessRole-develop
source_profile = firma1

pak uz lze pouzivat v cli profily

aws --profile f1-prod iam list-users

Cloudfront

Invalidace cache ve vsech distribucich v podrizenych uctech

for id in `aws --profile f1-prod cloudfront list-distributions --query "DistributionList.Items[*].{is:Id}" --output text`; do aws --profile f1-prod cloudfront create-invalidation --distribution-id $id --paths "/*"; done