by Shawn Bower Introduction When working on your custom application at Cornell the primary option for integrating authentication with the Cornell central identity store is using Cornell’s Shibboleth Identity Provider (IDP). Using Shibboleth can ...
Read More
by Paul Allen As Cornell units consider moving various software and services to the cloud, one of the most common questions the Cloudification Services Team gets is “What is the network bandwidth between cloud infrastructure and campus?” Bandwidth to ...
Read More
by Shawn Bower Update 2019-11-06: We now recommend using awscli-login to obtaining temporary AWS credentials via SAML. See our wiki page Access Keys for AWS CLI Using Cornell Two-Step Login (Shibboleth) This post is ...
Read More
by Shawn Bower The Cloud Services team in CIT maintains docker images for common pieces of software like apache, java, tomcat, etc. One of these images that we maintain is Cornellized Jenkins images. This ...
Read More
by Shawn Bower The term DevOps is thrown around so much that it is hard to pin down it’s meaning. In my mind DevOps is about culture shift in the IT industry. It is ...
Read More
by Paul Allen At Cornell, as engineers contemplate moving infrastructure and applications to AWS it is tempting to ask whether they can start just by moving database instances to the AWS Relational Database Service (RDS) and ...
Read More
by Paul Allen If you are at Cornell developing and deploying sites or services using AWS, one of the things you’ll usually want to do is ensure that those sites and services can be ...
Read More
by Paul Allen This post describes the standard AWS Virtual Private Cloud (VPC) provisioned for Cornell AWS customers by the Cornell Cloudification Service Team. This “standard” VPC is integrated with Cornell network infrastructure and provides several benefits ...
Read More
by Shawn Bower One of the challenges as you move your infrastructure to the cloud is keeping your ec2 machines patched. One highly effective strategy is to embrace ephemerality and keep rotating machines in and ...
Read More
by Shawn Bower As part of the Cloudification effort before deploying applications to the cloud we go through a rigorous security checklist. Network and security group (firewall) review Application scan/review mitigation suggestions Configuration of ...
Read More