Personal website homepage.

• 2015 Originally a J2EE application hosted on google app engine.

• 2016 Converted to AWS elasticbeanstalk (basically lift and shift)

• 2017 Converted to statically hosted s3 bucket where the access point was cloudfront

• 2020 Refactoring to get all (or at least most) resources into cloudformation now that you can import resources that were not originally created in cloudformation.

  • Adding a CI/CD code pipeline to accomplish this

• 2022 migrate to github actions for ci/cd

• 2023 frontend built in ReactJS

• 2024 github OIDC provider as a principal for assuming an IAM role instead of using long term credentials

scan-git-repo-for-secrets

git secrets command line utility adds a git hook to make sure you haven't commited any aws credentials

• install script

• Scan before making repo public

git secrets --scan-history

Project Directory Overview

Provides information on each directory/ source file

templates

• prod_resource_import.yml = Importing existing S3 Bucket and Route53 hosted zone to cloudformation

detect-secrets-scan

detect-secrets scan > .secrets.baseline

detect-secrets scan | \
python3 -c "import sys, json; print(json.load(sys.stdin)['results'])"