DevOps&SRE Library

Most articles only cover the basics so we've attempted to create the "missing manual" for using environment variables in Linux and Mac.

- Use a credential manager to protect your access credentials.
- Configure two-factor authentication (2FA).
- Enforce signed commits.
- Protect the release branch.
- Require pull request reviews and approvals.
- Scan source code for sensitive data leaks.
- Scrub leaked secrets from git history.
- Only use trusted GitHub Actions.
- Protect the secrets used by GitHub Actions.
- Review project dependencies for vulnerabilities.
- Patch dependencies with vulnerabilities.
- Scan project source code for vulnerabilities.
- Publish a security policy.
- Collaborate on fixes for security vulnerabilities in private forks.
- Publish maintainer advisories for security fixes.

ConsoleMe strives to be a multi-account AWS swiss-army knife, making AWS easier for your end-users and cloud administrators. It is designed to consolidate the management of multiple accounts into a single web interface. It allows your end-users and administrators to get credentials / console access to your different accounts, depending on their authorization level. It provides mechanisms for end-users and administrators to both request and manage permissions for IAM roles, S3 buckets, SQS queues, and SNS topics. A self-service wizard is also provided to guide users into requesting the permissions they desire.