cloud-architects / open-console Goto Github PK

Good morning/afternoon for all!

After a search in GH repositories I found 2 projects that make easy the access to AWS Console use SSO/Federation. So it doesn't make sense designing/coding a new console when there are projects that make easy (here I was using personal scripts and it's hard) the process.

https://github.com/eikenb/aws-console
https://github.com/99designs/aws-vault

Thank you friends!

Hello friends, I am very interested in this project and I think we can start making an MVP version to validate the idea and the architecture.

I know that neither @meshuga nor I are specialists in front-end technologies like VueJS/React/Angular/ NuxtJs and others, but we can think of doing this in a simple way and who knows how to get some contributor with experience.

For this initial version I think we must have the following things:

1. Domain. We choose the name and I can register the domain.

2. The website with following features:
   2.1 - Login using keys/region
   2.2 - Screen showing which permissions are allowed
   2.3 - VPC functionalities [1]
   2.4 - Audit logs

3. We must decide the software architecture. I like the idea about a middleware to manage the calls from Website to AWS endpoints because we can control cache, permissions and others. The idea is not storage the user keys, but store a temporary token to control and resume the session. As the software is opensource and anyone can audit it, users can feel secure.

4. Ideas :D

[1]

An important step in the development and creation of the open console for AWS is to identify possible open source projects that implement this concept.

Searching on Google, I found a project https://daintree.app/. This project was done using Vue.js [1] and aws-cdk to make calls directly to the AWS endpoint [2].

I created an user with administrator permissions and after login he asks about his regions [3]. The interface is very friendly, fast and very easy to use. Currently implements 4 services: EC2, ECS, SQS and Network. I created one SQS queue and couldn't see it in the daintree interface, even though I can see it in the AWS Console, I think there is some problem with the Vue cache to reconstruct resource lists.

The draintree project would be an important benchmark to start this project.

[1]

[2]

[3]