
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@renovosolutions/aws-cdk-managed-instance-role
Advanced tools
AWS CDK Construct Library to create an instance role for instances managed by SSM and capable of joining an AWS managed domain.
This CDK Construct Library includes a construct (ManagedInstanceRole
) which creates an AWS instance profile. By default this instance profile includes the basic policies required for instance management in SSM and the ability to Domain Join the instance.
The purpose of this CDK Construct Library is to ease the creation of instance roles by not needing to code the inclusion of baseline management roles for evey single different role implementation every time. Instance profiles only support a single role so its important the role includes all required access. This construct allows making additions to those baseline policies with ease.
The construct defines an interface (IManagedInstanceRoleProps
) to configure the managed policies of the role as well as manage the inclusion of the default roles.
You will need
This project is managed with projen
. Modify the .projenrc.js
file and run npx projen
. You can also modify this README
file and the src
code directory as needed. Github actions take care of publishing utilizing the automatically created workflows from projen
.
FAQs
AWS CDK Construct Library to create an instance role for instances managed by SSM and capable of joining an AWS managed domain.
The npm package @renovosolutions/aws-cdk-managed-instance-role receives a total of 14 weekly downloads. As such, @renovosolutions/aws-cdk-managed-instance-role popularity was classified as not popular.
We found that @renovosolutions/aws-cdk-managed-instance-role demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.