AWS Workshop

Scripts to provision sandboxed IAM users for an intro AWS workshop. The policy is set up so that only the services required for the workshop are allowed.

Prerequisites

• mise for task running
• aws cli v2
  • to configure credentials, i did the quick unsafe path by yoinking root account access keys from here (after authing into shared SoDA login using credentials from The Login Sheet) and put them in my local credentials file according to these docs

Setup

mise run create-policy   # one-time setup
mise run create-users    # creates 50 users, outputs to workshop-credentials.csv

Test with fewer users first:

USER_COUNT=2 mise run create-users

Cleanup

Terminates all EC2 instances, deletes workshop-* S3 buckets, and removes IAM users.

mise run cleanup

Distributing credentials

Mail merge via Google Apps Script:

1. Create a new Google Sheet, open Extensions → Apps Script
2. Paste contents of mail-merge.js
3. Replace CREDENTIALS_CSV with contents of workshop-credentials.csv
4. Replace ATTENDEES_CSV with attendees CSV exported from sun devil central
5. Click Run and authorize when prompted

The script assigns credentials to attendees in order and emails each their login info.