cnuss

6 ms·

1. 1.▲
   by cnuss 1mo ago

   this is awesome. I have a ton of nostalgia towards making what is old new again, but still the unadulterated original. I hope you find Tim, Kieran, or Stoyanvoy!
2. 2.▲
   Show HN: Deploy Hugging Face Models to AWS Lambda(github.com)

   1 points by cnuss 2y ago|0 comments
3. 3.▲
   by cnuss 2y ago

   It's not publicly accessible, per-se..., there's a reverse proxy I've written 1. There's a Function URL that then creates a Lambda HTTP Event 2. There's a reverse proxy in the container that converts the Lambda HTTP
4. 4.▲
   by cnuss 2y ago

   Yup! Change the `handler` and `start` command: ``` handler = "localhost:5000" ... start = "poetry run flask --app flask_poetry run -p 12345" ```
5. 5.▲
   Show HN: Run a Python Flask HTTP Server in AWS Lambda (w/Poetry)(github.com)

   3 points by cnuss 2y ago|4 comments
6. 6.▲
   Show HN: Run a Rust HTTP Server in AWS Lambda (Axum+Scaffoldly)(github.com)

   8 points by cnuss 2y ago|0 comments
7. 7.▲
   by cnuss 2y ago

   thanks don! here's the GH discussion on this topic: https://github.com/scaffoldly/scaffoldly/discussions/17
8. 8.▲
   Show HN: Deploy Next.js Apps to AWS Lambda(scaffoldly.dev)

   14 points by cnuss 2y ago|3 comments
9. 9.▲
   Show HN: Tokenless Authentication to Kubernetes(docs.saml.to)

   1 points by cnuss 4y ago|0 comments
10. 10.▲
    Show HN: Get AWS Credentials in GitHub Codespaces(github.com)

    25 points by cnuss 4y ago|0 comments
11. 11.▲
    Ask HN: GitHub Actions Architecture for Workflow Orchestration?

    4 points by cnuss 4y ago|0 comments
12. 12.▲
    by cnuss 4y ago

    thanks for the question! this completely eliminates the need to juggle ~/.aws/* files, or downloading or generation of one or more web identity token files, or complicated trust to a single root account using a single GitHub token
13. 13.▲
    Show HN: An easy way to assume AWS IAM roles on your Laptop or in GitHub Actions(saml.to)

    1 points by cnuss 4y ago|2 comments
14. 14.▲
    Show HN: Launch Localstack “as a service” with automatic termination(eph.dev)

    2 points by cnuss 4y ago|0 comments
15. 15.▲
    Show HN: TFstate.dev: Free Terraform State Storage Service Using a GitHub Token(github.com)

    3 points by cnuss 4y ago|0 comments
16. 16.▲
    by cnuss 5y ago

    The GitHub token that is used is a short-lived token that is generated new every time a GitHub action is run. Ref: https://docs.github.com/en/actions/security-guides/automatic... And the SAML.to backend first
17. 17.▲
    by cnuss 5y ago

    hey hatware! is that a question/comment for me?
18. 18.▲
    by cnuss 5y ago

    Thanks mdaniel for your observations! I updated package.json! On the note of the API endpoint. Yes that's correct, I've fashioned a backend API which handles converting of GitHub Repo Tokens to SAML Assertions: https://
19. 19.▲
    by cnuss 5y ago

    Thanks for the feedback SahAssar, sorry if the title caused any latent anxiety! I'll heed your advice for the next time I post something on HN, thank you!
20. 20.▲
    by cnuss 5y ago

    They're both Identity Protocols, SAML is older and more widely adopted, OIDC is newer. Kinda the XML vs JSON battle at a Protocol level haha! I've found a lot of SaaS providers only support SAML today, so you're stuck if you
21. 21.▲
    by cnuss 5y ago

    This is awesome! thank you!
22. 22.▲
    by cnuss 5y ago

    Hey zomglings! I'll echo what I just responded to nodesocket with, but I'd also love your feedback on my comment: https://news.ycombinator.com/item?id=29986209
23. 23.▲
    by cnuss 5y ago

    Totally agree re: complexity. My goal is that a few config steps in a GitHub repository and AWS makes a GitHub action able to do a wide variety of things (such as accessing multiple accounts) with very little upstart work. Storing Secrets i
24. 24.▲
    by cnuss 5y ago

    Hey orf! You are correct this GitHub action is at its core is very similar! Even though the initial instructions don't prescribe it, the biggest differentiator is that SAML.to supports a centralized permissions configuration across all
25. 25.▲
    Show HN: Stop Putting AWS Credentials in GitHub Secrets(github.com)

    88 points by cnuss 5y ago|29 comments
26. 26.▲
    by cnuss 5y ago

    Hey brianr! thanks for the question Let's actually use Rollbar as a use case since your HN profile says you're the co-founder, and Rollbar supports SAML ! Use case: There's a set of developers on a project in GitHub, that als
27. 27.▲
    by cnuss 5y ago

    great question yodon! generally speaking, no, there should be no security concerns checking this into a repo but some best practices would be recommended to follow: - make the repo private - protect the main branch - require PRs and # ap
28. 28.▲
    Show HN: Saml.to: I've Turned GitHub into a SAML Identity Provider(saml.to)

    23 points by cnuss 5y ago|6 comments
29. 29.▲
    by cnuss 5y ago

    Greetings Hackers!! I've bridged GitHub OAuth and SAML 2.0 together, and made it easy to use with a CLI (`npx saml-to --help`). It's called SAML.to ( https://saml.to ). I've built this to be a no/low-cost alter
30. 30.▲
    by cnuss 5y ago

    Thanks yodon, great feedback! I've aggregated a list here for easier discovery: https://docs.scaffold.ly/contributing/open-source-components