On 22 April 2010 12:19, Phillip B Oldham <phillip.old...@gmail.com> wrote:

> On Apr 22, 12:04 pm, Ken <k...@bob.sh> wrote:
> > > I personally prefer to set-up the instances externally with some other
> tool,
> > > saves having AWS credentials on the EC2 instance.
> >
> > I agree. Its a concern that each box will have so much control over
> > not only themselves but other instances that the key has access to. If
> > that 1 box is compromised then the would-be hacker can take control of
> > all the other boxes as well.
>
> Can the puppet master issue the ec2 commands from the main server
> then? If not, any suggestions for other tools with which I can
> automate this part of the process?
>
>
I'd recommend using Ruby with the right aws library.  You can then build the
node manifest files in your ruby code and deploy to a directory on your
puppet master.

Matt


> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To post to this group, send email to puppet-us...@googlegroups.com.
> To unsubscribe from this group, send email to
> puppet-users+unsubscr...@googlegroups.com<puppet-users%2bunsubscr...@googlegroups.com>
> .
> For more options, visit this group at
> http://groups.google.com/group/puppet-users?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to