Closed trickdeath0 closed 10 months ago
If you try running the cloudgoat create command again does that resolve your issue?
The issue looks like there is not timeout between the server coming online and the provisioner/user_data running. A solution to this would be to have the file created in the user_data.
If you try running the cloudgoat create command again does that resolve your issue?
The issue looks like there is not timeout between the server coming online and the provisioner/user_data running. A solution to this would be to have the file created in the user_data.
I tried several times to overwrite; I also tried to destroy and create a new one, but it was not resolved
@andrew-aiken I looked at previous solutions and found this one, which worked perfectly for updating the whitelist.
Thanks for the quick availability for help :)
Ahh, yup an allow listed IP would have done it.
This is still open for me. Applies to any scenario containing ec2 instances. Error as described above when provisioning the instance from file: ssh timeout on the newly spawned ubuntu machines. I checked my whitelist as advised, it's definitely correct.
This is still open for me. Applies to any scenario containing ec2 instances. Error as described above when provisioning the instance from file: ssh timeout on the newly spawned ubuntu machines. I checked my whitelist as advised, it's definitely correct.
If you look in the AWS console what is the IP & what are the security group rules? Try connecting directly to that IP telnet <IP> 22
Let's stay with the example cloud_breach_s3, though this applies to all other scenarios containing ec2 instances for me. Telnet connection is impossible as well, aws_security_group.cg-ec2-ssh-security-group
and aws_security_group.cg-ec2-http-security-group
are being created successfully. This does not seem to be a timeout, but rather a provisioning issue: Adding a long "timeout" property to the connection in the ec2.tf followed by recreation does not solve the problem.
If you cannot hit the IP (telnet) then its probably related to the security group blocking your access.
What are the rules on the security group (aws_security_group.cg-ec2-ssh-security-group
)? Note it will include your public IP
The terraform summary at the beginning of the creation process states the 2 security groups correctly; the ingress cidr-blocks correctly reflect the contents of my whitelist.txt. The one egress cidr-block is 0.0.0.0/0, which I assume to be correct as well. Through my cloudgoat profile I can not list the groups after the creation breaks, and as I do not yet have the credentials from start.txt I can not check there.
Through my cloudgoat profile I can not list the groups after the creation breaks
The user your using should have permission to view the security groups since it should have created them. You can also view the security groups from the AWS console
Hello,
I had 2 errors at the beginning of setting up the lab, but the error for the s3 bucket was resolved thanks to https://github.com/RhinoSecurityLabs/cloudgoat/issues/198#issuecomment-1614876285 #233
But I can't figure out how to fix this error![image](https://github.com/RhinoSecurityLabs/cloudgoat/assets/70007454/f5caf526-b3f9-42e7-88b5-89ad0347ce3f)
This is the code for ec2.tf
If anyone has had this problem in the past or knows how to fix it, I'd love to hear :)