raspstephan / nwp-downscale

MIT License
38 stars 9 forks source link

Prevent security issues on Azure VMs #35

Closed raspstephan closed 3 years ago

raspstephan commented 3 years ago

I enabled Just in Time (JIT) access for our VMs to prevent the Azure security warnings. @annavaughan @HirtM Here is what you need to do to be able to log in.

In the Azure portal go to the security center.

image

Then go to the Azure defender on the left and click the Just-in-time VM access button below.

image

Click on the VM you want to you and click request access.

image

Here toggle the on button. My IP is fine. 3 hours is the maximum.

image

Then click request access. This takes a minute or so but then you should be able to log in like usual. Unfortunately, I guess you will have to do this every three hours again but let's hope this solves the problem.

raspstephan commented 3 years ago

Also, I guess we should shut down the VMs when we are not using them. So just make sure to save intermediate files, etc before shutting down.

raspstephan commented 3 years ago

Another related issue I am noticing is that my .ssh/id_rsa files keep disappearing after while, which is annoying because I need to set up a new Github access every time. Do any of you have the same issue?

HirtM commented 3 years ago

I think I've always entered my password, so no.

Quoting Stephan Rasp notifications@github.com:

Another related issue I am noticing is that my .ssh/id_rsa files
keep disappearing after while, which is annoying because I need to
set up a new Github access every time. Do any of you have the same
issue?

-- You are receiving this because you were mentioned. Reply to this email directly or view it on GitHub: https://github.com/raspstephan/nwp-downscale/issues/35#issuecomment-789786325

-- Dr. Mirjam Hirt LMU - Meteorological Institute Munich Waves to Weather Theresienstr. 37 80333 Munich, Germany Tel.: +49 (0)89 2180 4677 Email: m.hirt@lmu.de Website: https://www.meteo.physik.uni-muenchen.de/~M.Hirt/

raspstephan commented 3 years ago

JIT seems to have fixed that, so will close.