Whereas making an attempt to entry the Github meta API to get the checklist of CIDRs related to GitHub and put them into an AWS Prefix Checklist I randomly acquired this error.
verfiable_password_authentication…
falsessh_key_fingerprints
The factor is, my code by no means modified after I acquired this error. I had run the identical code various instances. After I acquired this error I ran the identical code once more and by no means noticed the error once more.
“Cidr:” within the error message above gave the impression to be a part of the AWS template code I used to be making an attempt to generate. I used to be not utilizing any authentication to get to GitHub. I used to be utilizing SSH to get into an EC2 occasion, nevertheless the code from there was simply utilizing HTTPS to get to GitHub.
Nothing got here up for the precise phrases above within the error message after I searched on Google so initially I assumed that is inner code at both GitHub as a part of their meta API service or AWS CloudFormation.
Then I remembered that I had seen a part of a type of strings within the GitHub meta API I used to be taking a look at:
So there now we have:
verfiable_password_authentication
However not:
falsessh_key_fingerprints
However in case you have a look at the above we do have:
“ssh_key_fingerprints”
So in some way the “false” acquired inserted within the flawed place.
And “Cidr” is coming from the CloudFormation template I used to be making an attempt to auto-generate.
So maybe there was some form of parsing drawback that brought about the textual content from the GitHub API to be managed and merged into the CloudFormation template I used to be producing.
That error above looks as if a YAML parsing error so in some way extra knowledge was pulled from GitHub than anticipated. How that occurred, I’m not precisely certain. The API name brings down some knowledge from GitHub after which filters out solely what I want but it surely appeared like the entire file was pulled in quite than the subset of knowledge I wanted.
I had a separate bash operate that pulls down that knowledge so the one factor I may consider was a multi-threading error within the AWS Linux OS the place the primary operate didn’t end processing earlier than the second in what must be a single-threaded software.
At any fee, I by no means noticed the error once more after that one time.
Teri Radichel
When you preferred this story please clap and comply with:
Medium: Teri Radichel or E mail Checklist: Teri Radichel
Twitter: @teriradichel or @2ndSightLab
Requests providers by way of LinkedIn: Teri Radichel or IANS Analysis
© 2nd Sight Lab 2022
____________________________________________
Creator:
Cybersecurity for Executives within the Age of Cloud on Amazon
Want Cloud Safety Coaching? 2nd Sight Lab Cloud Safety Coaching
Is your cloud safe? Rent 2nd Sight Lab for a penetration check or safety evaluation.
Have a Cybersecurity or Cloud Safety Query? Ask Teri Radichel by scheduling a name with IANS Analysis.
Cybersecurity & Cloud Safety Assets by Teri Radichel: Cybersecurity and Cloud safety lessons, articles, white papers, shows, and podcasts