Associating an Access Control List with an Application Load Balancer in AWS - amazon-waf

In AWS I've created an Access Control List as part of setting up a WAF.
I have several Application Load Balancers (found in EC2 under Load Balancers).
None of these appear as options in the dropdown list for associating an ACL to an ALB, in fact when trying to associate the dropdown list is empty.
Everything shares the same region, so I am unsure why these application load balancers are not being seen.
I'm not sure if it is relevant but the ALBs are listed as type "Classic".
I've found the amazon documentation to be lacking in this department, any help would be appreciated.

Related

Can I use a Sharepoint view in an iFrame on an external website/app that has users autheticated with Azure AD SSO

We have a new intranet site that uses our AzureAD credentials with SSO (via SAML2.0). There's a widget that can display personal or specific Sharepoint Document folders but I've found that this is lacking in detail - particularly some of the document metadata.
Is there a way to use a curated Sharepoint View in an iFrame on this cross-domain website?
At present when I try, it comes up with an error
Refused to display "sharepoint-site-page" in a frame because it is set
'X-Frame-Options' to 'sameorigin'
I'd be grateful for any assistance if possible. Thanks!
Not sure if this applies to your particular view,
however this is a pretty well known thing that microsoft locks down sp to not allow cross site iframing by default,
you could try this solution:
https://www.sharepointpals.com/post/how-to-bypass-cross-domain-issues-to-display-sharepoint-online-pages-within-iframe-from-an-external-domain/
it makes use of the allowframing tag, that microsoft allows to do exactly that.
as per : https://learn.microsoft.com/en-us/archive/blogs/officeapps/iframing-sharepoint-hosted-pages-in-apps
hope this helps you a bit.

Configure Office 2013 add-in according to user specific settings

We try to make our Office 2013/16 html/javascript taskpane add-in to work against our customers own servers, running our software, to display their pictures, and add them to Word/PowerPoint. Our customers have one or more domains they would want to configure so the add-in connects to one of them. If we ship this add-in on Office Store, we don't know all the domains our customers might want to configure, so the App domain list would be empty.
Is it somehow possible to add a App Domain to the manifest during runtime based on user input?
Is it possible to put a manifest file on a CDN that we can update when we want? This is btw not the solution we want as this requires internet access, and not all of our customers have that. But I'm still curious about the answer to this one.
Any other solutions to this problem?
Edit:
Our product is a web based product. We have a html widget inside our product which can be used in for instance a CMS, or as we try to do now, add it to the taskpane add-in for word and Powerpoint. The widget can be located on a specific url, on a given domain. Since the widget is part of our product, and our customers are choosing which domain they run our server product on, we can't preconfigure this in the add-in.
1.Is it somehow possible to add a App Domain to the manifest during runtime based on user input?
No. There is no way we can config the manifest at the runtime.
Is it possible to put a manifest file on a CDN that we can update when we want? This is btw not the solution we want as this requires internet access, and not all of our customers have that. But I'm still curious about the answer to this one.
No. In this scenario, we need to publish the manifest to the Office store.
Based on my understanding, the domains specify in the Office add-in only enable users navigate the HTML page in the task pane.
work against our customers own servers, running our own software, to display their pictures
Usually, this does not require the app domain configuration. Would you mind share more detail how the users connect their service?

How do you only load necessary parts of angular app based on user permissions/role?

I am currently in the research process of building my first application in angular2 and I have a question on how to restrict the client side javascript/content that a user will see based on the permissions they have in the application.
My application will have numerous permissions that will restrict users from seeing certain pages, along with the ability to do certain actions on a page. For a simplistic perspective, think of a configuration area for the tool/application that only someone with admin permission would be able to access. A non-privileged user would only see the main menu items and not the "Site Settings" which leads to the admin area and therefore hopefully none of the templates/components that encompass said area.
I came across this link (http://blog.mgechev.com/2015/12/30/angular2-router-dynamic-route-config-definition-creation/) and think this might be what I need, but was hoping for other people's thoughts who are more familiar with angular and other SPA type client-side javascript frameworks.
How do you setup an angular2 application so that only applicable templates and components are downloaded to the client based on the user's permissions? Does all of this get thrown out the window once you use a process that combines all the angular files to limit the number of js files the client browser needs to load? I realize the importance of securing the middle tier API, but don't see the point of having clients download a bunch of data/templates that they will never be able to access. Initial loads should be as fast as possible.

Create multiple databases dynamically in Microsoft Azure

I am a newbie in Microsoft Azure platform. I want to create multiple databases dynamically (We are developing multi-tenant model. So, Each organization should have their own database. Whenever an organization is registered with our system, we need to create a new database dynamically). Please provide some insights on this.
By using Azure Resource Manager Templates you can reliably deploy the whole infrastructure required by each organisation. So if they need a webserver, database and middleware servers, you can define the whole thing in a template and reliably deploy that for every client.
(from the above link)
You can deploy, manage, and monitor all of the resources for your solution as a group, rather than handling these resources individually.
You can repeatedly deploy your solution throughout the development lifecycle and have confidence your resources are deployed in a consistent state.
You can use declarative templates to define your deployment.
You can define the dependencies between resources so they are deployed in the correct order.
You can apply access control to all services in your resource group because Role-Based Access Control (RBAC) is natively integrated into the management platform.
You can apply tags to resources to logically organize all of the resources in your subscription.
You can clarify billing for your organization by viewing the rolled-up costs for the entire group or for a group of resources sharing the same tag.
The link above has a lot of resources for learning how to use templates as well as the syntax and usage.
There are a large number of templates at the Azure ARM Template Github page and even some pre-existing templates to get you started deploying SQL Server to Azure (there's also mysql and postgress if you prefer)
Plus many others that you can work through to get accustomed to how they work.
you can use the AZURE SQL Database REST API to do so, its as simple as sending a PUT Request to a URL https://management.azure.com/subscriptions/{subscription-id}/resourceGroups/{resource-group-name}/providers/microsoft.sql/servers/{server-name}/databases/{database-name}?api-version={api-version}
Check out these links for more details
https://msdn.microsoft.com/en-us/library/azure/mt163571.aspx
https://msdn.microsoft.com/en-us/library/azure/mt163685.aspx

Grails - switching data sources based on User

We are developing a Grails web application, where different users (customers) need to be pointed at different databases containing only their organization's data. Unfortunately, the separated databases are a requirement, and we are being asked to be able to have only 1 web application for everybody.
However, Grails expects only a single datasource pool connecting to one database.
We want to be able switch database connections, per session, based on the user that is logged in, where the different connections are read in from properties files during the BootStrap init().
So far, we have been unable to find a solution that does not seem to have race conditions, there is no plugin we can find, and it doesn't seem to be a popular issue.
Our most promising was creating a custom dynamic data source, set up in Bootstrap to define a map of organization->dataSource, and utilizing a closure defined in Bootstrap to find the appropriate dataSource before GORM behavior, but this seems to cause race condition when there is latency.
Does anyone have an idea how this switching can legitimately be performed?
Thanks
Considering Grails is built upon Spring your best bet is to develop your own resolvable datasource.
Dynamic datasource routing
Example of datasource routing
It's not clear in your question if you're deploying your application once, and trying to configure the DataSource used by User, or if you just want to configure by deployment.
If it's just per deployment, Grails allow you to externalize the configuration. You can set this to use a file in the classpath or in a static location.

Resources